Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Nxc7zoZP1cuSZQh5HpF0BuLeMc8.roa
File: Nxc7zoZP1cuSZQh5HpF0BuLeMc8.roa (raw, json)
Hash identifier: FJ7nEQAtRiNqRviGN4JuCfnehLTcpeSxOYpRjGHxaKU=
Subject key identifier: 37:17:3B:CE:86:4F:D5:CB:92:65:08:79:1E:91:74:06:E2:DE:31:CF
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 0182AFF6202720E7F27DD49BDFCE814BCE67
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Nxc7zoZP1cuSZQh5HpF0BuLeMc8.roa
Signing time: Thu 18 Aug 2022 07:58:39 +0000
ROA not before: Thu 18 Aug 2022 07:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31263
IP address blocks: 80.88.160.0/20 maxlen: 20
45.142.184.0/22 maxlen: 22
31.44.160.0/20 maxlen: 20
45.67.40.0/22 maxlen: 22
31.193.144.0/20 maxlen: 20
80.68.176.0/20 maxlen: 20
45.94.0.0/22 maxlen: 22
77.241.12.0/22 maxlen: 22
84.247.208.0/20 maxlen: 20
84.247.224.0/19 maxlen: 19
79.133.100.0/22 maxlen: 22
119.12.32.0/20 maxlen: 20
92.62.80.0/20 maxlen: 20
77.240.224.0/20 maxlen: 20
77.241.0.0/21 maxlen: 21
84.247.192.0/18 maxlen: 18
77.241.10.0/24 maxlen: 24
77.241.10.0/23 maxlen: 23
77.241.11.0/24 maxlen: 24
178.238.48.0/20 maxlen: 20
185.5.196.0/22 maxlen: 22
93.91.128.0/20 maxlen: 20
185.229.172.0/22 maxlen: 22
178.175.192.0/18 maxlen: 18
2a07:5ec0::/29 maxlen: 29
2a07:55c0::/29 maxlen: 29
2a07:580::/29 maxlen: 29
2a07:4f00::/29 maxlen: 29
2a02:600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:f6:20:27:20:e7:f2:7d:d4:9b:df:ce:81:4b:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Aug 18 07:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37173bce864fd5cb926508791e917406e2de31cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:19:e6:95:15:23:c9:15:d2:40:a4:b9:ad:
2e:28:a5:b6:5d:f1:7b:c1:d5:c7:32:16:dc:9d:8a:
73:df:28:90:8b:99:80:ab:18:8a:52:bb:d6:86:25:
88:ca:08:32:6b:72:4d:cd:f2:61:58:19:ff:00:b5:
8f:75:3f:b2:a7:49:09:ee:3e:03:38:2a:5a:a9:03:
be:bf:e3:88:98:16:60:7f:dc:b2:cf:91:22:25:8f:
72:2d:ef:97:a7:68:45:5a:9d:3a:ad:61:3b:48:6d:
03:fa:8d:08:7b:c8:bb:94:fb:d6:0b:79:a4:4c:6d:
5b:d5:68:f0:7c:e5:34:aa:3d:11:7b:da:d2:cd:4a:
6e:52:5e:dd:3d:b5:48:6e:63:41:40:d3:d6:f4:30:
16:02:3e:e8:79:b6:e2:de:36:ac:87:3c:a5:80:7e:
b9:c8:1f:b3:e1:d3:db:d7:cf:8a:4c:7b:aa:a7:e2:
0e:5f:76:eb:1c:a9:8e:71:29:93:12:95:75:9d:36:
5b:f3:f7:bd:48:b3:ad:d9:87:29:3c:2e:95:c2:05:
27:d1:7b:78:f6:94:35:f1:c1:a5:99:ff:12:cb:06:
9c:40:7e:fd:30:3f:15:8a:4a:e7:21:3c:85:34:be:
e7:e0:2a:45:b6:e4:e3:b7:fb:b5:b1:76:e7:f3:43:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:3B:CE:86:4F:D5:CB:92:65:08:79:1E:91:74:06:E2:DE:31:CF
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Nxc7zoZP1cuSZQh5HpF0BuLeMc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.160.0/20
31.193.144.0/20
45.67.40.0/22
45.94.0.0/22
45.142.184.0/22
77.240.224.0/20
77.241.0.0/21
77.241.10.0-77.241.15.255
79.133.100.0/22
80.68.176.0/20
80.88.160.0/20
84.247.192.0/18
92.62.80.0/20
93.91.128.0/20
119.12.32.0/20
178.175.192.0/18
178.238.48.0/20
185.5.196.0/22
185.229.172.0/22
IPv6:
2a02:600::/29
2a07:580::/29
2a07:4f00::/29
2a07:55c0::/29
2a07:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:76:23:38:1f:1d:13:e5:88:1b:b3:a8:4d:40:b7:db:0a:46:
0d:55:38:54:8e:4c:7a:3a:26:38:00:3d:dd:9f:f9:ed:80:27:
ee:ff:d0:9e:d7:94:2e:65:c4:e1:81:8a:99:b1:66:84:90:d2:
21:8d:7b:5d:3a:e2:c1:6b:d0:a0:53:de:1d:5a:98:20:7e:37:
6c:d9:cb:4e:1f:d9:d8:76:ae:f5:5c:d0:3d:4e:52:0d:50:d4:
5f:69:5f:3d:41:61:d3:09:b3:28:c4:6d:5b:e4:20:ce:a3:62:
de:f7:aa:f1:3a:57:07:d1:fd:b4:8c:e1:67:bd:e1:16:0a:2c:
6c:f0:a3:5d:a4:80:2a:99:23:46:12:92:c3:02:30:1e:ed:da:
97:34:96:48:ec:49:24:cf:a8:3f:14:e2:fa:7e:6b:f1:3c:fb:
d2:c8:55:9a:3c:f6:f1:0d:0a:fd:14:66:ed:84:09:25:e8:94:
2a:78:66:a0:52:33:33:28:73:ee:6b:56:14:06:32:02:9f:ac:
d6:62:be:5c:45:51:b4:5e:55:c5:29:7e:3d:2e:80:f3:e9:9b:
24:4c:81:9b:74:e4:72:a0:62:17:d6:43:c3:f5:bc:a8:20:43:
c3:f1:b4:af:9c:ef:4b:c8:6f:9b:5a:db:25:1c:0a:fe:cb:ea:
ec:5b:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:23 2025 by rpki-client