Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/NqzgovS4ttMxu0Yg-062XzMK14s.roa
File: NqzgovS4ttMxu0Yg-062XzMK14s.roa (raw, json)
Hash identifier: 76rjt5bK44er/iWGPXXZnU6HZlXjoHIVF/qtDbXozOs=
Subject key identifier: 36:AC:E0:A2:F4:B8:B6:D3:31:BB:46:20:FB:4E:B6:5F:33:0A:D7:8B
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 01856BDC6BEC2DC674215C22ED0F57A266C4
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/NqzgovS4ttMxu0Yg-062XzMK14s.roa
Signing time: Sun 01 Jan 2023 05:44:45 +0000
ROA not before: Sun 01 Jan 2023 05:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24940
IP address blocks: 195.60.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:6b:ec:2d:c6:74:21:5c:22:ed:0f:57:a2:66:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jan 1 05:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36ace0a2f4b8b6d331bb4620fb4eb65f330ad78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:a3:fc:90:dd:d9:ed:65:54:2f:16:e3:13:
d1:88:ff:7d:4b:ad:56:59:c8:09:86:9c:ea:e9:e2:
dd:14:b7:8c:b7:1f:6a:93:2b:79:a8:25:51:31:1b:
e1:67:46:58:33:ab:da:ad:65:52:20:45:4d:20:ca:
bb:a7:31:e8:5c:cc:aa:c7:db:53:83:c5:a5:1b:12:
3f:7c:a3:01:66:cd:7a:71:ff:9d:07:e1:21:e1:3a:
63:86:2a:d2:7e:a3:5c:5f:1b:27:f8:4e:9f:b6:a8:
78:33:85:55:e3:3c:cc:70:00:f6:c9:8a:4c:9e:cc:
89:de:34:d8:03:67:23:b6:3c:e4:3b:04:28:25:8f:
b8:0c:6f:45:57:d8:05:07:e7:f0:18:4f:1e:80:ff:
30:d4:39:49:28:8e:de:c0:5f:0d:26:c4:d3:cc:8f:
96:fe:fb:00:7c:91:a2:a2:2c:1c:37:87:38:c9:f4:
d2:de:15:8f:b5:56:2c:c9:9c:cf:7e:c1:7b:24:7a:
72:6f:9c:f9:f5:0c:a4:36:8d:70:5e:0b:cb:af:2b:
a7:61:9a:ba:af:79:df:ed:73:ee:52:f5:0e:24:22:
ca:87:c3:00:35:b7:81:6b:75:f2:3c:16:a6:06:0d:
69:17:87:61:ac:96:19:11:d6:8d:81:f1:96:4d:76:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:E0:A2:F4:B8:B6:D3:31:BB:46:20:FB:4E:B6:5F:33:0A:D7:8B
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/NqzgovS4ttMxu0Yg-062XzMK14s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.226.0/24
Signature Algorithm: sha256WithRSAEncryption
13:36:9b:e8:b8:0a:71:af:46:56:b6:0b:b7:39:56:9f:6f:45:
c2:a0:f6:21:f5:53:e2:f3:31:ab:6c:77:36:be:4a:78:8c:9e:
ed:8c:06:69:97:f8:44:8e:5a:ef:23:15:6c:60:9b:c3:b8:9f:
4f:99:90:7d:5e:84:bf:74:65:b6:d3:dc:8e:96:8d:dc:52:48:
a0:52:b0:a2:da:4b:98:10:3e:7b:f5:48:a9:5a:18:05:36:37:
a1:ad:03:c9:3b:d2:6d:ef:68:c3:ff:b4:c9:95:43:72:00:03:
5e:80:86:01:b7:d7:3b:2e:69:42:5a:9b:e1:43:dd:b9:3a:8b:
cf:1a:08:c8:03:3e:3e:d6:c5:69:64:65:74:75:b5:87:ba:2d:
8c:9c:0e:38:2f:6f:d0:09:e9:cc:88:9a:20:ee:95:dc:95:ff:
8f:d4:f9:8f:db:74:3a:86:59:a0:2a:19:6f:08:21:cd:8c:14:
b2:a4:e1:01:7e:04:c0:d7:1e:91:7d:ab:36:3b:f5:1f:6d:e4:
90:ab:7f:ee:81:18:2a:6b:9f:f3:b5:5c:f5:30:68:f8:f5:23:
b6:22:49:cb:0d:11:2d:90:d4:ad:5d:b0:4f:5f:18:94:48:5a:
36:ee:bb:7d:2d:9b:57:7c:db:26:fb:13:e6:8b:82:00:8d:7d:
16:79:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:15 2025 by rpki-client