Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/N0KLyrf8qFTbJM7ODC-lysOu5N4.roa
File: N0KLyrf8qFTbJM7ODC-lysOu5N4.roa (raw, json)
Hash identifier: wvAT7VbyRJPrblWSOpfxrTXvwdtflSyh3heQUexrF0M=
Subject key identifier: 37:42:8B:CA:B7:FC:A8:54:DB:24:CE:CE:0C:2F:A5:CA:C3:AE:E4:DE
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 018BA9CFECAD073A8E487CF595E6974C6429
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/N0KLyrf8qFTbJM7ODC-lysOu5N4.roa
Signing time: Tue 07 Nov 2023 12:44:17 +0000
ROA not before: Tue 07 Nov 2023 12:44:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201902
IP address blocks: 185.59.92.0/22 maxlen: 24
5.182.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:cf:ec:ad:07:3a:8e:48:7c:f5:95:e6:97:4c:64:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Nov 7 12:44:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37428bcab7fca854db24cece0c2fa5cac3aee4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:78:90:aa:39:48:6c:7a:5a:d0:68:9b:c7:
d0:23:6c:63:88:db:31:7a:ad:fd:1e:f0:cf:7c:55:
b4:cb:5d:04:3f:1f:2e:b6:76:fd:35:7b:ad:3d:81:
69:ee:16:43:ef:f3:22:0c:6d:af:15:68:49:ec:e2:
ad:50:9a:fb:22:4c:83:5e:df:95:4a:90:d9:0b:e3:
a8:f5:5b:1a:3b:a6:46:c4:68:ff:44:0a:f2:47:b6:
36:21:5d:87:5a:18:0b:4f:ee:b6:8d:a6:09:d0:94:
61:4b:0c:a6:1d:28:ca:11:fb:d2:85:c1:eb:9c:d6:
f9:a7:73:b0:6d:6b:6d:b0:37:ff:9d:a4:ff:af:0a:
9b:00:e1:96:05:f8:f7:39:af:3c:3a:59:1c:22:e4:
62:92:7f:62:8d:1c:d8:01:8f:4d:dd:84:67:8a:19:
29:8e:b3:b2:b7:70:38:d2:ba:d6:d6:8a:c3:b1:c3:
c1:20:bc:35:e2:eb:95:80:83:a9:b3:a0:c9:65:c6:
a9:85:2a:cc:06:8e:eb:84:fc:36:ba:ae:7e:e6:12:
e2:28:9b:ec:49:d3:49:91:33:53:ab:e3:fd:8a:60:
8f:c3:88:12:fd:47:ed:8a:fa:44:fe:bb:33:09:1a:
1e:30:cc:85:3a:88:19:91:de:57:b8:ab:2e:30:52:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:8B:CA:B7:FC:A8:54:DB:24:CE:CE:0C:2F:A5:CA:C3:AE:E4:DE
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/N0KLyrf8qFTbJM7ODC-lysOu5N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.8.0/22
185.59.92.0/22
Signature Algorithm: sha256WithRSAEncryption
91:a7:e8:d1:02:f0:c1:f9:3a:b1:5d:f7:50:7c:a0:07:9e:93:
5f:c2:a4:50:b2:a6:87:b4:3d:99:17:d5:03:27:50:ba:14:fc:
39:63:20:73:da:fd:6b:76:c3:99:a6:81:bb:46:76:cd:d6:2e:
53:f8:ad:50:6f:8c:7e:6c:be:9c:e3:60:da:7a:d6:f4:25:d7:
12:cf:56:40:6b:de:d2:46:5c:85:d7:8d:07:aa:c2:8f:a5:05:
30:7b:67:c5:11:b4:2a:90:56:12:77:57:68:73:b0:75:60:6e:
a7:98:50:28:c7:db:f6:de:bf:ad:70:f5:60:1e:2d:97:c1:f0:
79:96:01:ec:04:a5:52:a0:74:51:e2:ed:f1:6a:3a:14:53:c3:
ce:aa:5f:ff:32:a6:43:3f:0a:64:d5:96:b9:fa:4c:5d:ac:e3:
25:4e:2b:5c:b1:5e:e1:14:fe:1b:43:2b:a7:36:3b:be:27:c8:
17:1e:53:38:27:91:07:a4:b8:06:2a:b3:9d:42:86:17:1a:60:
68:02:cf:27:b0:28:b0:bb:31:aa:9b:cd:e8:ad:eb:e3:8c:4f:
5e:6b:55:cf:4a:e6:d7:a4:bf:2a:c9:ea:4a:4a:0c:c9:68:f3:
4e:99:02:4b:63:3f:87:49:02:02:30:29:1d:b8:23:c1:3e:e1:
05:76:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:23 2025 by rpki-client