Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/NNFGbbfvwYepdMEbayRc7UMq8S4.roa
File: NNFGbbfvwYepdMEbayRc7UMq8S4.roa (raw, json)
Hash identifier: C7BpeFwLRAxmizFINU+bvmTjZcbgB/KQhz2nZ8bzz2A=
Subject key identifier: 34:D1:46:6D:B7:EF:C1:87:A9:74:C1:1B:6B:24:5C:ED:43:2A:F1:2E
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 01857103292DF126AA272D76AEC4B817D26A
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/NNFGbbfvwYepdMEbayRc7UMq8S4.roa
Signing time: Mon 02 Jan 2023 05:45:10 +0000
ROA not before: Mon 02 Jan 2023 05:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50196
IP address blocks: 77.241.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:29:2d:f1:26:aa:27:2d:76:ae:c4:b8:17:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 2 05:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34d1466db7efc187a974c11b6b245ced432af12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:3c:55:1b:7c:fd:09:74:fd:99:60:20:7d:
ac:b1:c7:9c:c1:64:15:f7:a8:3d:67:36:85:e5:e0:
92:b4:e8:38:de:b9:b8:fc:eb:f9:23:4c:62:05:3a:
99:b7:1d:c3:24:b0:ba:af:39:9a:d0:b6:2c:c1:47:
53:ae:48:25:a0:74:de:22:93:a3:26:7f:36:f0:1a:
63:bd:8c:cf:8f:e4:48:32:bb:21:48:cc:b0:8a:52:
38:cf:50:f6:22:7f:d5:38:4e:dc:9e:f6:db:c4:a1:
10:3c:c2:8b:e6:18:1b:be:81:ae:f5:f0:55:14:f2:
ad:c1:32:da:b8:f0:bb:32:51:63:ea:cd:ee:2e:60:
20:bc:1b:e9:c9:2d:cc:0b:00:c7:8c:59:ca:b2:96:
91:8d:d6:f2:e0:0a:d7:a0:8a:fe:38:1a:15:9d:fb:
40:fa:5c:5e:a9:dc:97:7e:57:f3:a9:5b:a8:32:55:
ba:d3:39:fc:e0:4b:eb:91:ee:b0:8a:da:8b:86:d5:
28:5a:7e:cb:bc:48:69:c5:d3:d9:5b:27:e3:29:11:
03:4c:96:7d:0e:bc:ac:ec:32:fd:69:cf:7c:f7:53:
11:d9:2a:17:b2:49:b2:33:37:d4:b7:82:3a:14:64:
75:d1:e4:27:a0:65:f1:5d:55:87:9f:c5:5b:22:b2:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:46:6D:B7:EF:C1:87:A9:74:C1:1B:6B:24:5C:ED:43:2A:F1:2E
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/NNFGbbfvwYepdMEbayRc7UMq8S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.8.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:52:85:7a:79:e6:f0:bd:b4:30:a5:2f:56:bf:d3:15:55:0d:
3c:68:5c:d3:8e:42:37:4f:f8:da:db:68:81:a7:81:40:98:08:
e7:00:23:fd:40:b7:42:af:d2:d6:89:24:a8:93:87:ff:17:42:
f7:76:4b:e8:87:5c:92:22:76:c8:79:e2:6f:1e:d6:1b:78:a7:
ba:4c:55:09:67:18:cc:37:7b:e9:b7:d0:cf:e8:08:b3:ba:d1:
c0:c3:19:5c:b5:d6:e0:20:bf:86:48:6c:3d:a3:df:bd:0a:a7:
3d:b2:11:0c:e1:f5:4e:7d:cf:73:c4:49:2a:fc:c5:35:18:78:
d2:8b:93:de:1f:65:ee:4a:4d:c4:bd:21:ee:c4:9d:be:d1:b1:
c4:e2:0b:8e:28:29:9c:14:30:f7:28:c5:a5:4d:f2:f3:ab:29:
b5:d1:65:36:33:53:33:a8:90:e2:19:5b:02:a6:2d:f5:c2:70:
32:d0:07:cf:fd:a8:0a:c0:82:20:6e:1d:08:cc:d1:5d:f2:56:
08:52:e9:cb:4e:ae:2e:1d:9e:d5:ac:15:b5:53:48:d2:f1:ec:
f6:57:0a:63:a7:31:ba:f9:54:92:04:ac:8c:e6:87:8f:06:14:
6e:4a:f6:39:c2:58:de:dc:25:a1:26:4b:78:68:62:dd:d6:8f:
80:ca:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:14 2025 by rpki-client