Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/NpWyyDzhzItOoGp9xA3M8DqIbvI.roa
File: NpWyyDzhzItOoGp9xA3M8DqIbvI.roa (raw, json)
Hash identifier: 1p0CbblEAfxN7lWjf3zDDxf91+gqHJu5SyR2D5g/yHc=
Subject key identifier: 36:95:B2:C8:3C:E1:CC:8B:4E:A0:6A:7D:C4:0D:CC:F0:3A:88:6E:F2
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 01892646563745C1B5024B1FA7217C387D0E
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/NpWyyDzhzItOoGp9xA3M8DqIbvI.roa
Signing time: Wed 05 Jul 2023 13:38:11 +0000
ROA not before: Wed 05 Jul 2023 13:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:85c0:200::/40 maxlen: 48
2a13:85c0::/40 maxlen: 40
2a13:85c0:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:46:56:37:45:c1:b5:02:4b:1f:a7:21:7c:38:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jul 5 13:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3695b2c83ce1cc8b4ea06a7dc40dccf03a886ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:3e:c3:2c:8c:9c:b7:9b:4a:d5:3f:b4:6b:
90:c7:4a:83:eb:65:15:52:05:5a:18:f2:33:53:42:
9f:e2:2d:70:33:b2:9d:21:da:c1:2c:ad:41:59:5c:
34:22:ec:13:b8:f3:9f:4f:aa:71:c4:8f:fd:3a:42:
24:1d:4c:8a:88:db:b1:61:36:11:e5:c1:4c:0f:d3:
45:fa:bc:12:6a:ec:54:3d:5e:c3:fd:d9:2e:a5:05:
b3:84:c2:f9:4b:af:82:a1:ce:4b:61:67:f9:75:55:
78:05:5b:04:d3:b9:2f:fd:54:eb:d4:9d:9c:55:ae:
5b:b3:a1:a3:94:05:91:d1:45:82:b0:8d:a0:29:b5:
b5:fe:78:7b:ac:f9:e7:15:bf:78:4e:c5:39:37:9a:
55:1e:a6:1b:df:68:35:64:b4:09:83:bd:72:90:74:
0c:fb:1c:1e:9a:fd:b2:6e:e8:4d:40:ea:98:35:6b:
b7:c4:11:44:1e:95:a9:94:da:3f:eb:ba:5e:ce:d1:
1c:42:22:bf:8e:b3:3d:e2:b6:46:84:9c:ca:4f:81:
d6:b3:89:95:96:c6:ce:4e:4c:e9:6d:a6:d9:f3:e3:
c6:e6:2c:70:f0:5d:86:30:f1:5e:e5:88:53:8e:65:
26:12:05:91:80:e1:1c:3a:71:e4:f3:c1:f9:c7:10:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:B2:C8:3C:E1:CC:8B:4E:A0:6A:7D:C4:0D:CC:F0:3A:88:6E:F2
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/NpWyyDzhzItOoGp9xA3M8DqIbvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:85c0::-2a13:85c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:e9:8d:20:b4:f5:1f:76:97:43:72:59:3a:9a:fb:e5:40:d0:
f1:77:a4:64:23:63:61:6c:fd:40:9a:6b:ec:b1:2b:2e:53:9e:
29:fa:b2:0f:85:9c:b6:c4:05:83:da:5e:12:4f:73:6f:5b:3b:
29:e9:ba:ea:28:95:a9:c4:c0:fe:2f:73:f9:ee:4c:56:bc:e9:
f9:0e:53:ee:05:1e:52:e8:9c:1d:36:98:f1:05:67:7e:67:6b:
76:69:fd:62:5e:41:3b:19:12:0f:97:ad:2b:1f:69:56:e8:d8:
2a:e7:cd:81:20:e1:00:73:3a:76:22:d3:b0:c8:95:59:d6:50:
c1:a6:9a:35:66:63:c3:f7:7b:9e:0e:92:7a:5c:56:47:3f:26:
5e:08:02:0f:42:83:41:f1:5d:f2:1e:cd:cc:d5:09:11:f7:63:
7f:8b:c5:dc:45:3c:c8:2c:87:10:5c:5d:a8:ab:db:7c:2a:66:
f8:22:fc:41:de:09:88:a8:76:fd:19:94:7e:84:42:c0:cf:a9:
33:7c:db:f2:32:84:a8:1d:fe:cd:56:7f:37:86:eb:b2:ce:cb:
dc:77:47:23:85:d8:5b:c2:37:b7:de:8e:7e:d9:fd:dc:dc:9e:
68:52:9c:c0:2f:87:b2:6b:c0:65:4d:2e:2a:cc:41:9a:87:19:
ea:89:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:39:33 2025 by rpki-client