Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/NNUmf_yoKP7rRYqoOMotVN94bm0.roa
File: NNUmf_yoKP7rRYqoOMotVN94bm0.roa (raw, json)
Hash identifier: J+4g9VkGcy7WwcMVLBSOoug1voEGCOgcSSxf1zx8Eio=
Subject key identifier: 34:D5:26:7F:FC:A8:28:FE:EB:45:8A:A8:38:CA:2D:54:DF:78:6E:6D
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AD39AB98F648C8EEFBEEA2F9A435F5DCD
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/NNUmf_yoKP7rRYqoOMotVN94bm0.roa
Signing time: Tue 26 Sep 2023 22:27:27 +0000
ROA not before: Tue 26 Sep 2023 22:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15755
IP address blocks: 185.96.171.0/24 maxlen: 24
94.103.40.0/24 maxlen: 24
185.35.21.0/24 maxlen: 24
185.203.34.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:9a:b9:8f:64:8c:8e:ef:be:ea:2f:9a:43:5f:5d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Sep 26 22:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34d5267ffca828feeb458aa838ca2d54df786e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:88:1a:83:27:3b:7e:23:33:b8:66:b8:39:
2e:50:96:f4:0e:f4:35:dd:9f:c3:2d:e7:da:1a:3b:
56:bd:d5:69:8b:9d:1e:a8:af:4f:d7:ad:20:c3:4b:
f1:4c:95:fb:8d:72:2a:c6:59:bc:23:a9:6a:da:19:
08:c2:01:f2:cb:53:06:bd:ec:da:62:93:76:26:15:
66:59:b2:f8:18:f1:4e:49:88:fa:cc:20:26:19:a0:
b6:e9:8e:5f:d3:9a:46:7f:92:cf:79:99:26:74:df:
40:42:91:1d:70:40:69:73:8f:7d:9a:9e:e4:bb:32:
01:0a:b9:be:0e:8f:ae:01:95:3c:89:9f:13:2b:d9:
c1:c7:66:d5:30:7e:54:96:b0:5b:8d:87:48:60:fc:
8e:9e:d9:9b:7d:f3:b6:36:11:4d:df:d7:ff:f9:86:
69:71:56:bf:a8:70:9b:e1:aa:df:a3:c0:4d:83:48:
b6:48:82:78:85:7e:de:d1:c9:0e:1a:c4:50:b4:06:
fa:38:f2:7a:1b:30:c0:e1:8f:ea:c9:a9:9a:4a:49:
04:5b:a3:c5:01:98:13:e1:ed:06:3a:f7:9f:6e:50:
1a:17:59:88:63:f0:7d:73:72:b4:40:b7:c0:ab:5f:
bf:cf:20:5e:c2:8f:57:0e:d2:18:a9:4c:f7:4f:2e:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:26:7F:FC:A8:28:FE:EB:45:8A:A8:38:CA:2D:54:DF:78:6E:6D
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/NNUmf_yoKP7rRYqoOMotVN94bm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.40.0/24
185.35.21.0/24
185.96.171.0/24
185.203.34.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:34:8c:f5:98:70:76:1c:ce:af:ac:73:61:36:32:a5:be:36:
9a:38:9f:d9:18:53:3c:a3:5e:dc:22:e1:03:e6:93:70:ad:c9:
fe:64:38:cd:93:53:1a:b6:75:36:45:a3:a1:5a:1b:2e:80:6f:
2d:a4:a4:22:a3:da:62:67:ea:7a:7f:c5:e1:53:14:96:77:7b:
70:9f:5a:66:12:4d:68:62:55:a2:fd:49:69:53:2b:c3:cb:1a:
d6:99:9f:61:10:4a:b4:44:c0:bb:62:4b:a4:79:1e:80:4f:59:
23:7f:ec:3a:ca:d2:c6:95:56:d0:21:8f:2b:ea:c2:1b:d2:85:
46:ad:3f:24:7f:1a:30:3c:fb:e6:ca:8b:8f:d6:9e:63:18:da:
ae:a5:db:25:23:51:d7:d7:ed:e8:23:37:03:28:6b:28:18:53:
1b:cf:84:81:51:6d:3a:3c:dd:db:2d:26:5c:fe:0b:28:33:1b:
cb:c7:2d:4d:84:6e:4f:fb:82:55:ff:ed:21:d2:f4:91:70:d1:
f8:87:4f:b9:91:ee:9f:8d:9c:19:3b:8b:e8:2c:93:e3:bf:dd:
3e:18:f3:26:28:8b:88:9b:4f:4e:6c:14:8d:76:a6:b2:fc:d4:
bd:db:ce:41:eb:33:64:3f:1f:0f:11:2f:8d:5b:ea:d4:94:1d:
c3:d3:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:01:26 2025 by rpki-client