Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/NLRBqQTg1vKvAnEj8nXdo8ZtLbE.roa
File: NLRBqQTg1vKvAnEj8nXdo8ZtLbE.roa (raw, json)
Hash identifier: sdHvgH2TetUFIuvpBBQtn6FAFl7/H4s3jL5bX/tw3Hc=
Subject key identifier: 34:B4:41:A9:04:E0:D6:F2:AF:02:71:23:F2:75:DD:A3:C6:6D:2D:B1
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 15754A51
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/NLRBqQTg1vKvAnEj8nXdo8ZtLbE.roa
Signing time: Sat 01 Jan 2022 14:03:48 +0000
ROA not before: Sat 01 Jan 2022 14:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59984
IP address blocks: 185.63.104.0/22 maxlen: 22
2a03:ca0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360008273 (0x15754a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: Jan 1 14:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34b441a904e0d6f2af027123f275dda3c66d2db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:74:09:e7:93:38:0b:32:cb:79:47:b0:5c:
d1:28:3b:65:83:03:d3:c3:78:57:05:6d:89:84:54:
2e:9d:dd:ca:28:5d:7b:fd:a9:fb:01:a2:bb:31:a0:
9c:e6:4b:a0:13:f1:3f:47:f8:93:3c:a2:e0:be:cf:
75:97:b1:d9:bf:78:f0:aa:58:04:ba:31:05:c0:86:
46:e7:85:b3:3b:d4:46:55:c3:dc:66:6d:7b:1f:91:
7e:19:a1:cd:d3:84:28:6f:a1:11:26:5b:dc:51:11:
1b:e6:30:37:4c:70:21:13:0a:c0:4f:ea:90:45:a0:
83:28:7a:ef:4a:d7:bf:48:e8:b4:3e:26:f0:cc:b1:
81:c3:01:6c:ef:94:7b:b5:df:f5:e9:4f:f7:e9:fd:
75:00:69:c5:bd:da:d3:3b:ad:da:07:cd:36:2c:8d:
74:e1:0c:8b:90:46:90:98:3c:16:24:11:08:b9:86:
3b:31:e8:1e:9c:55:ff:06:db:d6:93:e6:69:51:fe:
d0:cf:f7:95:87:a1:0e:96:a7:bb:56:d9:43:93:f3:
19:bd:dd:5e:16:76:9b:d9:95:9b:ed:fe:e6:8d:43:
c9:de:6d:0d:f8:55:95:54:9f:b9:22:64:1d:e0:7f:
cd:b3:4b:e5:13:22:6c:75:e3:7b:10:fe:f5:5c:f8:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B4:41:A9:04:E0:D6:F2:AF:02:71:23:F2:75:DD:A3:C6:6D:2D:B1
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/NLRBqQTg1vKvAnEj8nXdo8ZtLbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.104.0/22
IPv6:
2a03:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
78:b6:96:a5:1d:ee:e1:bf:4d:3b:25:18:a9:58:f0:0c:f6:90:
45:de:0c:33:95:18:50:c9:29:f7:9d:6c:1e:f4:c7:a3:3e:5a:
a9:5e:5d:2c:93:3f:31:a6:d1:ac:15:b2:40:fb:17:02:dd:05:
f7:ee:1b:fb:e0:9f:0b:36:98:1c:b6:01:5f:15:ee:4b:2d:97:
b2:25:fd:11:1c:61:e8:d0:19:68:d7:ce:d9:f8:a4:5a:64:cd:
1a:d4:11:cf:6c:14:32:82:7a:bb:b9:2f:04:a0:5a:16:36:65:
60:56:75:b3:82:6d:3f:0f:69:f5:44:16:b9:86:a2:86:9f:5c:
71:f4:95:68:82:0d:be:29:cc:bf:d9:45:d7:c6:60:62:59:56:
ae:ea:8b:ec:69:0b:cb:b6:91:ef:88:f7:3c:35:57:dc:c3:a8:
95:ac:1a:88:95:6a:c5:70:70:29:5a:8b:9e:ed:e7:63:32:5c:
81:02:10:d5:0d:6d:94:7f:7f:5e:54:f1:88:63:d3:6c:a5:31:
79:d9:52:16:9b:da:c8:36:a6:37:39:5a:e6:e2:89:f1:61:a4:
5c:85:03:13:ef:38:ec:4a:4a:3f:06:9d:8a:b5:c2:33:29:60:
2f:da:3c:46:8b:1a:68:6c:23:4d:2a:2f:e2:fd:31:df:7b:b5:
be:32:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:51:22 2025 by rpki-client