Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/NSvhjIg2wgrCf40NjDQrZLxhZcw.roa
File: NSvhjIg2wgrCf40NjDQrZLxhZcw.roa (raw, json)
Hash identifier: h1HqOQ7rxp/nj6/Yu98hF26pP/9qdLBiOM5S7jz5Hpg=
Subject key identifier: 35:2B:E1:8C:88:36:C2:0A:C2:7F:8D:0D:8C:34:2B:64:BC:61:65:CC
Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial: 01979A
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/NSvhjIg2wgrCf40NjDQrZLxhZcw.roa
Signing time: Mon 21 Mar 2022 15:14:15 +0000
ROA not before: Mon 21 Mar 2022 15:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210422
IP address blocks: 80.68.154.0/24 maxlen: 24
2a12:9f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104346 (0x1979a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
Validity
Not Before: Mar 21 15:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=352be18c8836c20ac27f8d0d8c342b64bc6165cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:63:66:52:7d:dd:6e:5f:30:47:4b:e6:a5:
4b:03:09:1f:16:fb:2c:84:d4:4d:e0:b6:dc:4d:0b:
cf:1f:36:fa:dd:a2:9c:2c:8f:62:05:33:7d:31:55:
71:04:34:d3:f2:6f:45:0c:03:b8:eb:7b:57:08:67:
17:cd:50:ca:1c:82:8c:5f:61:46:d1:df:5e:ad:d6:
86:26:ef:ba:0f:e7:c8:5f:02:ae:4b:6f:28:a9:9a:
cc:2d:b2:97:14:64:c8:68:84:ab:f3:32:17:8b:83:
8d:b4:4e:31:c0:3d:8e:6e:23:75:38:3b:54:bd:68:
dc:71:81:6e:83:8f:6e:bc:89:ff:04:d4:2c:7a:67:
eb:84:42:0e:2f:45:46:1a:97:e7:54:56:14:85:fb:
05:ad:59:15:42:0f:a3:b9:8f:e9:51:0a:94:e3:2b:
65:da:2a:a4:42:d1:48:0a:97:86:02:85:8e:1c:0e:
af:29:bc:d7:a0:61:b0:9d:84:91:be:3e:31:ea:5d:
d1:b9:3f:8b:6f:75:84:b4:da:93:c5:4f:60:f8:43:
5d:d5:38:66:6d:6d:3e:47:c6:de:98:92:b2:42:69:
38:a3:30:26:7d:1f:76:ac:68:b6:12:1b:06:dd:cf:
8a:7b:fe:23:4e:e9:63:24:d4:16:e1:7d:11:70:3c:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:E1:8C:88:36:C2:0A:C2:7F:8D:0D:8C:34:2B:64:BC:61:65:CC
X509v3 Authority Key Identifier:
keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/NSvhjIg2wgrCf40NjDQrZLxhZcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.154.0/24
IPv6:
2a12:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:84:8d:0f:ec:e6:9a:4c:b1:98:ad:09:5f:94:f3:1f:c0:2e:
58:1c:44:23:72:1b:a6:c0:da:39:e9:cf:cb:b7:be:11:87:cd:
10:73:42:ba:30:51:7d:03:25:7f:99:3d:15:e6:1f:38:f3:c2:
ef:a0:93:7d:5a:b4:be:69:19:dc:af:92:35:14:87:15:24:22:
2b:51:6b:17:51:ca:6c:77:63:e6:ec:4c:5b:d4:e6:da:07:c5:
22:5b:f1:d2:4a:c5:a7:c2:a0:8e:75:d0:03:2e:ab:9d:f6:e3:
d5:39:fe:df:f4:4a:54:0f:54:ba:78:eb:b1:71:42:aa:64:11:
40:24:2b:b5:a0:7c:fa:d0:13:99:ac:32:8c:7f:b5:9e:a0:05:
1b:7b:cd:2b:00:dc:02:4d:82:d3:5a:cd:5d:b2:cd:37:bb:7c:
2d:88:3a:01:5f:59:da:09:6f:a0:ef:7a:53:a6:19:a0:99:c0:
fc:d8:a5:ff:3e:e3:85:9f:8e:c7:0a:ec:cd:1e:fe:84:48:e6:
81:6c:46:71:72:c0:16:e4:e0:44:c2:be:80:1c:1f:0c:d7:af:
fa:99:0c:30:ce:65:a6:a5:d9:d7:0d:68:cf:de:30:e0:42:b7:
11:4f:57:55:95:4c:b1:17:bc:c3:bb:c1:17:3b:a6:fe:db:55:
e9:ac:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:16:07 2025 by rpki-client