Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/NmryaA0ountsmpeC44wOlpmXakM.roa
File: NmryaA0ountsmpeC44wOlpmXakM.roa (raw, json)
Hash identifier: cbY0Y9CZ91fh0ftTmdABjdIvM5tN41uB9sttXL9eqsQ=
Subject key identifier: 36:6A:F2:68:0D:28:BA:7B:6C:9A:97:82:E3:8C:0E:96:99:97:6A:43
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 0189253CD2BD845AFB45FA2D44B4C85B306A
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/NmryaA0ountsmpeC44wOlpmXakM.roa
Signing time: Wed 05 Jul 2023 08:48:10 +0000
ROA not before: Wed 05 Jul 2023 08:48:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202103
IP address blocks: 176.39.0.0/19 maxlen: 20
92.52.128.0/18 maxlen: 20
31.134.64.0/19 maxlen: 20
176.39.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:3c:d2:bd:84:5a:fb:45:fa:2d:44:b4:c8:5b:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jul 5 08:48:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366af2680d28ba7b6c9a9782e38c0e9699976a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:d0:f6:f4:2f:98:13:99:63:b0:e5:89:e4:
3e:07:61:f9:17:d6:c8:e6:7a:5d:6c:d7:a8:41:87:
6a:98:ff:93:6d:b0:8b:50:ed:3c:c2:d1:95:43:2c:
53:a6:db:50:a4:78:97:fa:7f:5a:5f:3c:21:5e:1e:
e2:22:e5:b1:3a:ec:fc:cd:a9:ff:36:93:f1:0c:8f:
09:4d:42:2d:bb:3e:b3:b8:c3:1e:e6:ef:57:b5:42:
92:3e:7d:b7:3c:49:72:83:d4:40:ae:94:92:d9:7f:
d1:7f:67:10:10:ea:d2:03:6d:90:dd:59:de:13:e1:
6a:01:1e:af:b9:7e:35:d0:83:a6:6f:20:22:a2:42:
27:7f:e4:15:d4:b2:8e:12:03:b8:e4:86:d7:0e:f5:
59:38:a1:06:cd:8b:b3:4f:fd:3a:8d:5f:97:08:5a:
59:e9:40:91:82:26:c3:ac:51:74:da:2f:b3:81:51:
ec:e4:d4:85:8e:d9:33:9d:1b:53:d4:4a:31:31:7c:
be:16:fc:26:05:a7:07:d5:25:15:b1:43:72:5d:01:
f4:9b:26:68:5e:fb:dd:56:f0:fe:2c:c7:af:3e:43:
49:82:b5:ba:8c:fd:23:d8:b7:a6:41:01:8d:d9:e2:
0a:41:ba:54:fb:ae:80:be:7f:b6:0e:7d:52:a3:49:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:F2:68:0D:28:BA:7B:6C:9A:97:82:E3:8C:0E:96:99:97:6A:43
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/NmryaA0ountsmpeC44wOlpmXakM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.64.0/19
92.52.128.0/18
176.39.0.0/19
176.39.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:f4:24:2e:d5:58:71:46:92:a0:bf:a8:ce:7f:98:81:73:d4:
88:b7:c4:f3:bb:1f:c7:3e:9d:20:9c:ef:bb:9f:75:8c:5f:88:
53:67:fe:d2:e0:f7:c9:a0:af:87:1d:14:00:a5:50:28:45:ab:
26:ff:bd:71:0b:32:88:50:7b:ef:c6:0c:95:d4:8f:3d:3d:ff:
55:a1:dd:c9:a3:43:d1:b1:65:3d:bc:31:e4:f1:c2:91:66:f9:
bf:9a:4c:79:3e:be:b5:6e:a6:c9:3c:40:70:f7:47:98:a0:30:
b8:8c:a5:20:e9:97:d4:6b:61:cd:ec:56:a3:23:ac:37:14:03:
03:be:d7:4b:7e:f1:b6:6a:05:16:3b:8d:0d:70:cd:61:8d:a4:
09:f6:50:64:21:ca:e2:f1:fa:d2:a4:38:d3:b9:9e:f7:eb:2d:
47:01:c9:97:e6:b6:7c:d8:bf:60:2b:57:0f:36:95:1d:db:4b:
c8:9f:32:95:ba:1b:9a:3a:2a:33:0b:a0:9c:8b:7a:48:6f:37:
0f:ba:b3:14:53:94:23:6e:6f:1d:df:5d:d1:0d:00:27:0f:2f:
be:2c:6d:94:dd:d4:35:d3:f8:cd:d1:38:23:39:23:eb:70:47:
72:79:55:09:61:23:60:63:05:fa:fc:4b:f0:a0:86:81:80:8c:
a7:75:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:37:57 2025 by rpki-client