Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/Nj2KL6pDMg3HXjxQ2BDbGAmv9PU.roa
File: Nj2KL6pDMg3HXjxQ2BDbGAmv9PU.roa (raw, json)
Hash identifier: dhARnpz6NHm4AY8m8zyjvFFm18Q6mAJuOUnjM1j4/Tw=
Subject key identifier: 36:3D:8A:2F:AA:43:32:0D:C7:5E:3C:50:D8:10:DB:18:09:AF:F4:F5
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0782014B
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/Nj2KL6pDMg3HXjxQ2BDbGAmv9PU.roa
Signing time: Sat 01 Jan 2022 11:59:46 +0000
ROA not before: Sat 01 Jan 2022 11:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43489
IP address blocks: 89.111.135.0/24 maxlen: 24
31.177.70.0/24 maxlen: 24
2a01:d8:8::/48 maxlen: 48
2a02:2090:6800::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125960523 (0x782014b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 11:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=363d8a2faa43320dc75e3c50d810db1809aff4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:8e:bf:d3:5f:77:7a:54:b0:ac:0e:f5:dd:
9f:55:d0:3f:b2:1d:bd:70:36:c0:05:1e:8e:48:c2:
e5:cf:7c:e5:5a:0d:d4:4e:4d:64:2b:8a:7c:ae:f6:
12:5b:fa:d8:23:56:bd:8f:ec:db:98:ec:82:53:d3:
7e:02:93:08:15:48:74:43:fb:ee:6b:4c:19:3e:de:
22:48:56:39:52:cf:13:53:c0:de:f5:01:4a:4f:e4:
99:33:ce:f6:dd:51:3e:05:0e:f3:4f:39:41:6d:4b:
be:97:47:ea:50:51:40:41:ee:e8:3d:99:00:ee:d4:
d2:3a:1c:3e:f8:62:ff:ef:31:f5:63:28:05:dc:3a:
b8:3a:6c:e5:e5:a4:82:66:88:5f:1e:e2:35:b9:66:
af:77:7c:ec:a9:02:5b:1a:4c:e6:dd:19:28:6f:8e:
19:cd:9d:a7:02:14:99:7e:6f:4b:da:70:d5:14:d3:
70:01:af:5b:b7:2d:b5:c5:36:19:49:de:5f:47:b5:
09:8a:bf:19:30:13:1a:7d:7f:af:9f:51:ac:ce:bd:
63:55:60:3c:84:3b:37:6e:c4:9f:60:80:61:9f:6a:
1f:70:51:30:22:d5:b2:e7:8d:57:41:5a:4f:ca:37:
11:93:92:20:4e:f9:c5:c5:bf:51:57:1b:53:d5:87:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:8A:2F:AA:43:32:0D:C7:5E:3C:50:D8:10:DB:18:09:AF:F4:F5
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/Nj2KL6pDMg3HXjxQ2BDbGAmv9PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.70.0/24
89.111.135.0/24
IPv6:
2a01:d8:8::/48
2a02:2090:6800::/48
Signature Algorithm: sha256WithRSAEncryption
73:3c:b7:41:e1:1c:49:b0:0b:84:8f:20:5b:a4:27:64:82:ab:
f4:62:eb:a4:b1:03:b9:8e:13:7f:5d:2a:97:7b:7b:83:7a:be:
26:50:0a:55:e3:93:32:08:27:59:f4:0e:f5:2a:3b:7f:d1:db:
34:b6:2d:1f:04:5a:7c:cf:2d:8c:84:cc:f3:a6:42:95:04:2d:
6c:4d:f3:e5:2c:b5:85:58:db:67:62:95:24:9d:ba:8e:e1:d0:
75:92:10:a6:fc:62:49:bf:47:37:ad:9d:53:07:87:71:3c:2e:
a2:66:55:11:22:7c:a0:6f:b6:4e:4a:18:a4:c7:c4:68:97:76:
29:5c:98:ad:4d:c7:46:74:73:7b:eb:68:03:11:f2:a1:06:4a:
d5:eb:27:0e:e6:d3:66:27:7e:70:2f:a6:d3:46:2b:3c:aa:f2:
28:4e:98:2e:f1:20:45:85:74:0c:28:8d:9d:27:be:14:6f:2d:
2c:d2:1b:be:ca:0f:fb:2a:cc:b4:a6:4c:2d:56:8c:c6:6f:e2:
bc:d8:74:be:23:39:03:e0:6c:a6:2f:43:34:64:3a:f2:c7:9e:
c8:a8:5d:29:bd:49:8d:4d:7c:6d:d2:6f:41:7c:75:19:ce:51:
22:f7:8d:c0:79:4b:48:09:c0:4e:6a:6c:f2:ba:74:0d:23:4c:
61:05:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:47:07 2025 by rpki-client