Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/nYQ7-NLIBtuLmSMx8T2sMchxFRI.roa
File: nYQ7-NLIBtuLmSMx8T2sMchxFRI.roa (raw, json)
Hash identifier: H0PrptgMCXT6xiRTvZiakTkEdY9COlZwYqDz6uaABxk=
Subject key identifier: 9D:84:3B:F8:D2:C8:06:DB:8B:99:23:31:F1:3D:AC:31:C8:71:15:12
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 0D6D5FF6
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/nYQ7-NLIBtuLmSMx8T2sMchxFRI.roa
Signing time: Sat 01 Jan 2022 03:00:46 +0000
ROA not before: Sat 01 Jan 2022 03:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15615
IP address blocks: 92.63.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225271798 (0xd6d5ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Jan 1 03:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d843bf8d2c806db8b992331f13dac31c8711512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:d7:5c:88:b8:7c:32:a2:37:74:20:2a:0f:
ec:f1:bd:52:ed:b6:d0:bd:a4:ea:70:b1:6b:cf:d3:
5e:59:96:43:d1:71:b0:30:b4:04:84:1b:9d:23:71:
cf:98:a7:f5:41:b4:64:ae:64:d4:1d:c3:26:53:17:
f8:de:18:3d:3d:95:21:a8:da:63:90:89:16:8b:b9:
cd:42:83:07:46:04:7e:3d:04:92:f3:59:73:a2:04:
04:24:28:8c:d9:31:c5:3c:3c:c4:cc:d3:20:0e:d5:
75:e5:15:af:b8:c7:0e:1b:a1:ac:2c:14:e5:85:5f:
10:36:5e:f6:fe:fc:0e:78:8f:9b:f6:3e:dd:44:bc:
33:56:87:65:2d:ba:67:5f:92:79:8c:b9:71:30:a7:
4c:53:37:60:fd:cd:18:1b:66:ba:d4:18:31:2e:9a:
6e:ab:7f:f5:ac:0c:8a:13:23:5f:e8:5d:b3:b1:91:
ac:1c:d3:e5:33:e6:11:bc:8b:62:d5:3d:4c:1a:f7:
05:35:f7:2d:49:5f:ef:b6:a0:e1:15:e7:13:fd:20:
e3:a2:8f:ce:7c:70:13:9a:d4:5d:ae:13:70:92:68:
5f:41:7b:8e:8b:a8:d0:5e:64:0c:7e:d1:9a:c6:03:
9f:67:bc:13:41:c3:51:64:90:5d:94:65:cf:8c:52:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:3B:F8:D2:C8:06:DB:8B:99:23:31:F1:3D:AC:31:C8:71:15:12
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/nYQ7-NLIBtuLmSMx8T2sMchxFRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.87.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fd:e8:39:b0:69:97:91:c1:01:59:71:62:f3:d5:0c:98:19:
a5:55:34:6d:2e:68:60:84:a3:d2:78:ac:6f:56:dd:ea:68:3b:
52:fd:52:0f:14:8c:99:ef:51:71:df:96:65:78:5b:e6:44:e6:
57:29:9a:42:99:80:b0:78:11:34:7d:3a:0a:06:1f:da:9c:90:
bf:77:56:29:b5:9a:89:a9:97:23:66:f8:08:dd:04:9a:50:02:
dc:2a:85:88:9b:cf:52:bb:e4:a7:30:2f:e7:22:4d:6c:8c:f9:
05:e7:f8:7b:4e:b3:79:e3:04:3f:89:95:6b:9a:08:ae:16:6c:
bf:bd:3a:0c:55:82:be:6d:f3:b5:2a:98:f6:bf:1c:47:3c:79:
8a:25:bc:df:da:76:46:a1:d9:8c:ab:14:df:5c:9c:64:e5:87:
ec:b8:23:5a:63:d8:1b:7d:e5:7b:2a:4d:99:71:c6:9b:5f:0e:
76:2f:83:22:ae:da:21:ac:33:a9:a5:9f:82:67:a7:5d:a5:3c:
11:1b:1b:fb:4a:ba:64:23:e1:97:b4:b9:f3:d3:53:0f:a2:6b:
dd:18:40:8f:a3:74:57:01:c7:92:fe:d3:b5:88:08:d1:e1:4b:
4a:ec:18:05:3b:4d:32:55:4b:0f:28:54:e3:8a:f0:d0:11:3c:
d7:4b:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org