Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/Nj1dENPSP8iR66nThagAE36SkZc.roa
File: Nj1dENPSP8iR66nThagAE36SkZc.roa (raw, json)
Hash identifier: DOHln74WhrhO0EXf1zTFXZQ5i4nT4CrRJbTAJa8TxqE=
Subject key identifier: 36:3D:5D:10:D3:D2:3F:C8:91:EB:A9:D3:85:A8:00:13:7E:92:91:97
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 09761600
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/Nj1dENPSP8iR66nThagAE36SkZc.roa
Signing time: Sat 19 Feb 2022 21:02:47 +0000
ROA not before: Sat 19 Feb 2022 21:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9583
IP address blocks: 159.151.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158733824 (0x9761600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Feb 19 21:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=363d5d10d3d23fc891eba9d385a800137e929197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:8b:9f:ff:2f:e7:d3:19:dd:e8:c5:67:31:
2f:04:04:1f:f5:d0:24:77:0b:42:8c:db:86:e5:03:
39:c2:4b:bc:8e:f3:97:a5:a1:63:da:bc:0d:80:58:
ed:ab:03:85:dc:93:e7:45:3e:a6:a4:3f:25:d6:09:
78:07:7c:b7:5d:a6:a1:01:81:a5:d3:63:b2:d2:e1:
c0:5e:80:dd:75:8a:e3:46:6d:9f:92:fc:60:98:d1:
23:d6:bb:49:44:98:00:2e:4b:cd:d0:f7:53:a3:08:
9b:cc:ee:2e:8b:5c:67:d1:7b:69:4f:f7:2f:0b:69:
62:06:2f:3f:c1:6b:f0:b5:5a:4a:7d:bc:cd:9b:ae:
13:ec:b4:94:e3:b0:c5:11:54:e4:d8:fd:f9:e9:76:
95:67:46:41:19:ba:18:a6:0d:54:69:86:69:57:07:
8d:42:69:f9:32:94:6d:c0:3d:03:ea:16:0b:aa:dd:
c4:eb:94:17:f7:b4:41:e8:9e:0c:dd:04:fb:20:00:
2e:e1:8d:ef:0a:5c:9f:44:3d:e7:c9:49:3e:b9:50:
7b:c2:0f:ee:e7:d8:70:11:63:8a:a3:1d:5b:79:ff:
66:c3:da:c2:e1:0b:c8:c4:2a:a5:ff:91:1c:1e:d6:
64:70:fa:03:0e:91:01:32:8c:e3:cd:52:dc:7e:10:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:5D:10:D3:D2:3F:C8:91:EB:A9:D3:85:A8:00:13:7E:92:91:97
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/Nj1dENPSP8iR66nThagAE36SkZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.254.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e0:69:88:6d:9a:ec:c3:77:6b:31:9e:59:8a:68:76:d9:70:
20:ae:4b:2c:70:bc:1e:a4:af:1b:d4:6a:c1:19:ce:f7:a2:fc:
27:0c:2a:9c:04:25:00:e3:e7:29:0f:cb:16:78:c6:50:ec:3d:
f7:07:7b:5a:a1:1b:2c:9c:f5:26:cc:6a:f5:dc:11:6a:f5:7c:
4e:b9:f6:00:fd:f2:b3:55:7e:cf:35:32:2e:55:34:40:48:8c:
a4:68:de:0e:c3:ea:06:21:e4:68:b8:79:97:bb:3c:f0:43:e4:
97:22:d3:48:f2:82:ae:a1:69:90:97:c4:c0:82:3f:a4:29:17:
0e:ff:18:27:eb:3d:67:a9:83:80:42:1a:e0:2e:a1:1c:ae:9c:
9f:73:82:71:74:34:f1:0f:1d:b3:ee:e8:9a:40:5d:10:41:d5:
c1:de:08:cc:6b:b1:22:fb:69:78:79:a1:3c:db:d5:4a:b3:7c:
a1:fb:d1:fe:b9:32:5f:0f:3b:79:01:24:0c:4c:ac:3f:48:aa:
05:6c:a0:69:7a:76:41:a1:a1:59:0c:43:a8:81:ca:af:a7:af:
03:65:dd:72:3f:f4:0c:c0:18:78:94:31:6d:76:9d:31:1c:17:
59:7f:b6:c8:51:d4:c5:28:98:b2:f5:b2:bf:4f:2b:26:cc:4f:
25:ce:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:56 2024 by rpki-client on console-ams.rpki-client.org