Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/nxIR67pbpnpXIo5F8vIIsu0TDQI.roa
File: nxIR67pbpnpXIo5F8vIIsu0TDQI.roa (raw, json)
Hash identifier: n9Sp6mPFRgeLpt7QT22aXMT7cqRjglLXxyFY/vYYCjk=
Subject key identifier: 9F:12:11:EB:BA:5B:A6:7A:57:22:8E:45:F2:F2:08:B2:ED:13:0D:02
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 237BA10A
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/nxIR67pbpnpXIo5F8vIIsu0TDQI.roa
Signing time: Sat 01 Jan 2022 14:06:05 +0000
ROA not before: Sat 01 Jan 2022 14:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10991
IP address blocks: 192.113.68.0/24 maxlen: 24
192.113.67.0/24 maxlen: 24
192.113.66.0/24 maxlen: 24
192.113.65.0/24 maxlen: 24
192.113.71.0/24 maxlen: 24
192.113.70.0/24 maxlen: 24
192.113.69.0/24 maxlen: 24
192.113.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595304714 (0x237ba10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jan 1 14:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f1211ebba5ba67a57228e45f2f208b2ed130d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:3b:2d:57:9f:58:fe:56:c2:a3:12:0a:b3:
e5:a7:1d:71:14:2d:c3:81:bc:30:74:df:64:9f:9e:
0b:c8:61:04:c6:72:51:5a:2d:2d:91:e3:c3:68:2d:
c2:48:e8:cc:d8:5c:8f:79:9c:50:9b:2f:2f:af:b6:
6f:56:96:d2:f4:9e:12:90:46:16:bf:93:c4:df:42:
ac:ae:61:9d:fd:39:97:eb:fc:d8:88:35:a0:99:8e:
27:3d:34:4b:29:f5:03:91:c1:2d:c4:47:65:d1:6b:
f7:e6:b1:94:5a:13:ed:da:3a:bf:76:65:1a:fa:6c:
68:8f:71:b4:a6:81:42:db:5f:5f:7e:fa:71:15:8d:
17:fa:27:6b:04:3a:4e:f6:7f:11:38:0f:ec:7a:b4:
b2:8b:15:b6:dd:50:28:bf:a5:5c:f9:e4:17:e5:f6:
14:a6:d6:84:ad:83:eb:2d:b8:73:82:50:f9:e1:dd:
9f:54:ef:7a:60:d7:99:cd:1a:a0:e1:41:bf:47:1b:
09:7d:3b:fa:06:bb:7e:62:21:57:45:51:d7:c3:77:
ae:5a:1e:22:29:93:7a:18:32:f7:9e:08:d9:fd:fb:
a6:ab:c1:9f:ba:b7:ae:3b:a5:cd:0d:20:bd:83:f0:
55:f1:9e:9b:0d:aa:09:9a:42:65:b3:1d:1c:74:45:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:12:11:EB:BA:5B:A6:7A:57:22:8E:45:F2:F2:08:B2:ED:13:0D:02
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/nxIR67pbpnpXIo5F8vIIsu0TDQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.113.65.0-192.113.72.255
Signature Algorithm: sha256WithRSAEncryption
57:c3:25:65:21:35:30:3f:76:0f:aa:ea:44:b5:64:07:9f:69:
20:b2:b2:5d:e8:9a:93:8a:a1:9c:2c:3c:40:05:6b:6d:60:59:
1e:c3:a2:f3:d3:f4:e2:e1:2c:3c:a7:3a:e5:f1:ba:f2:77:8e:
65:c1:56:96:c4:a0:60:e0:5c:3c:a7:a0:2c:0e:34:06:86:3b:
5d:bb:fa:af:7b:d7:10:4d:4f:20:fe:8e:77:0c:3d:68:d9:d1:
60:36:d0:e3:90:4d:1a:7f:2f:27:d2:f4:d5:27:92:bb:e1:36:
1c:83:01:96:73:bf:a4:00:35:2c:4d:d3:75:0f:07:8f:d4:8a:
d1:54:eb:9c:75:fc:47:86:d7:8f:4f:0a:f9:7b:8d:7a:fa:8e:
66:0f:30:c8:13:e1:e0:21:2c:85:c7:15:d0:38:aa:f5:61:0d:
c4:20:ba:6c:7e:b3:14:f8:c0:41:1e:b7:73:b3:2c:34:88:19:
97:b8:1a:42:04:44:ff:55:2a:cf:2e:17:67:ee:00:02:08:07:
7b:2f:e6:a6:a2:48:7b:fd:ac:a5:4b:2d:d6:5c:8b:bc:13:b0:
fe:55:16:57:bc:2f:7a:2d:7c:cf:ee:13:4f:60:58:5c:bd:4a:
af:ed:69:af:fd:e4:3f:6c:9d:d1:2e:9e:a1:a8:d4:17:8a:96:
49:bb:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:52 2024 by rpki-client on console-ams.rpki-client.org