Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/NU5O1_XTwylYyM6QZD2e3ACEDkU.roa
File: NU5O1_XTwylYyM6QZD2e3ACEDkU.roa (raw, json)
Hash identifier: EZIwV0AeiWYQ5isysHFLq7t5ck00tLI4woS4HkHdcCw=
Subject key identifier: 35:4E:4E:D7:F5:D3:C3:29:58:C8:CE:90:64:3D:9E:DC:00:84:0E:45
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0181F3E881F128AB06CFE295610557C660CA
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/NU5O1_XTwylYyM6QZD2e3ACEDkU.roa
Signing time: Tue 12 Jul 2022 19:35:09 +0000
ROA not before: Tue 12 Jul 2022 19:35:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204887
IP address blocks: 217.113.192.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f3:e8:81:f1:28:ab:06:cf:e2:95:61:05:57:c6:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jul 12 19:35:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=354e4ed7f5d3c32958c8ce90643d9edc00840e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:53:8f:fb:38:87:33:9b:fd:72:7d:fb:04:
f3:72:1b:f5:64:99:8b:58:e2:3e:05:51:d2:c4:b6:
83:72:ad:4b:f4:8a:96:23:8e:c6:b3:92:3c:59:28:
c5:47:6f:b0:25:f0:b7:ea:40:fe:8c:67:ad:de:f9:
43:3c:08:98:d8:87:42:af:d8:84:31:39:ef:da:00:
bf:c4:6c:2e:7a:84:61:5b:8c:4b:83:98:ae:ae:71:
75:a9:8b:fe:40:04:dd:b0:d1:e7:6b:18:fa:13:3b:
a1:59:dd:a4:45:fd:6c:2d:f8:72:bb:f6:2f:e0:b9:
b5:83:40:a4:e3:55:3d:d9:3b:1b:e2:e8:a8:7b:54:
13:16:79:cf:fd:35:dc:a5:24:2e:e9:32:9b:16:73:
8b:e3:5a:f3:44:f3:39:ce:c9:2f:f0:88:ef:fc:5e:
be:0a:1e:6c:52:cd:3d:17:1d:db:18:ae:e1:1b:f2:
da:2b:77:af:bf:d5:72:98:5b:65:53:67:8f:fb:9d:
72:75:1f:5e:62:7e:40:6f:86:19:fe:25:14:84:4b:
94:c0:52:61:ab:7c:c5:1d:85:a4:8f:2b:11:b3:37:
4d:5c:83:b9:ba:3a:f2:65:2a:5c:62:9f:7f:34:99:
e7:99:78:8f:c5:56:c8:e7:46:73:7b:ae:3c:30:f3:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:4E:D7:F5:D3:C3:29:58:C8:CE:90:64:3D:9E:DC:00:84:0E:45
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/NU5O1_XTwylYyM6QZD2e3ACEDkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.192.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:44:fb:ad:97:85:63:c9:da:06:96:fa:92:68:dd:91:b8:6f:
24:21:c3:13:c6:28:26:9e:ce:e3:8d:5a:fc:b8:8a:44:58:a2:
66:d8:31:13:a7:fa:c6:9c:cc:0c:b9:fd:e3:9e:23:f7:af:4f:
85:3e:68:d9:70:64:87:d4:45:34:30:15:64:8e:d0:75:90:48:
50:ff:24:00:72:88:73:54:b0:ac:fe:4f:13:7f:ab:8f:4b:3a:
21:be:61:25:1d:87:0f:c2:db:62:e7:6d:59:c9:50:ad:7a:6d:
ee:2c:29:d3:dd:53:a3:d8:fe:f8:53:11:64:29:39:68:8f:bb:
97:8e:39:2d:36:02:e3:92:09:84:d8:11:bf:1c:2f:12:42:32:
5b:1a:27:57:a3:38:b4:25:1f:ae:e5:e0:23:37:5e:43:65:78:
52:64:ed:99:a5:4b:30:4e:80:71:1d:f3:df:4f:ae:b0:9c:e2:
08:c3:94:2a:e8:26:ad:28:f6:b7:2e:22:3e:c6:0d:5d:8a:47:
b9:4d:3b:39:8d:91:a0:9e:8d:f3:c7:5e:45:d4:b7:1d:61:38:
9c:12:ec:b7:69:d7:cb:0c:5e:35:16:f0:32:7d:b9:33:5c:41:
3c:32:03:59:cf:39:54:c0:08:16:90:de:6c:4f:10:80:ca:44:
e5:a4:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:31 2024 by rpki-client on console-ams.rpki-client.org