Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/NKfBFqYjnAMrVAR6MbdINGAFBos.roa
File: NKfBFqYjnAMrVAR6MbdINGAFBos.roa (raw, json)
Hash identifier: jJ0YOiy03lUebYktPizg5Jgc5swFAef2eAM3nxIgIV8=
Subject key identifier: 34:A7:C1:16:A6:23:9C:03:2B:54:04:7A:31:B7:48:34:60:05:06:8B
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: ABFCB4
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/NKfBFqYjnAMrVAR6MbdINGAFBos.roa
Signing time: Tue 22 Mar 2022 10:09:29 +0000
ROA not before: Tue 22 Mar 2022 10:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 195.88.162.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11271348 (0xabfcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Mar 22 10:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34a7c116a6239c032b54047a31b748346005068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:55:b0:05:82:ed:da:2f:c2:24:55:f9:08:
30:4c:1c:93:c1:ca:15:bf:a8:77:df:43:63:94:9b:
35:76:d4:2e:be:83:14:e8:41:b8:9a:a6:9e:17:5d:
96:ba:7f:91:3f:5a:ed:ac:e1:45:10:8e:a3:04:40:
e7:97:69:4c:84:39:89:66:a6:c0:63:ed:a1:55:46:
5d:67:3c:55:a1:6e:b3:fc:da:89:3a:5d:e0:08:b9:
11:a9:65:47:a3:94:4c:74:c2:a4:df:2b:db:5d:b9:
1a:2a:98:41:23:86:dc:0d:5e:1f:94:e0:42:ab:a2:
e8:10:ee:4e:f0:70:be:3e:63:c4:e5:29:95:9e:61:
f3:8e:d7:09:8e:1a:2d:1e:65:b8:19:3c:d9:0d:7e:
ef:8b:a2:a8:02:35:1c:41:90:ba:9c:85:fa:aa:e7:
d1:a7:61:f4:41:8e:f1:76:0f:4c:08:84:1e:6c:15:
76:e7:72:9b:f3:4e:21:96:5a:f0:24:81:f0:ff:f0:
49:96:c5:2f:25:f2:df:44:3e:ed:66:19:9e:bf:6a:
74:68:c2:d0:ea:0f:41:7d:51:a4:03:2a:3b:22:86:
e2:48:8f:9b:82:ca:97:45:37:95:27:74:5c:fa:53:
04:53:a4:43:7c:fe:d8:43:68:91:81:c7:58:50:26:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A7:C1:16:A6:23:9C:03:2B:54:04:7A:31:B7:48:34:60:05:06:8B
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/NKfBFqYjnAMrVAR6MbdINGAFBos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:67:37:88:96:23:a9:cb:df:be:e1:a5:ac:38:4e:63:c4:00:
16:bd:c0:e9:c2:cf:6f:29:b8:57:3f:97:ca:e0:50:12:52:46:
26:d9:d6:63:7e:ff:29:6f:6c:95:93:1e:88:1e:66:2f:22:b6:
75:dd:e6:50:a0:14:c4:e2:cb:ea:7b:c7:c3:2b:3e:45:79:16:
c5:fc:6e:70:fa:b1:52:bb:79:b4:6a:ad:d3:3c:79:43:f2:c6:
ac:0e:b7:e0:d8:b2:5c:2d:3d:63:70:7b:2e:08:5d:80:bb:68:
e4:54:b4:99:01:f2:a6:83:c5:1e:76:47:5e:a8:fe:d0:18:79:
4c:f3:6c:aa:61:c1:fd:6c:c8:64:40:4c:46:f9:27:e0:8f:b5:
7f:53:11:8c:95:6a:9d:d6:77:6c:66:df:fb:03:af:fd:5b:e9:
08:af:be:87:09:93:eb:c3:e1:b2:68:63:7a:57:2a:7b:3d:8a:
18:73:8d:1f:c0:86:1f:6c:36:aa:a4:ef:e2:63:a7:58:9c:89:
a5:d5:13:a6:e0:28:aa:51:8b:af:53:d9:3c:fc:2d:f6:5c:a1:
c1:8e:75:f1:b7:ab:4f:55:46:39:8e:22:9b:82:fc:18:a5:d6:
c4:63:ea:1c:65:3f:a4:03:c8:34:25:09:05:a2:73:ea:bf:02:
c0:4f:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:52 2024 by rpki-client on console-ams.rpki-client.org