Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/nTo8rYXCP0zs_35LSLgtfe1NISA.roa
File: nTo8rYXCP0zs_35LSLgtfe1NISA.roa (raw, json)
Hash identifier: TnQB50+MHMCg4Wf2q//+br0GfCffEKUt7d86udojOYY=
Subject key identifier: 9D:3A:3C:AD:85:C2:3F:4C:EC:FF:7E:4B:48:B8:2D:7D:ED:4D:21:20
Certificate issuer: /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial: 1BF6537B
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/nTo8rYXCP0zs_35LSLgtfe1NISA.roa
Signing time: Sat 01 Jan 2022 02:52:40 +0000
ROA not before: Sat 01 Jan 2022 02:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 185.3.30.0/23 maxlen: 23
185.3.28.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469128059 (0x1bf6537b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Validity
Not Before: Jan 1 02:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d3a3cad85c23f4cecff7e4b48b82d7ded4d2120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:73:12:df:62:46:a9:d0:b0:53:02:34:7a:
62:fd:2b:d8:a9:a9:10:f1:07:fb:f5:ec:6c:a1:46:
6d:78:a1:14:2e:a4:e5:14:a6:8e:a8:a5:e5:5c:11:
4f:a0:e9:84:47:6d:63:3b:0b:c6:c6:20:0e:36:6c:
62:d8:77:54:1a:90:91:61:ee:23:af:25:ba:5a:91:
f6:91:50:8d:f7:80:a9:d1:7e:30:d0:53:da:ed:d1:
46:8b:99:ca:b1:6a:4a:47:5c:b1:ae:92:93:c6:ef:
b8:d2:26:a6:e4:28:47:30:57:49:a7:b7:3b:38:13:
99:b0:0f:ee:dd:7b:88:4e:43:8d:89:68:6b:d1:9c:
e6:89:60:ba:01:38:b5:df:4a:f0:3c:56:11:57:ae:
ce:c4:bb:67:ee:3b:c1:8b:c7:c2:89:7e:28:65:c3:
48:7b:e7:92:61:a0:17:c2:e3:70:1e:e5:4a:fd:a4:
dc:98:2b:ef:c5:3e:fb:55:68:86:3f:48:c0:96:c9:
a5:34:f7:79:d6:f4:bb:0b:ee:3e:e5:27:c9:3b:b5:
33:0f:2d:3a:c1:48:1b:3d:50:3a:93:64:47:74:83:
bf:c6:93:3a:90:97:3c:01:89:8d:fb:2e:a7:a0:d0:
d9:50:f3:9b:a8:d9:c9:5a:47:59:e8:2e:7d:24:bd:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:3C:AD:85:C2:3F:4C:EC:FF:7E:4B:48:B8:2D:7D:ED:4D:21:20
X509v3 Authority Key Identifier:
keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/nTo8rYXCP0zs_35LSLgtfe1NISA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.28.0/22
Signature Algorithm: sha256WithRSAEncryption
50:53:25:1a:bc:ce:94:d6:f5:f3:61:0e:8f:bc:bd:47:b3:9c:
12:75:cf:6a:c5:22:7f:25:0d:de:c2:6c:b0:9c:d6:78:94:b6:
35:3f:b7:ec:9b:f1:cf:2c:2a:39:95:1b:90:5b:e6:8a:3a:6f:
51:03:ed:47:81:55:b5:85:5e:8e:b6:68:ce:94:49:f1:d6:8f:
05:92:27:19:b8:8e:08:44:c4:c7:47:16:ff:14:eb:ae:94:05:
89:9e:6a:9c:00:ec:c8:80:94:cf:1d:af:a9:4b:b8:2e:9e:2e:
6c:18:07:08:7c:68:8f:a7:c3:cb:9a:6b:1d:f0:92:1d:29:23:
2d:a8:ed:6e:39:80:f8:c7:c4:35:fa:7a:7c:0f:ea:65:d4:78:
1d:84:3c:39:a9:4d:ad:50:f2:26:89:27:44:e2:e0:48:ca:d8:
6a:d6:07:91:f9:37:f6:88:af:7e:d0:ed:9a:e2:df:52:7d:d6:
c1:ee:e7:6f:0c:a6:fa:df:a8:35:58:dc:51:b1:ef:5d:30:6a:
a3:1b:c9:4e:fb:7a:3a:71:a7:8f:82:e0:8b:3e:fc:92:ff:c3:
10:ad:a3:4d:8c:2d:20:3d:48:a3:ed:d9:e9:29:d5:e2:4e:ac:
89:88:19:64:a6:fe:44:47:ad:ce:79:e8:0f:15:a3:83:4a:58:
a3:76:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:53 2024 by rpki-client on console-ams.rpki-client.org