Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/Nx3fmFGw3NyVZsvUBWtRJ6cWBH4.roa
File: Nx3fmFGw3NyVZsvUBWtRJ6cWBH4.roa (raw, json)
Hash identifier: KtaDmVBXdx0QHSOa1nRDJeUWoumtBzPnGX+yV3e29JA=
Subject key identifier: 37:1D:DF:98:51:B0:DC:DC:95:66:CB:D4:05:6B:51:27:A7:16:04:7E
Certificate issuer: /CN=4434edbe1b4101b28abe232f2bcf2a014897825a
Certificate serial: 014BC4EF
Authority key identifier: 44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/Nx3fmFGw3NyVZsvUBWtRJ6cWBH4.roa
Signing time: Sat 01 Jan 2022 05:05:41 +0000
ROA not before: Sat 01 Jan 2022 05:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59752
IP address blocks: 195.49.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21742831 (0x14bc4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4434edbe1b4101b28abe232f2bcf2a014897825a
Validity
Not Before: Jan 1 05:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=371ddf9851b0dcdc9566cbd4056b5127a716047e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:40:f2:88:44:4d:ba:1b:fb:f1:0c:37:d3:
aa:4d:f4:54:34:50:69:99:bb:cb:d1:05:11:99:86:
9d:4b:0b:12:8c:51:5e:7f:be:af:54:4c:a5:8a:98:
b5:49:e9:e0:e6:0d:79:d7:7a:1c:cc:1d:69:1f:57:
ed:4e:d2:d7:11:ff:5c:b6:ca:3c:42:e9:d9:7b:41:
78:8e:f6:f2:ab:8b:fe:d2:43:29:2c:05:0d:75:7a:
a2:f9:2f:a9:6e:a4:27:c1:c9:64:26:95:56:06:0a:
27:2f:be:6d:84:52:f8:00:d6:b1:a2:7c:a9:5c:68:
e3:b5:7e:8e:63:87:c0:ea:b1:d4:71:aa:db:8a:a7:
73:4a:1d:be:4e:3c:df:40:72:1a:20:1d:d7:83:dd:
3d:a0:ba:64:b2:2f:8f:fb:05:e0:3c:ca:0f:3c:00:
21:06:6f:43:59:bb:8c:f4:8c:3c:5d:81:56:9f:3e:
4c:90:6c:a6:64:e6:d0:fa:72:2c:8e:b3:3a:c2:69:
28:46:81:a3:90:2d:37:53:d4:a9:e0:73:63:c5:6c:
2e:23:f7:3d:6d:f9:98:bd:da:38:c1:10:b9:ee:00:
4a:d1:29:ce:2e:bd:88:92:93:a0:5a:3e:38:8d:dc:
92:ce:04:2b:f3:11:94:f5:91:33:6e:b0:07:3b:08:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1D:DF:98:51:B0:DC:DC:95:66:CB:D4:05:6B:51:27:A7:16:04:7E
X509v3 Authority Key Identifier:
keyid:44:34:ED:BE:1B:41:01:B2:8A:BE:23:2F:2B:CF:2A:01:48:97:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDTtvhtBAbKKviMvK88qAUiXglo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/Nx3fmFGw3NyVZsvUBWtRJ6cWBH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/639f64-1df1-46d5-add9-10caf54986ff/1/RDTtvhtBAbKKviMvK88qAUiXglo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.136.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:3e:88:f0:e5:3b:75:3f:25:92:0f:f1:86:63:32:b6:65:22:
20:6b:40:da:c8:be:13:81:ca:a5:e7:cf:d3:33:57:35:6d:e9:
dc:9c:19:ac:4a:1a:2b:0e:ee:3f:b3:c3:7c:ff:54:e1:40:1d:
42:0e:05:69:75:ae:e2:25:35:40:92:b7:c0:ce:8b:71:3a:c6:
b4:a0:ee:fe:a1:17:63:bb:68:1d:4d:a5:bf:83:ac:67:b8:ea:
2b:40:b9:3c:58:ae:b3:23:2d:9d:11:2c:0b:95:2e:75:77:0a:
64:95:02:79:1c:75:0f:6f:07:d7:c4:4f:15:31:1b:02:2f:73:
34:b4:e7:13:58:95:95:a1:51:16:9e:9b:2b:20:6a:96:4e:47:
af:39:9a:9c:35:7e:c7:89:35:a1:3b:68:8f:9b:d9:18:92:73:
72:20:08:04:1b:38:cb:87:9e:cf:18:21:38:19:e7:8c:fd:b9:
a7:c3:18:c5:5b:e7:27:8d:b9:88:7c:d7:d5:79:42:5e:0f:72:
a0:91:f8:d8:b4:25:cd:40:99:10:c6:b4:37:b3:42:c1:51:95:
b4:b5:cf:87:94:d8:f6:3b:73:ea:99:00:f8:5e:57:63:7a:5e:
8c:a6:7c:33:4c:72:31:09:a4:5e:a6:55:46:84:b0:d0:95:0a:
ee:5c:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-ams.rpki-client.org