Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/nrKn0pa_GXpmQ5OXBv9I7FZsVgk.roa
File: nrKn0pa_GXpmQ5OXBv9I7FZsVgk.roa (raw, json)
Hash identifier: zzCb+XE+UvRY+oD+ePkBB0lUs1rmJdOc5Ztc5rjWJeg=
Subject key identifier: 9E:B2:A7:D2:96:BF:19:7A:66:43:93:97:06:FF:48:EC:56:6C:56:09
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 019C156F
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/nrKn0pa_GXpmQ5OXBv9I7FZsVgk.roa
Signing time: Sat 01 Jan 2022 02:58:41 +0000
ROA not before: Sat 01 Jan 2022 02:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212280
IP address blocks: 185.217.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27006319 (0x19c156f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Jan 1 02:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eb2a7d296bf197a6643939706ff48ec566c5609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:01:39:99:cb:21:3f:97:2b:57:91:2d:b8:
5b:5e:84:e8:e3:21:bd:d7:db:80:3f:6c:41:94:0a:
71:e6:d6:18:12:aa:8d:71:e6:95:e6:d4:f6:d2:7d:
47:cc:a2:49:9e:13:3f:15:1b:6a:8d:2a:a4:ab:23:
a3:37:6c:2c:92:43:44:77:d7:4b:4d:22:71:4a:72:
c5:a4:83:7a:1f:14:45:90:05:4c:e0:df:18:ad:92:
42:5b:ca:81:bb:1a:7b:a3:af:46:a8:86:39:42:95:
7f:ed:fc:9d:8b:72:40:d3:35:f9:12:b5:4a:aa:21:
14:0a:ea:41:5a:7a:d1:44:a0:58:df:64:fb:78:55:
26:2c:4c:0f:69:52:35:61:fd:98:2d:cc:87:ec:12:
6a:93:de:c0:3e:db:f6:8a:87:3f:81:57:b3:05:c1:
66:c3:1d:33:da:f9:8e:b9:1a:17:0a:78:81:04:73:
fc:58:d4:3d:0f:ba:01:85:eb:97:69:c6:99:3b:8f:
bc:af:1d:b8:fe:4a:3c:13:c3:5d:e7:6e:1f:ae:b5:
0f:96:74:b3:85:cb:bd:0c:5f:8b:c0:67:1a:96:0f:
41:cc:0f:9e:0b:28:d9:1c:03:a1:9c:13:a3:49:3b:
dc:3e:c3:2a:9c:8c:0a:3e:75:a2:05:0f:ab:1e:32:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B2:A7:D2:96:BF:19:7A:66:43:93:97:06:FF:48:EC:56:6C:56:09
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/nrKn0pa_GXpmQ5OXBv9I7FZsVgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:07:73:15:bb:b7:3d:8f:ac:b8:3b:17:c1:e7:0a:d9:25:11:
3b:a2:64:05:a0:59:f4:67:28:71:8f:30:9c:7f:24:8f:dc:79:
a3:51:b8:c3:84:8a:4e:c8:81:28:b9:76:4e:37:c2:86:09:96:
63:d1:e8:bd:d8:9d:b7:da:d7:27:fc:fa:b3:e2:4a:03:b8:78:
c1:86:d3:b9:84:d2:c1:c0:f6:95:fa:2c:35:4c:de:c8:f8:88:
4f:87:34:6e:fb:e9:35:e1:88:91:b0:ff:3d:d8:d0:62:89:31:
07:34:d1:2b:2a:90:5e:fa:1b:b1:68:68:b9:10:57:e7:e4:3b:
4f:3d:2a:2e:c8:85:a2:eb:27:41:30:73:62:6c:b8:36:0b:88:
64:ad:07:f1:b3:03:01:71:5d:01:b7:25:b0:68:6a:c7:e8:d1:
75:55:8b:e4:fb:8a:ae:eb:94:83:fc:02:6d:f2:0a:6f:7e:dc:
5b:7b:a3:bd:70:ee:3b:60:5a:6e:ec:0b:dd:bd:ce:52:87:fe:
7c:91:10:26:a9:f2:b2:ca:e8:c8:d8:3e:21:ef:44:92:5f:a6:
96:34:d8:c1:af:e1:c9:de:cb:96:92:72:45:2c:68:f7:09:41:
35:5a:b8:84:f5:20:20:0f:54:d1:4f:12:a0:6f:43:52:a3:92:
33:40:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:50 2024 by rpki-client on console-fra.rpki-client.org