Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NmPFpKqKa7vnDuuPryVsyU1uPfI.roa
File: NmPFpKqKa7vnDuuPryVsyU1uPfI.roa (raw, json)
Hash identifier: 1GqBw84a/jrWBUrBIRxM9jYS9E0glWacVAFQA5lpmKw=
Subject key identifier: 36:63:C5:A4:AA:8A:6B:BB:E7:0E:EB:8F:AF:25:6C:C9:4D:6E:3D:F2
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0D46630E
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NmPFpKqKa7vnDuuPryVsyU1uPfI.roa
Signing time: Fri 24 Jun 2022 12:34:11 +0000
ROA not before: Fri 24 Jun 2022 12:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35080
IP address blocks: 85.119.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222716686 (0xd46630e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jun 24 12:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3663c5a4aa8a6bbbe70eeb8faf256cc94d6e3df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:aa:ea:aa:f0:26:07:23:91:be:05:65:06:
53:c6:95:ba:bf:2d:d0:4b:7f:9f:72:48:66:9f:00:
8d:f4:f9:64:7b:0c:32:28:28:f5:81:7c:6a:f4:5d:
d5:b2:df:12:6f:60:ba:ab:90:0d:c4:93:45:fb:f5:
16:08:3f:8a:3a:a1:f4:e4:2c:a9:64:97:aa:01:b1:
7b:cd:85:fa:db:b4:51:3a:ae:8d:ec:2c:dd:d9:96:
43:c1:0a:59:31:5c:a2:68:8f:fa:bf:b5:9a:60:58:
fe:e4:36:41:db:59:ad:09:bf:cd:9c:56:37:c0:47:
35:d4:57:7d:3b:c6:47:58:03:66:84:18:c6:e5:16:
0d:8e:b4:4f:3a:cb:8c:fb:a6:f0:ea:22:1f:a1:62:
d5:27:a7:4b:f8:c2:bf:be:0f:37:12:b4:19:48:4c:
09:20:24:e5:dc:ff:7d:48:e1:0e:eb:20:dd:33:68:
eb:5e:9c:93:f2:5f:0a:e5:1d:5b:97:cb:f6:20:8b:
ca:68:d0:43:fd:d1:96:ef:fa:e9:46:6d:a2:cb:a1:
90:4d:76:43:ca:33:a5:d1:28:55:0c:d4:c8:ad:54:
c1:34:84:20:e2:4b:04:e0:f6:13:e7:79:fa:e2:31:
17:26:47:73:5f:c5:4d:d0:12:e9:50:d0:46:a1:af:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:63:C5:A4:AA:8A:6B:BB:E7:0E:EB:8F:AF:25:6C:C9:4D:6E:3D:F2
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/NmPFpKqKa7vnDuuPryVsyU1uPfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:15:1b:82:2b:ea:53:1f:52:fb:47:2b:ae:1e:a9:e6:47:d0:
1d:c2:ec:53:2f:2e:94:7c:48:0e:e8:ba:98:66:f6:a5:b5:e5:
2d:c1:d0:39:59:c4:94:ab:2c:7b:7c:27:b2:57:39:42:b4:97:
93:29:3e:79:95:38:ea:c8:a7:f3:b1:d4:8a:b2:0d:b1:ae:b6:
2d:f4:15:d0:a9:ff:9f:e3:ba:68:10:7e:43:ff:b8:30:e0:0f:
66:ec:a9:c4:5b:4b:f5:05:5b:c8:a1:35:96:76:9b:63:dc:dc:
6c:2a:94:dd:26:8f:d2:a0:a8:68:4b:e7:35:7f:43:ef:7b:5a:
de:68:cc:64:94:1c:fe:9b:ee:89:29:69:9e:e8:f6:8e:b4:85:
11:11:65:a6:d1:77:9a:f2:45:80:20:c6:6a:be:35:9d:05:b1:
77:a7:e6:78:f3:1b:92:9d:ee:07:46:28:d0:33:1f:75:40:66:
e1:9a:f2:3e:7e:c0:eb:27:50:52:05:90:8a:5e:8b:5a:fc:d9:
cf:ce:72:8c:fa:30:18:bf:fc:d7:62:b0:ea:e4:97:b4:b0:86:
e3:41:54:d2:4d:86:28:df:6d:dd:fa:b6:ee:61:fe:8f:6a:16:
e9:63:48:4f:d0:35:c1:06:f1:2d:25:ee:f4:95:ca:0e:ec:d4:
24:cc:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org