Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nmkX5bM30u4D4kdI9XdSHQekjBA.roa
File: nmkX5bM30u4D4kdI9XdSHQekjBA.roa (raw, json)
Hash identifier: jLY9rJUFSeEaDnYyfR6Yg7CP6YNaDjaDloRdZDdMINI=
Subject key identifier: 9E:69:17:E5:B3:37:D2:EE:03:E2:47:48:F5:77:52:1D:07:A4:8C:10
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 37ED768B
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nmkX5bM30u4D4kdI9XdSHQekjBA.roa
Signing time: Thu 28 Apr 2022 12:00:11 +0000
ROA not before: Thu 28 Apr 2022 12:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43651
IP address blocks: 82.147.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938309259 (0x37ed768b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 28 12:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e6917e5b337d2ee03e24748f577521d07a48c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:f2:a0:d7:1d:b1:09:55:f6:5d:e8:96:3c:
a2:ee:6e:37:ba:94:5d:3c:bc:01:52:75:21:11:53:
b6:46:cf:f6:9a:93:d9:3d:b9:b5:8c:a4:05:0a:a1:
0b:6d:b8:fa:c8:f8:05:b0:0b:94:b1:ad:bd:ea:6f:
ea:c9:d4:a7:52:d6:0b:bf:7f:4c:08:eb:9f:9a:47:
89:b1:6f:32:34:a7:c8:f4:9e:78:9a:36:48:d7:81:
55:02:36:62:9c:ab:da:3b:c7:89:ab:94:20:97:68:
02:07:d6:12:05:c9:7c:39:e2:b1:56:65:3d:9e:7c:
1f:68:a1:7f:46:5b:35:37:21:bf:01:34:88:fb:7f:
94:00:34:2d:00:c8:61:3b:dc:10:88:67:55:18:20:
01:e0:b9:82:40:46:78:63:ce:ff:25:ed:75:2a:ce:
c8:f4:3a:c3:be:1d:76:5f:89:b3:37:7e:84:c7:01:
43:83:9c:82:cc:e4:ef:7d:12:96:a5:3a:c8:d2:63:
9a:59:25:31:78:2e:6b:47:bc:31:e9:38:43:da:be:
f1:b9:59:0c:d2:5b:d7:60:44:50:54:ca:26:72:73:
3d:05:74:3f:52:0d:2b:94:67:23:1f:11:86:b4:56:
95:3a:db:46:b9:8b:ff:6c:89:ed:37:18:5c:57:09:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:69:17:E5:B3:37:D2:EE:03:E2:47:48:F5:77:52:1D:07:A4:8C:10
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nmkX5bM30u4D4kdI9XdSHQekjBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c5:10:c5:5d:22:f1:c5:0b:5e:be:b8:c8:80:a2:d3:8f:76:
9b:3b:d4:5e:13:b2:f9:60:fa:7a:aa:16:c4:98:c8:06:0c:1d:
05:81:94:66:65:78:d3:fa:50:7f:24:72:a3:9d:71:3e:99:72:
55:41:69:4e:dd:6f:a4:ea:7d:e0:3c:f2:ae:67:37:33:34:37:
79:23:9d:6f:98:66:5f:03:1e:16:61:77:67:07:66:5b:60:e0:
6d:19:92:fc:f6:67:8c:2e:d0:7e:39:5d:40:99:07:b2:13:e7:
a2:50:16:a8:ac:df:43:65:1a:7f:d0:b8:3b:36:7b:38:69:19:
b9:b7:2b:56:df:be:ba:2f:e2:35:95:09:d9:92:48:7a:6f:a8:
df:cf:32:bb:3c:63:02:9a:86:13:c1:62:d5:dc:fd:10:ee:80:
c3:77:0b:46:47:a8:02:14:a0:78:eb:ce:69:67:7a:de:26:14:
a8:fd:7e:9b:70:29:69:16:b2:f0:7c:22:78:8f:94:71:99:b1:
73:d9:d7:a9:30:9d:dc:da:9e:2c:04:0f:d4:25:6f:8e:d4:5c:
22:b3:a9:60:8f:56:4d:51:22:ef:42:18:55:68:e0:b2:b6:4a:
9e:34:09:4c:35:10:8b:29:09:f7:ef:d4:8a:d3:74:ec:fb:44:
d7:1e:8a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-ams.rpki-client.org