Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/n9mKpUegINkEDP-6wS8llhjM9Qo.roa
File: n9mKpUegINkEDP-6wS8llhjM9Qo.roa (raw, json)
Hash identifier: LPsYNvCx/KvitH1YJea19r3Y6C15T0EBjKTIi7TVZFU=
Subject key identifier: 9F:D9:8A:A5:47:A0:20:D9:04:0C:FF:BA:C1:2F:25:96:18:CC:F5:0A
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 03A1AEF4
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/n9mKpUegINkEDP-6wS8llhjM9Qo.roa
Signing time: Sat 01 Jan 2022 11:56:48 +0000
ROA not before: Sat 01 Jan 2022 11:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.210.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60927732 (0x3a1aef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Jan 1 11:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fd98aa547a020d9040cffbac12f259618ccf50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:87:eb:73:79:d4:cc:b6:08:40:4c:dc:fd:
ee:c1:49:53:7a:b6:ac:fe:af:7f:b7:cd:3c:b5:5b:
24:bd:6c:e7:26:ed:8c:64:0b:93:17:9a:d6:08:e4:
8e:44:6c:3e:c2:2b:75:ff:98:54:35:30:a6:dc:88:
bb:10:b3:bf:4d:91:54:d8:0e:c0:d5:22:a7:94:1f:
33:af:d7:c2:fb:8d:c5:c4:18:b7:aa:67:7b:64:25:
f1:05:6d:7e:8b:6b:ce:d9:32:18:a4:24:8a:dc:6c:
23:6a:b1:25:43:1e:3d:cf:b8:cd:24:0d:4e:07:d4:
ae:c3:ac:84:e7:42:df:a0:34:c8:b9:1e:fd:a5:95:
56:50:81:d7:6a:d5:da:ab:6e:43:9e:1e:8d:8d:35:
df:15:79:37:7d:fb:37:9f:46:9a:c7:22:19:b9:fa:
d1:82:64:8e:3c:12:ff:a8:bd:3d:d8:d1:a9:de:f2:
4c:4b:48:69:32:71:c3:32:f5:52:2d:18:cd:88:78:
c3:e8:d2:71:73:94:fa:3e:d7:a8:53:9b:61:ad:bb:
3c:8a:c5:be:13:ee:8c:ca:77:a5:85:bd:30:5b:c0:
ca:21:73:d5:4e:db:18:8a:5e:2f:d1:7b:34:3a:58:
a0:9d:bb:7d:74:6f:c5:36:72:d9:b1:24:fa:7d:a5:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:8A:A5:47:A0:20:D9:04:0C:FF:BA:C1:2F:25:96:18:CC:F5:0A
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/n9mKpUegINkEDP-6wS8llhjM9Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:85:53:44:e5:ef:89:69:83:f6:9c:be:fc:53:ae:da:21:00:
12:98:31:d1:67:6b:02:70:6d:90:f4:9a:6a:9f:6e:84:db:92:
d2:88:e5:42:31:3c:c5:51:ac:e2:7d:e1:96:37:76:09:24:7c:
be:b5:02:4c:05:1f:0c:4c:84:b3:a3:66:3d:7a:f4:67:35:f6:
ab:85:99:27:01:81:34:ec:b9:4f:06:0e:53:ca:14:9c:68:18:
c3:d5:d0:68:52:4d:b8:22:49:f4:21:17:64:73:08:8c:26:3e:
26:62:40:fb:d4:70:ab:de:ba:b4:5a:c2:bd:a4:57:f7:55:e8:
d1:30:f4:2b:89:b1:15:cd:1b:9a:77:e7:7d:5a:64:a8:38:48:
e1:b8:51:1d:d4:66:33:d0:fc:16:99:c9:e0:59:a8:06:ab:2d:
e4:00:87:2d:68:08:6d:5b:36:40:10:4f:9c:62:c4:f9:0b:a6:
e9:2b:0d:fa:8a:98:a6:93:b8:b6:b7:34:a0:b1:9d:f5:88:33:
42:b1:a6:24:9b:12:93:6c:f7:9f:34:0a:53:79:20:dd:83:60:
88:1e:d6:32:63:60:ab:83:f1:9a:e3:ce:74:98:7e:cc:c0:cc:
18:8b:f8:d4:58:1d:3f:33:13:64:11:fd:97:c0:8e:92:04:7f:
2c:f5:0c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:49 2023 by rpki-client on console-ams.rpki-client.org