Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/nbpNASPg4Ft9TnSd4K2l647mIxg.roa
File: nbpNASPg4Ft9TnSd4K2l647mIxg.roa (raw, json)
Hash identifier: njuxAQXOSUFQgJxo6F/NLJh3u+3pXZOT/FnqDegNCmM=
Subject key identifier: 9D:BA:4D:01:23:E0:E0:5B:7D:4E:74:9D:E0:AD:A5:EB:8E:E6:23:18
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 069C85DA
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/nbpNASPg4Ft9TnSd4K2l647mIxg.roa
Signing time: Sat 01 Jan 2022 07:58:53 +0000
ROA not before: Sat 01 Jan 2022 07:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43229
IP address blocks: 185.213.12.0/24 maxlen: 24
185.213.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110921178 (0x69c85da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jan 1 07:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dba4d0123e0e05b7d4e749de0ada5eb8ee62318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:0d:25:de:36:4c:6e:c4:d5:12:50:d9:13:
07:4b:24:7f:09:42:6d:3c:e9:10:c8:40:11:d8:53:
cb:57:cc:13:a9:bd:9c:24:1a:7e:ef:48:ce:f9:12:
d2:ff:16:bb:c3:8c:40:2e:71:65:68:dd:e9:c6:1f:
9c:d6:f3:de:e8:1e:c8:dc:1b:9d:b0:44:18:df:f9:
32:5a:57:cd:76:47:1b:cd:65:c8:4c:7c:94:99:0f:
a7:23:a8:d0:49:01:36:25:e3:87:08:ad:c1:a2:d3:
f3:42:51:2b:ad:2f:8c:9c:e2:19:dc:db:5d:33:63:
6d:18:8a:d7:e1:51:89:cd:5f:b0:f1:e6:db:fd:ab:
75:f9:a5:fa:b2:fc:8d:19:81:f2:ef:f4:f7:78:08:
03:99:61:a1:1c:cb:fb:0e:1c:61:b6:23:60:da:ce:
7f:f3:fc:a4:93:39:c6:8e:30:5d:d7:1f:0d:c7:37:
1f:db:90:45:a1:b1:8a:56:de:28:3f:f4:c7:11:51:
73:22:74:c9:1c:5f:51:50:3a:85:f1:90:29:18:94:
36:b0:99:b4:31:92:5c:ad:a0:2d:e8:d3:20:54:04:
8c:a6:b0:a8:56:5d:8e:aa:9b:a5:64:7e:ea:94:6e:
36:c7:44:4e:a7:b2:5b:00:a0:f4:fd:5a:b7:22:22:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BA:4D:01:23:E0:E0:5B:7D:4E:74:9D:E0:AD:A5:EB:8E:E6:23:18
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/nbpNASPg4Ft9TnSd4K2l647mIxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:00:c6:2e:c9:cc:a8:1d:32:d0:1b:7d:48:98:aa:75:94:15:
a6:31:0b:b4:d1:e4:0a:c4:ae:ca:9c:2b:97:2d:60:ab:94:c3:
80:57:b8:46:b7:63:e9:7a:39:5b:7a:76:b0:a5:a0:86:63:0c:
da:7c:a6:e3:8e:b6:89:92:43:63:b4:2c:dc:0e:d3:00:f8:18:
75:16:ac:0a:d4:96:d0:57:92:a7:97:ed:c6:5b:9b:e8:ea:d9:
d3:85:1f:46:e7:ad:78:38:41:30:fd:ad:35:db:7b:c3:80:59:
38:73:92:71:77:19:a5:d7:86:cd:2a:9d:7d:54:6d:42:2a:4d:
31:2d:f5:fa:29:dd:22:f7:a3:d6:48:22:f8:cf:e9:ff:88:ce:
04:a0:b1:85:36:d1:d0:63:92:a2:6c:ce:2e:1f:6c:b5:de:86:
79:c3:d5:fb:35:96:b5:c5:1a:a9:8e:7a:85:f6:fc:f9:75:63:
9a:2d:74:d6:99:90:9c:1e:69:57:88:ea:40:08:50:cf:d1:df:
78:92:fa:69:8a:19:e8:4a:13:ad:00:38:6b:74:45:f6:3b:d3:
fd:13:0a:b5:a6:9e:03:c7:ff:61:da:48:db:58:be:33:db:d5:
9e:a4:4e:e9:2f:86:14:72:fa:c0:5c:57:b9:32:7b:ea:ce:e7:
f4:4a:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-ams.rpki-client.org