Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/NrFXvNPvnvAisMQzLTTXe8eB3J4.roa
File: NrFXvNPvnvAisMQzLTTXe8eB3J4.roa (raw, json)
Hash identifier: NS4+Tg8fFqus+q1aiZt2Czelb7kWe/R12HR3MEE8Cck=
Subject key identifier: 36:B1:57:BC:D3:EF:9E:F0:22:B0:C4:33:2D:34:D7:7B:C7:81:DC:9E
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 01E954AA
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/NrFXvNPvnvAisMQzLTTXe8eB3J4.roa
Signing time: Sat 01 Jan 2022 06:02:26 +0000
ROA not before: Sat 01 Jan 2022 06:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56465
IP address blocks: 195.140.224.0/24 maxlen: 24
195.140.225.0/24 maxlen: 24
195.140.226.0/24 maxlen: 24
195.140.227.0/24 maxlen: 24
94.124.162.0/24 maxlen: 24
94.124.163.0/24 maxlen: 24
94.124.167.0/24 maxlen: 24
2a0c:29c1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32068778 (0x1e954aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Jan 1 06:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36b157bcd3ef9ef022b0c4332d34d77bc781dc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:9f:fa:7a:e8:7b:18:da:c9:71:a7:32:e7:
d5:b6:8b:55:c4:a7:2d:1c:8f:46:d9:b4:98:3d:36:
5f:df:9f:8a:c6:e9:e8:7c:47:ad:08:83:c9:ff:14:
a6:e1:84:97:a6:7a:03:4b:06:e6:00:ca:61:e7:f1:
24:a9:5d:32:7c:c5:a1:1e:08:29:c7:b2:cc:a8:0f:
57:d6:8e:5d:2b:6e:9e:8d:75:46:2e:dd:7e:b8:48:
72:38:44:04:50:08:62:c9:35:a8:20:e0:f4:1c:db:
c4:19:de:2b:39:8f:f8:48:cf:c1:6b:b1:2a:51:8b:
0e:ca:fe:1f:e9:40:f5:0a:15:9f:87:b7:bf:dc:d1:
63:a1:05:95:ca:57:7d:e1:ae:43:fa:47:63:b1:2e:
3b:35:39:be:78:02:d2:15:a3:f9:f2:2a:c7:6a:d4:
52:48:4c:49:71:82:16:d8:ba:47:f7:10:a3:ad:da:
ba:61:3b:77:b3:b2:a8:31:17:1a:7c:73:57:89:73:
06:41:5e:31:a7:f7:a3:30:41:28:96:e9:79:fd:66:
ec:ff:1e:04:0c:fd:19:ca:7a:6e:ed:fe:dd:93:b5:
d2:79:19:e4:46:a1:33:cf:c6:99:12:6e:fd:b7:7b:
1b:90:48:8b:27:ff:c2:f5:bc:01:29:64:05:ba:10:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:57:BC:D3:EF:9E:F0:22:B0:C4:33:2D:34:D7:7B:C7:81:DC:9E
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/NrFXvNPvnvAisMQzLTTXe8eB3J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.162.0/23
94.124.167.0/24
195.140.224.0/22
IPv6:
2a0c:29c1::/32
Signature Algorithm: sha256WithRSAEncryption
cc:21:70:fc:23:91:cd:5c:52:c5:52:3d:98:98:a7:36:09:a3:
35:8f:36:aa:15:76:80:ab:bc:42:b7:9b:f1:83:c6:14:2d:aa:
5c:46:61:4f:a3:3a:2a:d0:8d:c2:d2:be:a7:1a:48:31:80:7a:
b4:69:80:6a:4e:db:9a:ee:02:41:94:2a:f7:40:44:92:41:6d:
3f:b0:e2:f0:a9:52:7d:f8:b5:b4:24:8a:f4:79:e1:2c:7a:a9:
aa:0e:61:b0:3b:f6:73:ba:35:82:28:b0:16:fb:3b:9f:7a:fa:
ae:d6:04:05:54:3b:42:7d:6b:19:89:ee:f4:aa:7d:5d:a4:a5:
2c:bb:c4:d7:4a:9b:57:74:75:c9:78:2a:f6:0b:13:e1:64:88:
7b:45:56:42:4c:94:56:89:c9:7c:e8:59:4a:02:78:79:f6:c5:
eb:8e:55:43:bf:4e:ed:02:ac:04:50:8e:0b:0d:d2:7e:26:96:
b1:cd:83:6e:87:2d:20:7d:fb:59:fd:34:a9:f2:84:a5:98:9e:
4f:99:99:f7:5e:10:f1:63:fc:aa:9e:be:a0:ee:95:4e:c2:9a:
dd:2d:ee:b1:59:4d:17:50:5b:d7:80:df:4b:cd:df:3f:85:d5:
29:5e:20:a4:fb:31:53:98:3f:6d:12:89:7e:59:32:ef:73:b8:
43:be:b1:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org