Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/_1N0Pj7rmyeiurdc87sbRQg3-Zk.roa
File: _1N0Pj7rmyeiurdc87sbRQg3-Zk.roa (raw, json)
Hash identifier: HjNdNlBYSsdyVAZkahQky5F+7zxzAhdEzokbVmu9BhY=
Subject key identifier: FF:53:74:3E:3E:EB:9B:27:A2:BA:B7:5C:F3:BB:1B:45:08:37:F9:99
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018336765C301C47A1C3CD88B2FD2A37E7F2
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/_1N0Pj7rmyeiurdc87sbRQg3-Zk.roa
Signing time: Tue 13 Sep 2022 10:47:50 +0000
ROA not before: Tue 13 Sep 2022 10:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 157.97.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:76:5c:30:1c:47:a1:c3:cd:88:b2:fd:2a:37:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Sep 13 10:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff53743e3eeb9b27a2bab75cf3bb1b450837f999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:72:55:14:dc:37:91:d8:e8:34:95:b2:4f:
1c:f2:6c:8b:c3:ac:45:d5:1f:94:cc:60:d7:c1:c0:
63:2b:86:fb:9f:dd:09:2a:a3:5a:6a:7b:84:8a:d2:
3d:27:b2:25:a6:07:2c:d8:a7:f6:7f:2f:2f:12:f4:
fb:63:4f:d1:94:5b:13:8a:08:3a:ff:7c:6d:ac:6c:
1b:58:4f:2f:e9:b5:0a:6f:63:a4:f2:34:d0:ab:1d:
e4:c8:8d:51:91:63:39:4a:e1:a9:c1:d8:a4:82:45:
17:08:06:57:98:06:1c:46:25:12:3c:6e:6a:8c:8d:
77:fb:5f:7b:8d:c4:40:83:40:19:e7:2e:af:bf:9d:
31:ca:c5:8e:09:7d:26:2c:88:07:7b:51:8b:7c:f7:
a8:e4:25:9a:99:81:1a:bd:8c:e5:bb:cb:08:fe:c7:
df:78:b3:37:5e:27:e6:b4:1d:eb:bf:9a:12:cf:2a:
a7:0e:16:7e:92:37:1a:c3:4e:1b:ee:eb:83:97:20:
f6:a2:be:e2:82:c7:1a:41:3d:ff:0f:69:d4:5c:f6:
e0:7b:f0:41:b1:11:7f:94:d2:b4:52:09:9e:70:32:
04:8e:ec:7e:5b:6c:04:10:28:5a:3c:30:4a:a1:27:
f7:d3:b7:4d:41:32:0a:ca:29:f2:55:f6:15:24:21:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:74:3E:3E:EB:9B:27:A2:BA:B7:5C:F3:BB:1B:45:08:37:F9:99
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/_1N0Pj7rmyeiurdc87sbRQg3-Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.121.0/24
Signature Algorithm: sha256WithRSAEncryption
23:79:06:73:04:31:58:a3:0f:dd:74:7b:ba:f3:44:e2:51:9c:
d7:64:e3:52:ec:1f:3b:fc:32:21:6f:fa:17:6c:71:54:36:8f:
11:08:15:94:04:c9:d1:c0:7c:7a:46:c3:47:ba:8f:11:9e:af:
7b:86:96:07:06:3d:5a:3b:6a:5c:7d:bf:80:a7:dc:54:8b:27:
f2:fa:ab:64:2d:0d:2b:bf:49:a7:ea:f4:36:3f:eb:28:09:2f:
09:7e:94:7b:9c:9a:14:75:6b:56:a5:c4:4d:3c:5b:86:8f:6f:
5f:15:10:8c:42:4d:17:3c:ed:5d:88:c9:c2:85:69:dc:26:c5:
cb:95:77:a7:c8:c3:34:07:f6:e4:1b:b9:de:9e:eb:6f:a0:f3:
5f:09:ab:63:c3:38:fa:f8:89:d4:ef:eb:f8:36:77:fd:c9:19:
44:a8:8f:5b:aa:07:f5:ad:5a:25:75:21:13:77:2d:5f:7d:a6:
68:bb:6d:e3:a6:f6:23:e7:00:cc:f2:18:7e:2b:b8:09:60:b3:
3a:33:3b:da:0e:ac:1a:8b:53:9c:5c:09:c2:71:4d:df:3c:f5:
71:e1:40:28:f2:e9:79:de:89:ad:ad:96:9b:c6:85:ba:df:cc:
ab:ca:1d:11:78:d3:16:cd:23:e1:c1:8f:6d:7e:a2:fc:70:56:
2d:b2:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:26 2023 by rpki-client on console-fra.rpki-client.org