Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/u9N3CNJXcCwl8Q4rTxDYz1rRZkM.roa
File: u9N3CNJXcCwl8Q4rTxDYz1rRZkM.roa (raw, json)
Hash identifier: vgM6wSb7DiY8el6blAlyHJm0ioCu56VyRWS4X8fXG04=
Subject key identifier: BB:D3:77:08:D2:57:70:2C:25:F1:0E:2B:4F:10:D8:CF:5A:D1:66:43
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 155C3F17
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/u9N3CNJXcCwl8Q4rTxDYz1rRZkM.roa
Signing time: Sat 01 Jan 2022 08:04:48 +0000
ROA not before: Sat 01 Jan 2022 08:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 185.92.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358366999 (0x155c3f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 08:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbd37708d257702c25f10e2b4f10d8cf5ad16643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:87:f2:ec:10:66:81:f0:9a:d9:f1:10:08:
67:7c:97:04:e1:17:65:da:12:92:bf:fc:73:54:26:
4b:c6:6f:cc:91:87:3d:0e:ff:29:81:d5:9b:19:b3:
52:f8:e2:94:80:30:15:13:36:29:d5:e9:38:c0:d0:
ce:99:89:d9:31:ec:74:c1:96:7e:4d:4f:af:25:3d:
23:58:05:3f:0f:90:63:1d:56:54:f9:e4:1d:0a:d0:
22:e5:64:99:f4:c8:f9:93:07:3b:44:d4:ea:1f:d2:
36:d7:1f:4e:57:c1:ca:58:d9:5b:a4:03:34:25:86:
8a:ef:4f:5c:0b:b5:33:1e:7d:8b:58:5a:3f:01:99:
61:a9:79:a8:82:df:ab:f9:a1:50:a3:d6:a2:9a:f8:
ec:29:04:2d:a0:33:23:3f:06:a5:e9:bf:06:b8:54:
9e:15:1f:3a:3a:5c:3c:04:d6:1d:ee:e0:62:5f:47:
bf:a5:6f:b9:8e:15:77:ce:79:d2:36:61:e8:70:05:
e7:05:13:bc:e2:b1:9c:64:c7:3d:3a:b9:d0:3b:6a:
ab:b3:4e:bf:79:f0:c2:31:8a:e1:67:16:1e:11:d5:
55:16:38:ae:c2:4d:ee:ce:c0:25:36:3a:49:14:46:
31:a2:48:83:22:70:57:25:ee:4b:0b:49:b1:c4:5c:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:77:08:D2:57:70:2C:25:F1:0E:2B:4F:10:D8:CF:5A:D1:66:43
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/u9N3CNJXcCwl8Q4rTxDYz1rRZkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.25.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e9:f8:67:5f:cc:fd:4e:25:3f:df:ab:17:83:9b:d2:40:58:
5f:74:b4:98:98:4d:91:c2:a1:49:19:d2:cc:18:9d:e8:d2:1e:
0e:da:d1:59:fd:bd:cb:59:d6:7f:21:76:0c:88:47:69:ea:0d:
c5:81:a7:97:94:ac:85:e6:79:34:15:f4:a5:59:a2:5e:1b:e6:
b7:f6:8d:4e:b9:da:58:fc:aa:71:dd:bc:08:27:cf:e8:37:04:
ba:03:90:95:43:91:a7:40:98:33:42:2a:7e:06:b5:95:e0:87:
c3:bd:7d:b2:bf:85:40:71:ca:ad:1a:2a:13:45:9b:90:c5:2d:
f5:f2:ae:fc:69:4e:1a:20:fd:4b:ef:6f:16:18:3a:78:7b:49:
dd:68:7d:97:31:05:c2:3f:98:73:6e:a4:ae:3b:82:48:aa:91:
70:08:1e:cb:b8:72:8f:28:2a:56:76:41:d2:12:97:f6:24:21:
2c:20:3e:bc:b6:32:b5:9c:e0:c7:a8:dc:b7:76:c7:27:c4:ca:
1b:dc:d9:37:f8:ac:d6:e9:3c:19:87:9b:4e:bb:c8:02:09:f4:
2e:fd:86:0d:af:3e:75:86:0a:49:19:96:66:6c:0a:66:78:3a:
e1:ad:62:68:33:fb:a0:03:61:83:56:10:c1:20:81:50:1d:82:
f5:4d:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-ams.rpki-client.org