Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/n-Mow9Mg3ujwUbaFGCgMKAuVIO0.roa
File: n-Mow9Mg3ujwUbaFGCgMKAuVIO0.roa (raw, json)
Hash identifier: IIKbdaISicAEPTkyBBSaPCqPn8R2FnR9/unqenmIjzE=
Subject key identifier: 9F:E3:28:C3:D3:20:DE:E8:F0:51:B6:85:18:28:0C:28:0B:95:20:ED
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184E74922501D811541D1E880901184CF71
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/n-Mow9Mg3ujwUbaFGCgMKAuVIO0.roa
Signing time: Tue 06 Dec 2022 11:54:00 +0000
ROA not before: Tue 06 Dec 2022 11:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:49:22:50:1d:81:15:41:d1:e8:80:90:11:84:cf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 6 11:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fe328c3d320dee8f051b68518280c280b9520ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:83:74:65:c7:6a:51:87:0d:35:00:78:c4:
b4:d9:a3:20:c6:47:31:a7:9f:8b:bf:b6:a3:97:bc:
e3:0a:29:32:15:70:56:52:68:ad:67:fc:00:2f:70:
79:d6:9c:3d:1f:30:aa:24:9e:6b:a3:94:95:a6:22:
8e:5a:3c:43:79:34:11:78:ac:0e:a4:a8:28:9f:b6:
62:49:fb:7c:ec:ef:33:50:63:b0:4c:a7:97:c4:d0:
a0:85:98:65:91:0e:02:35:e5:72:9f:a8:6c:35:95:
a3:72:00:48:16:8b:31:9f:0d:f8:ee:5a:d8:dc:f3:
f0:ae:97:4e:3f:c2:65:fd:81:bd:93:90:67:a0:fb:
66:89:95:20:28:72:be:47:f0:2d:17:f5:46:33:53:
8b:b2:57:11:65:ab:0d:5a:ad:a4:19:22:9f:41:ad:
31:28:2f:e1:f5:19:b3:fb:13:06:75:4a:bf:ac:a7:
99:32:90:f8:2f:a8:b2:35:ed:e1:ca:10:4f:8d:a7:
97:85:0b:07:2f:d2:2c:d5:38:d6:52:96:14:94:72:
7b:e1:58:d8:74:23:e8:5b:92:bf:73:d7:ee:c9:0c:
9e:4c:b6:d8:57:1d:76:07:b1:b3:95:65:6d:82:dd:
02:4e:74:ed:11:d1:91:aa:67:62:fd:33:67:7c:d5:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:28:C3:D3:20:DE:E8:F0:51:B6:85:18:28:0C:28:0B:95:20:ED
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/n-Mow9Mg3ujwUbaFGCgMKAuVIO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.38.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:e9:b0:1c:ab:b3:07:34:d6:34:3a:e6:43:fc:d5:ef:34:21:
8d:d1:ed:79:1f:56:57:97:fd:4d:83:be:4b:4b:a1:5b:77:c2:
6f:66:3c:3e:de:24:c7:4e:0f:4a:97:54:fe:7f:c2:16:64:0a:
78:a4:e9:5f:fd:92:21:7a:38:12:c5:42:01:e5:2a:2e:ed:e2:
b5:31:64:c4:b9:91:12:05:63:2c:85:a3:e9:6b:ff:dd:65:2f:
5b:bf:ad:46:c2:cb:8a:4e:4c:2f:16:48:2e:c7:f6:d7:16:83:
ea:7c:2b:8f:19:09:e1:37:9a:79:9b:27:bb:a3:8d:4c:bf:6c:
d1:1d:89:58:bf:68:a9:4b:a1:6a:49:77:65:ef:20:75:9c:55:
2c:40:30:82:a1:2f:2e:98:46:83:d3:67:d9:9a:ab:53:4a:e7:
f3:01:26:f5:7e:9b:fe:a5:7d:14:d9:dc:18:66:d0:0d:a6:86:
00:de:00:59:a2:d3:8b:b5:37:ad:f8:1b:87:ba:c1:48:5e:35:
74:cb:58:3b:d7:3c:4c:6b:ff:4f:41:22:08:b0:d5:82:d3:0d:
ab:70:65:de:d7:be:ef:55:97:10:e6:63:0d:ce:7d:3d:62:e4:
0e:88:db:d6:69:95:ab:bf:c7:c2:7c:32:9a:ac:3e:89:16:d2:
b1:c7:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org