Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NNHmrN8-qckaSbPDhnLnFeUPfHw.roa
File: NNHmrN8-qckaSbPDhnLnFeUPfHw.roa (raw, json)
Hash identifier: gvQmZ9Ik25aemBJZAaiY56pXnfNRkRgoe4BfNhmEkxA=
Subject key identifier: 34:D1:E6:AC:DF:3E:A9:C9:1A:49:B3:C3:86:72:E7:15:E5:0F:7C:7C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0901BCC5
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NNHmrN8-qckaSbPDhnLnFeUPfHw.roa
Signing time: Sat 01 Jan 2022 16:00:24 +0000
ROA not before: Sat 01 Jan 2022 16:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39458
IP address blocks: 193.34.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151108805 (0x901bcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34d1e6acdf3ea9c91a49b3c38672e715e50f7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:3d:f7:d9:b9:ac:6b:a2:da:8e:d2:9a:02:
8f:2f:3a:dc:42:fc:2f:b5:34:00:f4:1e:fa:7f:b1:
df:49:2f:60:62:03:c7:d0:51:73:60:de:67:c0:fd:
4d:1a:cb:1e:07:d7:47:58:fa:36:81:ae:55:07:9a:
cb:8c:6a:f4:39:71:3f:8b:53:b8:26:9f:73:5b:6d:
7a:42:f4:56:73:2a:4b:af:9e:08:a1:cd:5e:cb:59:
3e:ca:ee:6a:ff:d6:e6:de:1e:4c:33:c6:3f:5d:17:
db:28:9a:88:95:c7:b9:d6:81:da:da:42:f1:8a:f2:
b9:b8:59:4b:4c:72:8c:b5:f4:8a:ed:10:d8:49:57:
36:94:84:71:d5:e8:da:1a:37:f2:ab:b0:b5:0b:2f:
8a:c5:05:08:2a:fd:96:a4:1e:46:cd:51:93:3b:19:
2f:28:7b:af:33:f0:f3:2b:77:80:76:5d:fb:44:6d:
03:fe:35:60:4d:ca:45:31:9a:83:0c:e0:d1:45:ec:
13:44:1b:ed:dc:d1:2d:a7:48:53:f2:53:55:48:2c:
c4:f9:1a:bf:87:8d:53:1b:b5:86:fb:d9:a6:77:c9:
39:e3:66:82:21:2d:b4:a8:9c:aa:cd:47:7c:45:4e:
71:53:0f:cf:26:02:66:fa:c0:db:ef:9b:cf:44:a7:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:E6:AC:DF:3E:A9:C9:1A:49:B3:C3:86:72:E7:15:E5:0F:7C:7C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/NNHmrN8-qckaSbPDhnLnFeUPfHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:73:db:21:c5:79:1d:27:06:9c:02:89:d3:49:db:3a:11:1d:
e4:24:86:bf:b8:06:7a:b3:f0:be:5c:52:6a:91:1b:43:92:5f:
1c:6d:40:7e:57:bc:ea:9c:11:dd:40:81:dc:f7:95:28:fd:ed:
9d:6b:24:b3:84:84:59:34:db:04:20:64:36:5d:f7:dc:4e:1d:
b3:f1:d8:e7:e5:a6:85:d8:dc:fb:2c:37:c0:c6:5d:1d:89:6b:
b7:f6:67:c1:e9:fa:6d:b7:1b:6f:e2:16:9e:0a:18:88:b2:16:
e6:e3:4b:38:92:b9:76:fb:72:f2:86:47:5c:29:cd:17:72:83:
1d:69:23:c5:25:19:b5:f1:4d:27:63:a8:59:a0:12:dc:9e:91:
11:8f:8f:06:4d:56:0f:9b:97:0d:ef:12:60:e3:ba:a9:83:0b:
18:8c:c6:5a:1c:6c:ae:82:a3:3c:17:1f:4f:b4:af:b6:24:00:
b9:45:35:71:12:55:2b:c7:9a:b0:1e:d2:5e:84:3c:7f:00:2b:
6d:af:fd:33:38:ce:ed:c5:65:b5:ff:15:26:75:ae:b8:91:54:
2c:92:f6:3c:91:dd:b1:a5:30:8a:30:b6:a0:b2:b0:47:d5:c8:
3c:f5:73:b5:4e:4a:68:16:bf:f4:db:72:67:f6:4f:2a:17:6b:
ad:e1:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org