Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nsKISmXH-Q_siYFI-b3Te2VO7hM.roa
File: nsKISmXH-Q_siYFI-b3Te2VO7hM.roa (raw, json)
Hash identifier: L58MYAwwkTwDPQ05g4L20zGMTyN8Yg76CMHa6ImDVcc=
Subject key identifier: 9E:C2:88:4A:65:C7:F9:0F:EC:89:81:48:F9:BD:D3:7B:65:4E:EE:13
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F19AFC
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nsKISmXH-Q_siYFI-b3Te2VO7hM.roa
Signing time: Sat 01 Jan 2022 16:00:00 +0000
ROA not before: Sat 01 Jan 2022 16:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 185.242.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150051580 (0x8f19afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ec2884a65c7f90fec898148f9bdd37b654eee13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:55:d1:13:7b:11:84:20:70:56:e2:cb:89:
c9:66:d6:0a:00:4e:ba:7f:5d:8e:81:63:66:a6:4d:
e8:56:76:2f:e6:77:30:3d:49:a1:2f:85:ba:d9:59:
ff:14:56:08:97:8f:cb:a9:95:1c:fa:fa:2c:0b:20:
ca:84:3f:eb:e9:af:02:70:5f:12:71:0f:ee:7c:b2:
fd:b8:6a:5d:ac:c2:7e:02:69:c1:51:66:e5:48:26:
63:50:b0:90:bb:bb:88:0d:c1:7d:0b:38:a9:85:46:
72:49:62:d6:62:a1:72:fd:1b:ca:46:fe:29:65:39:
a6:f8:95:7e:3c:0c:64:58:24:65:8c:2f:2f:15:ad:
f0:80:67:d0:2c:3c:89:1a:ea:e3:39:fd:88:3f:5e:
02:57:f8:fc:19:ed:42:4d:52:db:fb:d6:60:ae:42:
5b:79:6c:13:27:75:b3:82:fc:05:60:bd:71:1e:3b:
73:35:23:ef:48:32:cf:78:77:08:ec:b6:e2:95:21:
0c:5f:d1:ca:eb:bc:23:13:a1:e0:a9:f2:6e:f7:98:
fd:bc:b7:89:87:14:fa:a2:0b:ee:49:10:f9:18:ae:
96:9e:80:c6:41:8d:f3:ab:28:c9:8d:6c:b1:22:c6:
de:59:38:37:4b:57:82:a7:ec:92:91:d8:59:10:da:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:88:4A:65:C7:F9:0F:EC:89:81:48:F9:BD:D3:7B:65:4E:EE:13
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nsKISmXH-Q_siYFI-b3Te2VO7hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:17:68:a0:f4:d4:ef:8b:d0:8c:de:31:ad:b5:20:fa:a2:09:
f1:27:9b:2b:45:53:11:9a:76:68:00:cf:90:87:64:1b:26:8f:
f7:d1:ce:58:52:73:c7:df:96:0f:81:35:53:48:04:26:0c:cd:
fc:11:85:ee:38:0c:de:07:ee:fe:05:29:e5:b6:43:c9:bc:60:
dd:e4:cd:6c:0b:62:a9:48:6c:b5:b8:b6:69:6b:77:c8:a6:b8:
ed:42:1a:9e:ec:48:b2:57:5f:53:38:f2:4b:2b:ee:3c:5e:cd:
a0:fc:92:02:9c:ec:e7:14:9d:25:73:26:7c:d2:a3:64:44:db:
30:0d:ed:5d:f3:0e:9c:11:02:0b:20:3f:f3:b7:4f:79:e0:b8:
b9:1d:b6:cb:7a:3a:2a:33:d2:a1:57:cd:8d:d8:be:72:23:78:
9c:5c:71:73:e6:95:de:ca:32:50:88:ae:ac:3f:6b:41:fd:f4:
d2:82:b6:bb:44:80:f3:00:8a:34:a4:b2:e7:04:83:40:29:d1:
18:9e:45:56:eb:19:e0:f0:7b:43:17:e8:0f:b8:9a:1a:af:04:
ec:f0:5a:44:d8:42:17:5b:49:f8:3c:2c:b1:cf:bb:2a:eb:c3:
4e:24:8d:30:d3:1e:73:f4:52:0f:55:bd:5c:49:0e:e2:bd:25:
3e:61:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org