Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/U1SY9IkSd60zf1ru_S9Ntsc2_Mk.roa
File: U1SY9IkSd60zf1ru_S9Ntsc2_Mk.roa (raw, json)
Hash identifier: lunLGu0Hk00bc5Azukajf6yrFHkMSuiZkfJifr7v2g4=
Subject key identifier: 53:54:98:F4:89:12:77:AD:33:7F:5A:EE:FD:2F:4D:B6:C7:36:FC:C9
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01837AD933E1162FF6039C8672D62E8E1E04
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/U1SY9IkSd60zf1ru_S9Ntsc2_Mk.roa
Signing time: Mon 26 Sep 2022 17:29:58 +0000
ROA not before: Mon 26 Sep 2022 17:29:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198589
IP address blocks: 185.122.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:d9:33:e1:16:2f:f6:03:9c:86:72:d6:2e:8e:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Sep 26 17:29:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=535498f4891277ad337f5aeefd2f4db6c736fcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:bd:7e:82:6d:5f:d7:e2:3d:78:55:e1:5c:
fa:26:95:f5:d9:61:5a:9f:ff:50:b6:af:f9:e4:a1:
f1:e0:ef:b1:07:c5:19:5a:75:84:30:04:74:64:48:
b6:2d:5d:ac:0f:95:fe:3a:ca:94:96:a9:9c:14:e4:
0c:b8:43:76:53:80:52:59:29:aa:de:6d:d4:7c:f6:
5c:5a:fe:1b:95:42:25:75:1a:2e:e0:6f:0c:f2:b2:
7a:af:b7:a3:12:74:b7:b7:7d:cb:5e:3e:4e:5a:25:
24:2d:30:07:d9:03:99:7b:b8:73:cf:c9:50:6d:bf:
48:df:78:aa:94:29:f9:d4:3f:2e:62:67:9b:b9:79:
95:8c:df:04:d0:ab:3a:9c:ad:35:f2:96:bf:09:71:
68:03:17:e8:f5:a3:d1:e9:1b:7a:b5:3b:15:2e:24:
44:48:aa:ac:24:30:30:e3:27:d9:99:da:da:f0:af:
5e:46:ba:27:0c:d4:cf:e1:af:bc:ab:08:11:b5:5e:
b4:54:5d:ad:50:9b:ac:31:4c:41:5f:f4:24:eb:16:
ba:e9:54:c3:4a:ad:c3:e4:87:ac:24:e4:01:05:a7:
48:5f:51:a9:7b:15:1b:0c:72:3a:1d:74:49:a9:53:
1f:8f:ef:d7:c3:48:59:f6:b7:76:c1:e7:2e:1a:40:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:54:98:F4:89:12:77:AD:33:7F:5A:EE:FD:2F:4D:B6:C7:36:FC:C9
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/U1SY9IkSd60zf1ru_S9Ntsc2_Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
81:56:c7:b5:3e:46:7a:1f:e7:b4:29:a3:ee:97:c9:82:f8:b0:
ce:78:d8:c4:76:f0:b9:95:76:0d:83:a5:a5:f8:19:fe:75:1e:
dc:30:ca:00:af:23:1c:f6:cf:d0:f7:f9:4f:f2:d5:06:20:d6:
cc:6e:7f:4a:e2:e2:64:cc:46:38:73:b1:d3:ac:9a:f0:0b:bf:
25:07:c0:4e:d6:b7:9e:a1:1d:ae:1a:54:3e:2d:6b:c0:e1:97:
fd:bb:12:2b:fa:cb:d1:be:6c:64:73:60:f6:aa:1d:cb:5b:0b:
dd:2e:ce:bf:2b:9e:dd:74:4f:6e:69:19:a9:8a:55:1e:94:b5:
e3:4c:12:93:81:53:4d:65:26:be:36:1b:c4:f8:a0:12:67:a8:
ae:fa:ae:f3:7a:d9:95:ce:e8:7f:ce:5b:ce:07:20:81:ec:0d:
46:25:0f:50:ce:ec:84:57:ea:fb:3c:bf:08:d1:88:a2:b0:f4:
fc:e3:2d:ec:cc:42:4f:fd:67:e1:cd:87:de:be:5f:bb:7e:96:
05:12:01:d3:08:3c:0a:b7:84:41:b3:c7:7f:4a:73:a1:99:81:
e0:af:d9:46:06:6a:25:db:3f:32:25:28:01:d2:b4:d8:46:6f:
fe:f6:17:a9:d5:18:dc:66:57:fe:c7:e6:20:02:d7:0e:1a:ea:
45:0d:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:22 2024 by rpki-client on console-ams.rpki-client.org