Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/njx9hDdKmvZWQPoheAESPsK8d1M.roa
File: njx9hDdKmvZWQPoheAESPsK8d1M.roa (raw, json)
Hash identifier: ZzVyfHdHS3XGB+T5TkxRiG3rd1LMRYxYpFvbeX4Xshc=
Subject key identifier: 9E:3C:7D:84:37:4A:9A:F6:56:40:FA:21:78:01:12:3E:C2:BC:77:53
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 0183F4634D369DF729C1EE28911CCF52A296
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/njx9hDdKmvZWQPoheAESPsK8d1M.roa
Signing time: Thu 20 Oct 2022 07:54:51 +0000
ROA not before: Thu 20 Oct 2022 07:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203056
IP address blocks: 91.146.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:63:4d:36:9d:f7:29:c1:ee:28:91:1c:cf:52:a2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Oct 20 07:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e3c7d84374a9af65640fa217801123ec2bc7753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:48:e7:f3:96:43:1b:4d:3b:58:8c:50:b6:
d0:bc:28:15:a7:65:ae:fe:60:5c:cb:f8:98:b8:45:
38:14:7a:ac:39:e9:15:be:0b:87:54:65:c3:c7:1d:
65:db:20:12:e0:45:e5:02:d1:44:c1:22:4f:24:e3:
de:ff:13:26:9e:2c:52:66:13:37:d5:8e:eb:2d:0e:
1b:86:f9:33:db:f1:f5:2e:0a:08:c0:70:34:e9:a2:
88:b3:48:bb:d7:83:56:9b:5e:fe:d7:a5:f3:47:9b:
f1:d8:1f:33:78:d4:a7:bc:b3:1b:56:79:8c:c1:6a:
70:26:40:64:ea:6e:4d:b2:e4:51:82:25:fe:36:03:
d0:77:1c:75:03:8f:0b:97:a7:5f:b0:4e:f9:32:61:
f4:2c:60:e5:f7:5b:3b:38:a6:9d:d3:59:c2:b7:ed:
a1:69:9e:02:ef:ce:44:90:0e:28:60:2d:90:45:49:
16:64:c9:34:fc:77:38:4f:b4:37:2f:33:9d:ee:a3:
10:25:d9:69:08:41:3e:39:b1:78:bc:53:40:03:38:
b4:7c:89:4b:ed:60:c3:92:91:90:c2:19:7a:b2:43:
76:6d:bf:70:75:3f:13:27:99:44:84:7d:91:11:26:
14:39:dd:c4:1d:73:fe:1d:d8:5f:ea:c2:a4:75:21:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:7D:84:37:4A:9A:F6:56:40:FA:21:78:01:12:3E:C2:BC:77:53
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/njx9hDdKmvZWQPoheAESPsK8d1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.114.0/24
Signature Algorithm: sha256WithRSAEncryption
54:40:90:49:fd:9f:8f:c4:4a:b3:5a:82:83:c3:44:a9:88:c9:
62:0a:64:22:52:38:de:ee:34:ec:63:9f:9d:09:95:2b:41:f1:
22:70:59:ba:b4:aa:dd:f2:ee:8d:31:89:be:11:7a:cd:ae:44:
97:bb:b7:e9:98:c1:d3:91:52:19:f4:b4:c8:67:36:72:27:bd:
2f:0e:b4:c9:6d:bb:a8:51:0a:83:b5:7b:5c:c1:e3:d8:5c:8a:
21:17:21:b9:16:d0:34:cc:5b:0e:ca:1d:d7:6a:29:83:40:d1:
75:f5:ad:41:99:95:84:0f:e3:48:15:1b:ed:22:18:61:72:97:
c8:e5:aa:cf:c0:c6:df:f7:6a:b4:c8:8c:22:25:59:6c:ab:ba:
6d:98:90:b3:f3:ff:63:8c:b4:2c:89:13:95:f7:21:84:60:ad:
75:f2:82:87:f4:78:5e:4f:ad:9b:e8:71:cf:e8:00:a2:0a:7f:
97:01:8c:7d:a8:8c:9b:3c:2a:48:bb:6f:0a:50:ea:7c:d4:5b:
10:2e:2e:e8:d9:53:66:50:79:24:04:67:12:78:65:57:7a:9a:
9d:9e:0b:42:3c:0c:2a:d0:50:ab:d6:09:6f:e5:82:e1:fb:40:
22:bc:82:fc:63:76:ec:73:63:42:c3:74:2d:9f:cf:3b:ba:fd:
e8:29:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:37 2023 by rpki-client on console-ams.rpki-client.org