Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/nSuTxu9bLoJeOQOZM0QUF6uzmSU.roa
File: nSuTxu9bLoJeOQOZM0QUF6uzmSU.roa (raw, json)
Hash identifier: gN5u6bHvm3Oo6X/MW4DAlxVaPruiyVEk8MBb3JLeH1c=
Subject key identifier: 9D:2B:93:C6:EF:5B:2E:82:5E:39:03:99:33:44:14:17:AB:B3:99:25
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 01838D52AB0A56C1BDE239231B710A8636C3
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/nSuTxu9bLoJeOQOZM0QUF6uzmSU.roa
Signing time: Fri 30 Sep 2022 07:35:48 +0000
ROA not before: Fri 30 Sep 2022 07:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207996
IP address blocks: 185.203.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:52:ab:0a:56:c1:bd:e2:39:23:1b:71:0a:86:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Sep 30 07:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d2b93c6ef5b2e825e39039933441417abb39925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:18:ac:e9:ce:61:e3:5b:cf:80:0a:ff:5b:
b4:aa:74:99:37:ce:2a:85:a8:cc:79:96:a4:d5:42:
af:d4:68:07:83:88:61:5a:2e:3e:35:cc:10:ac:84:
75:3c:65:3c:ce:1b:29:5a:36:8d:dc:18:b9:87:0b:
84:57:ae:4a:00:71:8d:c0:db:9c:02:18:79:21:18:
8e:23:7c:65:be:dd:28:b4:eb:5d:39:e6:b8:5a:9b:
20:40:fc:a4:b5:87:e5:83:a2:72:5a:c4:57:8f:b0:
cc:8d:77:8f:05:41:b7:20:65:6d:6f:7f:db:4b:54:
df:a7:68:8f:7d:0b:27:5c:23:71:00:0f:59:0c:87:
95:c9:1c:e9:dc:ed:dd:29:5b:0e:b9:9e:2d:ce:5a:
c4:a0:ef:92:3d:41:f2:87:f6:56:2c:25:9d:5e:f7:
ff:10:31:8f:84:01:eb:79:9e:1d:30:76:05:d8:ee:
dc:6f:2f:f0:df:ad:16:c3:4b:41:45:f7:02:dc:3c:
70:74:f2:01:64:1e:ca:64:d2:8b:d1:4d:44:84:71:
8f:ff:84:b5:50:01:e8:d4:38:7a:8e:41:85:d8:44:
91:fc:0f:1f:64:41:8f:33:57:ce:b2:39:43:20:6a:
0f:ac:75:56:0b:45:38:78:13:37:44:4f:12:b1:06:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:93:C6:EF:5B:2E:82:5E:39:03:99:33:44:14:17:AB:B3:99:25
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/nSuTxu9bLoJeOQOZM0QUF6uzmSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.113.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b0:42:4c:ff:01:6a:a8:26:ab:05:ab:79:1e:d1:e6:3d:4f:
04:68:f5:34:99:3c:e6:fb:16:59:d7:2b:e8:91:5a:a8:14:7b:
e7:d7:af:26:bb:77:78:d5:04:7b:75:54:7c:db:47:76:c9:04:
bb:35:61:bf:36:26:91:fa:0f:85:ae:d9:14:04:18:bb:01:74:
96:14:96:d6:e7:b5:23:17:1f:bd:cc:f7:85:64:e3:56:33:a4:
52:50:02:81:33:f9:f5:6f:e7:9c:87:ce:38:38:c8:4b:78:7a:
e6:91:1a:b4:e5:1f:64:4c:c6:b4:bc:05:93:2e:29:bd:d0:fb:
58:88:cf:93:6f:ef:1a:b2:1b:3c:dd:43:e2:fd:dc:f1:75:88:
3f:f8:7a:43:20:89:23:c0:42:0e:18:99:ce:48:32:da:db:45:
c6:e5:b0:22:6a:d6:e2:ed:5e:a9:d4:fe:5a:45:e4:1b:c9:d2:
1e:27:c8:73:90:45:2f:ee:69:f5:3d:1e:17:79:14:3d:fb:6f:
e2:44:65:15:d1:5a:c5:b1:b6:a9:0b:c5:3b:38:31:db:ab:68:
8a:b0:b5:8d:98:bb:6d:ee:a6:92:20:c2:8c:a0:a6:f7:83:8c:
c2:4c:dd:86:19:11:83:80:d2:b2:89:dc:83:c7:8d:02:2d:d8:
8b:d5:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:34 2024 by rpki-client on console-ams.rpki-client.org