Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NSk00O6ptHLnsBzwdgdsAR5h2mU.roa
File: NSk00O6ptHLnsBzwdgdsAR5h2mU.roa (raw, json)
Hash identifier: 43aCIkJoFu3J+SM0dMEyeG3XO7wJnJ5rAmxKAP4Bfzk=
Subject key identifier: 35:29:34:D0:EE:A9:B4:72:E7:B0:1C:F0:76:07:6C:01:1E:61:DA:65
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01843CEBFE9CB24AB37E3A6E0B55FB27CE03
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NSk00O6ptHLnsBzwdgdsAR5h2mU.roa
Signing time: Thu 03 Nov 2022 09:56:49 +0000
ROA not before: Thu 03 Nov 2022 09:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 93.120.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:eb:fe:9c:b2:4a:b3:7e:3a:6e:0b:55:fb:27:ce:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Nov 3 09:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=352934d0eea9b472e7b01cf076076c011e61da65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:82:e8:14:0f:f2:20:4f:f8:07:28:81:90:
e6:cb:9e:f3:0a:f3:8a:da:e4:54:cf:95:0f:40:25:
98:61:40:c8:d9:da:5a:6e:45:7f:f9:ee:ee:e2:fa:
5d:a0:c4:8d:55:f7:41:c8:55:9b:97:e5:e4:78:b0:
22:97:be:28:5f:a1:52:96:45:0f:4f:5e:25:4b:c6:
75:7c:96:e4:f8:cc:b2:f6:e5:91:fb:93:4f:8a:58:
02:54:bf:45:94:fa:d3:32:33:9a:0d:e9:47:aa:36:
e4:db:3d:b8:ee:e3:0f:d9:3d:25:ec:92:b7:7a:bb:
df:88:86:4e:f6:06:0f:40:df:15:49:b4:93:12:b3:
29:20:1a:69:e9:3b:c5:85:39:37:3a:b2:fe:6a:88:
b0:52:9a:b3:8c:1e:8f:04:34:9d:54:ef:7e:9b:4f:
84:ad:e3:a7:8d:82:46:c6:d0:13:ce:dc:63:98:1d:
77:33:19:24:47:c4:ee:aa:71:ec:01:bb:ba:4a:7c:
62:2f:a3:48:96:8a:0b:d8:f7:ec:df:fe:a4:54:58:
ac:6e:f5:03:7c:20:1f:f4:3c:bb:93:d4:6d:69:de:
07:44:ce:cc:2e:97:1c:d2:11:ea:6d:72:fe:bf:ea:
3d:a5:4c:74:24:ff:b2:62:c3:a7:b1:16:85:55:93:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:29:34:D0:EE:A9:B4:72:E7:B0:1C:F0:76:07:6C:01:1E:61:DA:65
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NSk00O6ptHLnsBzwdgdsAR5h2mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.0.0/21
Signature Algorithm: sha256WithRSAEncryption
05:e1:2d:96:70:9a:f0:50:cd:36:db:bd:1b:d3:cd:ca:cc:fe:
41:85:03:22:1b:6b:27:98:f2:5a:36:cc:5b:08:fd:c4:31:65:
8b:11:4e:1f:92:93:39:b7:ee:c7:47:a6:f8:6f:4e:4d:a1:3e:
ee:e5:5d:c8:ce:ba:01:4b:6d:a8:38:09:28:54:69:dc:e8:be:
24:2c:4a:eb:06:2f:22:1e:3e:b5:6a:f3:01:d9:aa:5d:b8:55:
dc:5c:78:8d:68:62:a7:b8:10:fd:ab:33:6d:76:c5:dc:b0:bf:
17:63:c0:37:82:df:18:c6:19:06:c5:17:7a:6b:a1:dd:a7:56:
a4:79:a8:34:51:81:ca:1f:3a:5a:b0:93:eb:38:41:00:e3:b6:
bb:67:bf:9b:4b:47:78:32:72:5d:75:cc:39:24:04:8e:92:3e:
b4:34:63:4a:0f:89:85:59:4c:d2:f2:f2:ca:3d:ff:17:a3:37:
3d:56:ef:83:9d:1e:c5:52:c9:77:76:4d:37:d1:ff:5c:8f:35:
8f:89:7c:b8:60:b5:98:81:ba:13:fa:16:9e:20:81:4d:4e:76:
1c:bb:ea:70:8b:77:65:f6:32:4e:d2:51:4e:78:4f:33:d7:1e:
e6:4a:ed:2a:ee:91:6b:b8:fd:85:6d:8d:d4:fb:7d:4c:f6:de:
22:d7:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org