Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nPWqa4LOfct0toAJYnBKe-oGqNM.roa
File: nPWqa4LOfct0toAJYnBKe-oGqNM.roa (raw, json)
Hash identifier: nIuIQpbVUOqPkJEg2/rtsx8V5pia+ZW3z4RGLPI6Hz0=
Subject key identifier: 9C:F5:AA:6B:82:CE:7D:CB:74:B6:80:09:62:70:4A:7B:EA:06:A8:D3
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 024134B5
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nPWqa4LOfct0toAJYnBKe-oGqNM.roa
Signing time: Sat 01 Jan 2022 05:56:45 +0000
ROA not before: Sat 01 Jan 2022 05:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212843
IP address blocks: 212.86.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37827765 (0x24134b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 05:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cf5aa6b82ce7dcb74b6800962704a7bea06a8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:fa:cc:de:4c:c7:a8:40:e8:bd:30:9a:72:
e4:4e:e9:e4:22:f9:21:59:b0:0a:b6:0f:3a:9d:cc:
9b:4b:4a:f9:12:d0:4a:e4:88:23:e6:61:23:fa:8d:
df:4b:8c:87:e8:8b:57:fb:df:2c:e6:fb:b5:d1:aa:
3d:26:2c:4d:e0:a5:ba:8b:cd:f7:59:d5:6f:f3:9c:
98:0f:dd:3c:f4:ff:d1:77:f8:b5:da:15:b5:4d:a2:
bd:13:c0:ae:82:5e:e0:60:0b:1d:79:0e:27:e1:81:
67:54:df:c3:87:66:e3:3f:dd:29:37:7b:95:1a:d8:
fc:22:4b:ab:75:c5:64:b0:7b:ff:35:18:df:17:35:
6e:bc:ca:1a:63:e5:6d:76:8f:69:fb:50:d4:b6:40:
a2:b8:4c:e4:3d:3b:94:b7:ea:b5:ac:67:92:ce:f6:
6f:e0:99:6e:a1:4b:a5:0c:ec:53:5e:14:6c:22:5d:
cc:80:35:8e:05:d2:89:12:9b:48:7c:1f:10:ef:e7:
6c:eb:75:20:40:a7:b7:1b:2f:ab:46:52:61:23:65:
97:d5:9e:0d:66:eb:4a:de:1b:b3:74:33:2c:09:2d:
d2:0c:d7:69:61:85:80:83:22:d2:21:5e:14:10:0b:
d6:b0:8c:38:7e:4b:03:fe:ba:9d:c5:f9:c4:6c:46:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:AA:6B:82:CE:7D:CB:74:B6:80:09:62:70:4A:7B:EA:06:A8:D3
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/nPWqa4LOfct0toAJYnBKe-oGqNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.86.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:07:06:eb:02:68:bd:42:aa:6e:cc:c6:75:3b:18:f1:21:25:
d3:57:1b:17:e7:09:92:e3:f5:c8:8f:1f:49:ae:e1:b4:98:43:
cf:bf:ae:e1:53:22:f8:5b:e8:ae:75:0f:fb:7c:b8:45:40:d9:
c4:65:f8:93:e8:da:68:08:5a:ff:7e:99:d7:3b:53:59:df:ca:
6b:18:ad:9d:30:9d:a2:b7:43:fa:cc:4e:ec:00:a2:ab:5a:d0:
32:88:03:28:c5:fd:d6:bb:dd:83:ef:e9:66:6e:87:b3:90:24:
d5:e2:6e:2d:aa:3e:2f:1e:56:bb:6b:b7:c7:eb:d0:64:5f:7c:
b5:a3:64:7d:78:25:a6:09:bb:50:b6:94:88:fa:40:bb:b9:77:
1b:c4:9b:d5:e5:3c:33:2b:5c:c0:55:95:e5:a2:d8:c2:b6:d3:
c1:92:c1:df:03:3a:21:28:02:26:1c:9d:64:72:28:63:e5:8e:
a8:32:9a:e0:62:b6:e6:94:50:b6:59:38:db:29:0a:4c:ec:e0:
6e:20:1d:7f:1b:5a:77:cd:4d:4d:30:7a:ea:51:87:9c:06:8e:
16:52:d7:c0:81:96:de:02:40:a5:b8:83:cf:e6:45:fb:2a:23:
ef:e9:2c:ca:c5:c4:69:be:93:73:6d:a2:da:71:29:75:8c:fa:
a6:08:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org