Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/nLsYc4dcEcN25fuIQXY-IW8bF8k.roa
File: nLsYc4dcEcN25fuIQXY-IW8bF8k.roa (raw, json)
Hash identifier: ocLITLu/WOtptes+RBSevb4BC+z8tQvy8VvW6YHwBuU=
Subject key identifier: 9C:BB:18:73:87:5C:11:C3:76:E5:FB:88:41:76:3E:21:6F:1B:17:C9
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 0184C421336474EE1E731E0A7F01FD409D94
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/nLsYc4dcEcN25fuIQXY-IW8bF8k.roa
Signing time: Tue 29 Nov 2022 16:03:40 +0000
ROA not before: Tue 29 Nov 2022 16:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203963
IP address blocks: 185.9.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:21:33:64:74:ee:1e:73:1e:0a:7f:01:fd:40:9d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Nov 29 16:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cbb1873875c11c376e5fb8841763e216f1b17c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:bf:4d:ee:75:86:16:26:26:85:af:9e:7e:
53:91:0d:2d:22:aa:4c:e0:1e:e4:e1:50:05:38:ef:
b5:ea:d8:2d:56:2a:a8:fa:ec:00:c7:39:9f:1a:db:
df:da:1b:44:c1:bf:18:9e:db:c7:89:29:63:17:0e:
30:d6:31:bd:13:00:f1:57:f9:e9:34:03:bc:de:e1:
4b:a1:19:1a:86:76:a4:ea:78:33:e6:2a:54:ac:b0:
42:91:0e:ec:b7:bb:45:e5:51:5a:b1:41:ea:52:05:
84:95:de:7b:6c:cb:ab:d4:b3:14:83:46:ea:95:fc:
41:5b:f8:31:52:9a:aa:62:6b:05:5a:70:23:9e:7c:
6f:19:d8:61:6b:ab:6f:7d:ee:e2:8b:fa:ef:3a:09:
88:9f:70:b5:4e:8d:e4:c9:96:87:76:c5:78:60:c3:
cb:7b:a2:1e:6e:70:56:36:4d:24:24:30:12:13:d0:
95:b0:53:64:65:77:03:ed:85:21:a0:59:68:67:1d:
59:cd:63:78:a5:27:2c:bf:fc:29:56:10:2f:33:29:
2e:20:f2:fe:bd:9b:84:0c:4f:c1:e2:ad:f5:e1:31:
ea:0e:ba:94:92:60:c2:a0:93:bf:33:b1:44:3d:c1:
8e:33:1b:34:6a:07:89:61:02:c7:58:69:d9:17:72:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:18:73:87:5C:11:C3:76:E5:FB:88:41:76:3E:21:6F:1B:17:C9
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/nLsYc4dcEcN25fuIQXY-IW8bF8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c4:3c:d1:85:70:17:12:48:e4:36:7a:d0:51:e9:4c:00:9a:
e1:31:a4:fe:58:97:c1:e0:fe:ad:c5:f8:11:fb:0b:c9:e6:da:
a5:28:94:08:2d:46:43:fb:45:18:31:f4:97:8c:88:8c:e3:00:
a9:4d:81:3d:ef:50:c3:ec:de:59:9e:34:54:d0:27:a7:ab:f8:
71:b6:7b:fc:b3:68:31:53:d7:c4:9c:87:a2:cc:ed:b7:7c:96:
37:1e:84:0e:4b:aa:8d:3a:2a:b7:3d:02:43:fd:44:1a:d7:d1:
e6:9b:cc:72:5e:6b:10:d0:b8:a1:a0:c9:2d:6f:ae:06:e2:4f:
25:d5:f0:86:a7:6d:45:44:c7:35:91:de:f0:63:02:97:5e:ec:
42:08:10:7a:c4:a7:b3:08:ca:0d:9f:65:af:3c:01:74:b6:08:
24:87:16:65:8c:2e:b3:25:36:98:9b:35:53:de:ee:98:40:bf:
33:d2:32:16:54:c7:b6:79:72:c9:e2:d9:13:ea:63:76:da:32:
ea:da:7c:f4:c5:fa:ce:a6:a9:fa:32:00:35:12:9d:75:ec:3f:
75:a8:b0:1b:81:b3:6d:56:9a:80:96:26:da:e5:bb:e7:b1:dc:
76:cd:0d:09:af:ba:ed:bd:0a:bd:08:a4:7f:6e:e9:f2:ac:86:
88:d4:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:24 2024 by rpki-client on console-ams.rpki-client.org