Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/nTl7dmWaoQ7cv2J8OLMjtQ6MzqM.roa
File: nTl7dmWaoQ7cv2J8OLMjtQ6MzqM.roa (raw, json)
Hash identifier: ockdc+X53qObCMKscykkrQi+9Lkgvwiu875D8eai4WE=
Subject key identifier: 9D:39:7B:76:65:9A:A1:0E:DC:BF:62:7C:38:B3:23:B5:0E:8C:CE:A3
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 01836A9F5121D596FEE56AB0A07B5FAA0CB5
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/nTl7dmWaoQ7cv2J8OLMjtQ6MzqM.roa
Signing time: Fri 23 Sep 2022 13:52:49 +0000
ROA not before: Fri 23 Sep 2022 13:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201916
IP address blocks: 185.59.216.0/23 maxlen: 23
185.59.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:9f:51:21:d5:96:fe:e5:6a:b0:a0:7b:5f:aa:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Sep 23 13:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d397b76659aa10edcbf627c38b323b50e8ccea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:6c:03:8c:38:43:d2:c2:0d:fc:d8:86:7d:
f2:6e:a5:2d:86:03:4c:ad:88:e1:d2:58:e6:61:6f:
2a:b5:8f:0d:e7:6e:57:1d:9f:40:39:86:dc:6c:c1:
f9:0f:90:29:3f:ac:f0:97:7a:cc:66:a3:03:9f:c7:
fa:ac:10:50:19:be:1c:bc:e8:dd:31:3b:26:68:e3:
db:d3:1f:d7:77:42:a5:9a:c0:f5:cb:08:67:51:f7:
db:23:f8:84:94:68:28:2b:0e:0f:28:43:50:85:cd:
32:d1:88:e4:8b:e1:fd:a4:5f:b5:cd:cc:8b:d7:a0:
02:ae:d3:03:fd:d6:df:c5:ee:6c:b4:45:32:f4:fe:
3f:96:87:4a:bd:d5:78:3d:1d:00:af:f1:96:8e:48:
b4:48:9b:94:f1:79:bc:d9:ef:61:1a:0d:68:e9:19:
58:b7:4c:80:1f:b0:55:be:95:95:05:2d:5c:d5:1c:
54:b6:fe:98:f3:8d:cb:ab:54:9e:35:d6:70:48:df:
48:1e:98:d2:b2:bb:d7:b4:c2:c9:a5:02:b1:97:d3:
bc:b4:e4:57:70:6f:24:84:b2:e9:0a:c3:d9:d6:36:
93:ec:1d:c5:c4:a4:d7:9b:37:45:20:80:77:11:51:
f3:f3:fc:25:67:1a:26:00:e5:95:2f:84:b3:60:67:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:7B:76:65:9A:A1:0E:DC:BF:62:7C:38:B3:23:B5:0E:8C:CE:A3
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/nTl7dmWaoQ7cv2J8OLMjtQ6MzqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.216.0/23
Signature Algorithm: sha256WithRSAEncryption
62:09:38:0a:bf:5f:ad:1b:fc:12:f1:8e:85:51:94:ad:73:5f:
9a:9d:1a:8d:41:2b:4e:29:9e:54:7b:9e:a9:cb:49:fe:9a:51:
5a:dd:33:28:84:fc:89:ef:e5:99:b2:13:36:84:44:92:72:84:
9a:8a:f0:86:1c:a4:c0:2b:1f:27:df:a3:0f:3b:65:28:4b:a3:
c6:7f:7f:ee:6c:b7:93:c0:11:8f:54:3c:16:68:9c:6a:03:dd:
3f:cc:de:1f:13:da:92:c1:04:01:bf:e7:9d:0e:e1:8e:c2:0e:
bb:03:00:5d:f4:05:8b:e5:cd:35:bc:d0:84:69:79:b8:08:20:
b2:d3:4c:e1:6a:40:c5:41:70:31:35:ad:70:46:69:e6:ab:31:
19:69:48:68:49:16:49:5c:f5:a9:ae:49:03:75:a8:e1:b9:01:
8e:d4:7c:c9:a5:0b:90:5d:95:6d:91:25:16:75:aa:e0:f7:4e:
ac:8d:f1:58:28:0f:ac:b0:88:e8:c6:17:a9:40:a9:8d:2a:6d:
dd:c3:e2:01:29:b7:e3:3d:f5:2e:90:f3:78:5a:12:09:d2:ad:
da:79:d3:a8:d5:18:49:23:62:39:44:ec:e4:c1:b7:e5:1a:c8:
00:73:cd:a4:25:de:d5:1a:2a:06:fa:8d:64:3d:41:e1:1f:2d:
10:a8:93:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org