Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/navpx51tBWvk1TrOEUscJAvxSyA.roa
File: navpx51tBWvk1TrOEUscJAvxSyA.roa (raw, json)
Hash identifier: VqrriDLBe4y/nrRpAghN3ZXdhLBxpuvVS/RL6D4DMZY=
Subject key identifier: 9D:AB:E9:C7:9D:6D:05:6B:E4:D5:3A:CE:11:4B:1C:24:0B:F1:4B:20
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 0B80C1AF
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/navpx51tBWvk1TrOEUscJAvxSyA.roa
Signing time: Sat 01 Jan 2022 10:53:38 +0000
ROA not before: Sat 01 Jan 2022 10:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207408
IP address blocks: 194.76.227.0/24 maxlen: 24
2a0b:7140:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192987567 (0xb80c1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jan 1 10:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dabe9c79d6d056be4d53ace114b1c240bf14b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:69:7f:8e:5a:41:a4:c7:a7:7d:22:68:a0:
dd:02:99:38:6c:18:45:9d:40:29:74:46:eb:0f:05:
0e:c9:50:96:55:67:8a:16:13:91:33:7e:ab:ce:f8:
e7:23:b7:12:13:d6:4a:be:4b:b8:c8:0a:d4:13:fc:
6c:11:e8:6e:aa:fb:60:38:84:fc:9e:8f:17:07:63:
11:3a:8f:53:ba:87:9c:a8:8a:17:60:89:e0:e5:ea:
2e:57:7d:36:61:9c:fa:2d:aa:ed:23:03:81:87:d4:
41:fa:df:72:cc:ac:58:a1:2d:5d:7a:aa:7e:64:45:
60:09:bb:61:52:1f:a7:b3:58:b4:3c:f5:52:74:4b:
c6:b9:c8:89:39:ac:5d:c5:aa:d7:2c:08:ef:88:5c:
57:04:40:d3:02:43:e2:07:37:b9:d0:a6:fe:ba:22:
49:bd:48:cf:c7:9c:9a:cb:ae:b5:0b:d6:a3:01:6a:
40:cc:00:ca:0c:b8:4b:16:5f:6e:6f:ba:96:95:80:
a0:1c:72:51:3a:f9:59:f9:05:02:cd:ee:e7:7c:8d:
19:1a:f2:6f:50:7b:31:35:c3:f4:12:e4:23:ef:df:
c4:54:87:13:42:69:83:3d:2a:02:70:61:5c:90:89:
18:c1:56:c4:11:ec:7b:a6:a4:10:68:8f:2a:25:65:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:E9:C7:9D:6D:05:6B:E4:D5:3A:CE:11:4B:1C:24:0B:F1:4B:20
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/navpx51tBWvk1TrOEUscJAvxSyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.227.0/24
IPv6:
2a0b:7140:1::/48
Signature Algorithm: sha256WithRSAEncryption
6e:cd:af:39:b5:ec:3e:20:db:a0:5a:32:d4:8a:17:6d:b6:f6:
22:73:1d:ec:9d:2b:fa:a7:1a:de:37:cf:3a:e7:9a:51:6e:4d:
65:1f:d9:d0:fb:38:f8:be:32:cb:65:4a:3f:c2:4d:06:0d:3b:
78:9b:da:f9:ea:d3:cb:84:c2:3f:4c:87:72:88:8c:71:0c:75:
80:f5:a3:06:5f:1a:05:1e:4a:3c:ec:8f:d4:d9:33:35:e3:27:
03:60:11:18:68:d2:29:bc:b9:22:f9:fa:d5:3a:0e:3e:0d:71:
8a:ce:20:fe:19:8c:0c:05:8a:53:40:88:9d:e7:3e:36:e1:96:
3e:58:c3:66:be:1c:f2:34:22:a2:13:7d:ef:0b:46:75:9c:a3:
28:b8:72:e4:18:c9:d0:3e:25:7e:7e:07:c2:26:87:cb:e0:e8:
01:2a:62:21:6e:2e:63:4a:7b:52:99:bf:9b:ab:e0:8d:46:36:
5e:52:81:31:8c:cd:31:05:be:05:65:bd:99:0c:23:14:69:64:
4e:5c:37:53:d7:5f:80:87:5e:bb:17:e5:87:a6:c4:1d:a9:8b:
2a:e2:88:8b:1b:df:4f:75:4b:43:6a:06:af:0f:9f:40:2a:8e:
7c:1b:83:f8:de:21:2e:b8:65:35:98:04:26:85:63:a3:ec:50:
d2:c0:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org