Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/nOJlMG8ngv2BR5kQfYwAHaubHXY.roa
File: nOJlMG8ngv2BR5kQfYwAHaubHXY.roa (raw, json)
Hash identifier: 5L0Mbbtn/fX48Jz43eHFD/Fbozej4BDjpvxc2q71gIE=
Subject key identifier: 9C:E2:65:30:6F:27:82:FD:81:47:99:10:7D:8C:00:1D:AB:9B:1D:76
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 04CE18
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/nOJlMG8ngv2BR5kQfYwAHaubHXY.roa
Signing time: Thu 02 Jun 2022 04:33:20 +0000
ROA not before: Thu 02 Jun 2022 04:33:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213173
IP address blocks: 193.176.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314904 (0x4ce18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jun 2 04:33:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce265306f2782fd814799107d8c001dab9b1d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:93:7d:0d:34:56:7d:f6:9a:7c:eb:5e:7a:
3b:4c:9e:02:95:88:fc:b9:13:58:7c:13:fd:41:10:
01:ff:68:c7:46:92:93:3d:bd:51:75:aa:6b:f6:57:
17:d9:23:e4:0e:de:d8:9b:c0:46:72:90:81:93:04:
c1:68:3a:c2:66:c8:cd:5f:18:03:b8:31:15:f0:8a:
2f:44:17:6f:32:41:04:8d:1d:9c:5c:67:4e:1f:45:
e4:7a:ff:40:43:93:ae:cf:32:e2:ad:d6:24:c9:9e:
c1:ed:21:a6:d9:a1:b2:51:d3:79:cb:91:39:56:75:
70:86:4d:92:42:9f:c1:e9:d4:a9:7c:e6:3e:0c:9e:
4a:01:cf:a9:e5:31:cf:c9:5d:32:00:83:69:29:b5:
04:55:c3:69:3f:d9:96:b5:65:fd:5a:f5:1e:2a:77:
c5:42:12:9f:fd:4f:34:0a:27:0d:80:b6:f0:24:a6:
6f:0e:f3:dc:5c:53:16:94:f3:f8:a9:a5:15:d8:bf:
10:22:78:88:52:67:72:c9:6e:b7:ac:33:ac:81:48:
62:f3:e2:45:0b:90:f3:b3:67:4c:66:e0:58:3a:04:
b8:6c:34:e9:e4:ac:fb:04:a3:2f:31:46:3b:49:8e:
cf:b1:3a:d0:1c:ea:05:66:88:3e:8a:f9:1a:89:70:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E2:65:30:6F:27:82:FD:81:47:99:10:7D:8C:00:1D:AB:9B:1D:76
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/nOJlMG8ngv2BR5kQfYwAHaubHXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.239.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f4:7f:76:0a:ba:02:ca:43:5b:ed:5b:6e:cd:9e:4d:06:91:
5b:86:28:41:5f:28:01:ec:ac:ec:c5:c0:b8:d7:b6:38:fd:09:
b9:94:9d:73:1b:8d:bb:a5:a0:b4:91:be:70:ba:f4:1e:25:20:
8b:b0:d0:32:e3:91:ad:f0:81:2e:a5:33:7c:fb:05:8a:d1:d5:
4e:88:0b:0b:46:7d:03:62:da:c7:d4:0a:cc:be:75:a4:c2:57:
3c:f5:cc:f3:c7:86:bf:39:cc:7c:bc:2d:bd:09:af:3f:7b:e1:
12:4c:17:24:15:93:31:f6:d3:43:d2:a0:8d:70:0f:d6:f2:2b:
b5:b0:53:58:6c:68:5e:28:4c:42:47:fe:4d:39:e4:19:80:1b:
f7:5a:e9:47:43:f7:ea:e2:40:ac:db:06:ec:cc:fc:72:b4:12:
c1:1e:fe:65:6e:93:f7:48:76:ea:1c:6e:54:1e:29:6c:4d:be:
14:89:78:93:c8:65:e1:b9:1a:21:11:3d:55:56:86:31:7e:8a:
0c:f8:65:e4:d6:d0:fd:9d:55:da:bd:8f:67:a2:1d:a1:f4:57:
fc:a0:b6:4c:e1:b5:f8:68:77:fe:64:20:e3:e7:a8:77:2d:41:
00:b3:36:a4:24:2d:f8:08:f1:dc:d3:ca:11:0c:61:ff:c9:d8:
a6:7c:c6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:34 2023 by rpki-client on console-ams.rpki-client.org