Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/NbCNRT6mzZITVm26z-feZqBzjs4.roa
File: NbCNRT6mzZITVm26z-feZqBzjs4.roa (raw, json)
Hash identifier: wZUwP2h5HSpPH1krrJOhDrJ9U3BFh7RyEaY0qgkl8yA=
Subject key identifier: 35:B0:8D:45:3E:A6:CD:92:13:56:6D:BA:CF:E7:DE:66:A0:73:8E:CE
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018571F110F9085858656C38EB6D0079F793
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/NbCNRT6mzZITVm26z-feZqBzjs4.roa
Signing time: Mon 02 Jan 2023 10:05:02 +0000
ROA not before: Mon 02 Jan 2023 10:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 212.116.226.0/23 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:10:f9:08:58:58:65:6c:38:eb:6d:00:79:f7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 2 10:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35b08d453ea6cd9213566dbacfe7de66a0738ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:d4:51:a8:2a:6f:33:15:9f:0d:9b:59:44:
cb:bb:d8:3c:2e:9e:28:47:b5:8f:d6:f3:9f:fd:2a:
63:57:99:b0:99:74:55:c4:89:c1:3c:53:fd:c3:30:
ae:38:65:25:08:fe:5b:e6:77:c1:fd:58:06:d8:f2:
02:d5:0e:03:e1:ed:3b:e3:97:fd:fb:fa:7e:91:a0:
4a:cb:06:f6:41:8f:cc:8f:b8:74:c4:88:56:13:63:
f8:ce:5d:b9:37:76:72:98:75:92:ef:8f:34:c5:bf:
5f:53:32:e8:bd:6e:22:50:af:95:86:ed:cb:e6:c1:
82:47:22:f6:c3:e2:6c:a8:3a:97:3c:09:4a:91:ab:
6e:ff:81:8e:14:f9:42:98:3a:19:73:40:81:ff:1a:
a9:b7:df:49:34:2b:09:0e:04:d8:57:ad:84:7a:28:
0e:47:fa:2a:f3:a6:7a:5d:71:0e:f5:f4:9c:e5:ac:
b1:c8:7c:0e:35:ab:59:4d:6c:27:8b:03:8e:52:3b:
b9:c2:8e:3c:8f:15:8c:fe:0a:8e:88:77:61:ad:91:
f8:e9:ca:f6:ac:a0:b0:da:45:67:90:e0:7b:de:28:
3e:83:13:7a:33:a7:56:a2:98:4a:19:90:94:fa:42:
fc:38:58:66:fd:18:f0:ac:2e:34:78:a2:19:76:a5:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B0:8D:45:3E:A6:CD:92:13:56:6D:BA:CF:E7:DE:66:A0:73:8E:CE
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/NbCNRT6mzZITVm26z-feZqBzjs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:70:fd:8b:17:33:b1:10:97:cf:1a:9c:c6:8c:24:0c:a1:dd:
3f:83:37:f3:80:f6:f4:be:9a:84:bf:b0:1d:15:30:60:09:80:
9d:a7:07:e5:a1:e1:3a:d3:9f:43:04:0a:6b:2a:83:36:37:6f:
a7:54:66:49:d1:53:4b:05:a6:5b:c8:18:de:60:62:22:a0:17:
79:e7:7a:65:0a:c9:60:bf:38:af:ab:f2:31:c8:1e:c9:85:2c:
4b:c6:88:54:f2:9a:1d:ec:bc:f8:9d:b5:f4:c1:08:bc:8f:5c:
e1:7a:27:0e:2b:25:a4:7d:b3:c4:c4:7f:96:ed:70:fd:a8:f5:
0d:44:ef:37:bb:72:a0:08:65:fd:cd:11:7c:20:32:eb:0b:19:
2b:1f:50:ec:62:55:b0:51:df:8c:d8:bb:9a:61:b0:3b:91:7a:
33:6d:8e:70:0c:1d:15:cc:bf:df:8e:5c:75:1e:69:77:c0:93:
66:9a:0e:94:5f:c7:d7:51:c0:ef:2a:e2:0b:01:af:62:1c:1f:
eb:73:7f:54:39:df:db:ba:3b:02:e6:1b:7f:16:4a:e4:c3:75:
71:86:27:42:08:97:f2:8d:77:f2:a2:a0:49:2c:a5:5b:24:1a:
17:3f:78:e6:26:65:05:2b:b8:ae:4c:07:63:16:44:d3:71:70:
d8:64:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:51 2025 by rpki-client