Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/n0UXKHqTIB-8Sbnvhg9hVF0Psjo.roa
File: n0UXKHqTIB-8Sbnvhg9hVF0Psjo.roa (raw, json)
Hash identifier: 1bQtRM/qKWSIQzLtPKvEOlnbVI+dmvWW6xG3Bqxi4qg=
Subject key identifier: 9F:45:17:28:7A:93:20:1F:BC:49:B9:EF:86:0F:61:54:5D:0F:B2:3A
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0625668B
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/n0UXKHqTIB-8Sbnvhg9hVF0Psjo.roa
Signing time: Wed 23 Mar 2022 13:40:36 +0000
ROA not before: Wed 23 Mar 2022 13:40:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50986
IP address blocks: 193.34.202.0/24 maxlen: 24
31.170.24.0/21 maxlen: 21
185.27.96.0/22 maxlen: 22
178.236.64.0/20 maxlen: 20
2a02:1610::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103114379 (0x625668b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Mar 23 13:40:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f4517287a93201fbc49b9ef860f61545d0fb23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:c0:8a:ff:96:c9:b4:2e:e2:9f:41:33:9d:
c0:9e:9c:6f:3a:b9:38:eb:1d:6a:6b:9f:9f:80:72:
e3:68:e1:71:a7:d8:42:36:69:32:af:d0:9d:0b:ba:
82:81:b4:f3:38:36:e7:28:dc:d7:c8:48:ef:0f:5d:
6a:af:1e:eb:2f:c6:74:ab:8f:b6:73:c9:77:26:84:
d8:1f:07:c2:72:02:3f:6b:64:11:6c:f4:19:70:18:
fd:2e:dd:f6:40:0f:cb:70:09:38:df:eb:ca:71:f5:
f6:9e:73:57:86:c4:c2:89:b3:07:3e:e7:94:ff:fc:
62:05:c9:eb:85:08:d2:72:57:50:30:46:46:36:65:
b2:a8:35:b6:04:e0:d2:1e:73:ab:f4:c2:1a:83:77:
52:50:13:4b:78:50:bf:97:7e:ba:ab:3d:47:53:8f:
ad:b8:d1:8c:b1:23:7c:f3:42:df:75:b4:48:18:22:
4c:14:4a:df:10:05:be:e3:86:8f:98:07:6a:3f:51:
0b:42:a5:d7:46:32:a2:5b:8d:15:a4:00:f6:30:c4:
45:84:36:c6:15:02:39:b2:4b:30:35:7d:ee:bf:a0:
57:51:6d:48:a2:a7:87:c6:62:c4:3e:85:36:91:7f:
44:49:3a:c9:8f:86:4c:3e:bb:bf:cd:09:cb:a9:09:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:17:28:7A:93:20:1F:BC:49:B9:EF:86:0F:61:54:5D:0F:B2:3A
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/n0UXKHqTIB-8Sbnvhg9hVF0Psjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
Signature Algorithm: sha256WithRSAEncryption
04:40:1d:90:d3:34:d1:7a:fc:f7:48:c6:de:b0:04:6e:e1:cd:
03:9f:20:d9:72:04:6b:ce:22:08:1f:9c:f4:f0:0e:41:25:aa:
f7:ea:41:52:56:f0:8d:ea:82:1f:85:a5:90:a0:5e:2d:f1:14:
3c:5a:4d:ac:18:b9:94:a7:84:de:ef:b2:ec:61:18:21:3d:b4:
0c:ac:51:ac:4b:4f:9d:16:b5:20:06:79:73:43:a1:5c:5b:dc:
4a:bd:ab:bf:e9:81:d4:00:49:13:68:1e:9e:f5:22:e2:72:14:
47:f0:fb:41:75:6b:d0:f0:db:58:40:01:bf:3c:7e:bc:df:ba:
74:9a:25:0a:04:48:4a:64:62:4b:30:c5:7c:7a:ad:cb:2c:37:
b1:fe:3c:b5:3b:d8:2e:6a:b2:81:1a:a8:cf:3f:32:c5:8a:97:
27:cf:f7:fe:be:98:d5:cf:bd:18:5c:74:a9:d8:c6:43:79:31:
3f:65:79:84:93:df:d9:8c:93:53:7b:75:ed:ed:93:d0:9e:e5:
e4:22:ed:ad:39:79:54:2d:36:25:18:ea:98:4f:d8:e4:5f:c8:
3d:45:3d:dd:be:05:17:68:7a:ae:3b:75:ae:c7:a5:6d:58:6d:
d8:3d:51:e1:0c:91:d7:8f:2f:4d:94:89:2c:9c:00:89:3a:c0:
72:28:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:20 2023 by rpki-client on console-ams.rpki-client.org