Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/Nuvs2t_c7hExdQPyT4pah1JgPmU.roa
File: Nuvs2t_c7hExdQPyT4pah1JgPmU.roa (raw, json)
Hash identifier: jHWIQu696BaDKUuKXs9rkxI217UbIu7JHkc+rhA1NWE=
Subject key identifier: 36:EB:EC:DA:DF:DC:EE:11:31:75:03:F2:4F:8A:5A:87:52:60:3E:65
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 1C2B706C
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/Nuvs2t_c7hExdQPyT4pah1JgPmU.roa
Signing time: Sat 01 Jan 2022 09:56:37 +0000
ROA not before: Sat 01 Jan 2022 09:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 185.24.172.0/23 maxlen: 23
185.24.175.0/24 maxlen: 24
185.24.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472608876 (0x1c2b706c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Jan 1 09:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36ebecdadfdcee11317503f24f8a5a8752603e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:8d:2f:c9:c3:a0:36:ab:83:44:84:2d:b7:
88:a4:e5:14:55:9f:8c:40:22:10:0c:2a:8b:08:f2:
83:c2:6d:98:a8:aa:70:04:a3:f1:79:47:18:95:1d:
7b:d7:8b:8f:69:96:b8:0b:a3:f1:7d:1b:dc:f8:12:
be:77:6a:7e:7f:a5:e2:18:73:a9:e3:e9:fc:92:39:
5a:d8:64:ff:2f:ac:2c:47:6c:03:fb:4f:7a:5f:3d:
de:ed:1c:8e:33:25:b7:ab:db:01:4b:da:7e:75:12:
77:22:7c:3b:d4:04:e9:3d:40:2d:c1:d6:76:11:ee:
85:32:20:a0:38:cf:8f:c6:e4:df:58:57:e0:f9:d9:
f5:5c:5a:8d:08:0f:5c:a1:53:bb:1e:00:fe:18:b6:
cf:be:33:d5:0c:bc:8d:d5:1a:4d:2c:59:86:62:51:
7d:e2:c2:9a:e3:ed:70:d1:9a:5e:26:9c:41:17:6c:
af:52:88:29:c7:05:b0:2f:6c:6e:ee:79:86:c0:38:
6d:53:4a:2a:d3:7a:df:a2:ea:85:3f:0c:c9:cc:f6:
7a:ba:e4:f7:b1:de:86:a6:72:1e:f3:57:4c:b4:e9:
6e:41:a2:e5:17:46:32:ef:da:62:a8:73:e3:19:0c:
f6:5c:73:b7:d0:8a:8a:27:66:b8:b1:78:81:f4:3b:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:EC:DA:DF:DC:EE:11:31:75:03:F2:4F:8A:5A:87:52:60:3E:65
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/Nuvs2t_c7hExdQPyT4pah1JgPmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.172.0/22
Signature Algorithm: sha256WithRSAEncryption
79:53:a6:d5:b9:ab:64:86:27:c1:09:f6:4a:85:98:3a:14:1e:
48:6c:b9:cb:09:39:42:87:a0:67:b5:d6:a5:07:8f:a0:0f:5d:
2b:c0:c4:11:18:5f:5f:6e:ab:b4:78:5b:bf:4b:f2:c6:ec:6e:
60:eb:f4:bb:1a:6f:7b:21:07:4e:a4:e1:b2:39:24:6b:9e:a0:
a6:58:2c:bd:8c:b5:1d:ec:bb:bb:d6:9c:9f:2e:f8:a7:ab:09:
54:45:e4:a2:aa:a1:f9:f8:90:82:e3:e5:1b:ad:b1:1e:82:eb:
a6:58:73:97:12:25:36:ad:12:9f:f9:1d:c1:af:f6:d2:52:c9:
85:61:9f:c9:4e:91:eb:c7:e7:66:72:e4:35:c2:7f:7a:29:49:
99:4e:ce:fa:b0:5e:b7:e4:e4:20:df:fe:31:b8:7e:63:23:85:
2c:92:35:58:7a:06:bf:b7:dc:16:2d:7e:ef:ba:f1:f3:d2:b5:
09:fe:f4:04:1a:8f:84:59:ea:73:f6:03:4f:41:6d:75:ae:00:
3b:04:46:f4:38:12:86:57:e0:b8:76:d8:56:5f:dd:88:e9:29:
25:32:8a:5c:c2:fb:ae:06:1b:ea:05:b3:70:55:43:6c:28:d1:
0e:6f:97:35:1e:9e:86:69:08:b3:22:e9:3d:58:a4:e1:1d:37:
ce:13:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:22 2023 by rpki-client on console-ams.rpki-client.org