Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/npXNNeEh_zpVVDgGCI9COkkyaKQ.roa
File: npXNNeEh_zpVVDgGCI9COkkyaKQ.roa (raw, json)
Hash identifier: oHhlOLzh6vj9cVMf+DF2gVqIlLo9PNB4Jw1ZujcMPr4=
Subject key identifier: 9E:95:CD:35:E1:21:FF:3A:55:54:38:06:08:8F:42:3A:49:32:68:A4
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018249FC895A0E2C0A9817548794032A5318
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/npXNNeEh_zpVVDgGCI9COkkyaKQ.roa
Signing time: Fri 29 Jul 2022 12:44:23 +0000
ROA not before: Fri 29 Jul 2022 12:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 193.46.56.0/24 maxlen: 24
45.89.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:fc:89:5a:0e:2c:0a:98:17:54:87:94:03:2a:53:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jul 29 12:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e95cd35e121ff3a55543806088f423a493268a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:9d:04:c4:2b:3e:de:c1:de:b4:cb:db:a7:
16:d0:62:42:29:76:20:a6:b3:03:48:22:69:e6:7f:
fe:c1:c1:a9:b8:83:ef:25:28:1d:3a:e3:45:66:3b:
ee:5f:ca:0a:4a:47:fd:50:e9:c0:0f:99:36:ff:a2:
97:e0:b2:3c:21:fe:b4:49:9c:7c:04:3f:a2:8a:62:
01:a7:cd:c2:d1:aa:23:1f:8b:8f:30:b0:8d:1a:68:
9e:26:53:c6:5c:c9:22:83:32:32:f4:33:6d:97:cf:
ca:93:a1:31:cf:b6:1b:b2:06:f5:ea:16:02:91:f9:
66:48:ea:9f:e3:e0:44:8f:c6:4c:1c:ad:a8:d9:61:
3b:bf:7c:62:e2:d5:00:2a:de:7b:8b:f3:2a:3f:94:
40:d6:67:d3:79:6c:14:50:2e:40:c5:56:0a:61:07:
89:c9:69:f1:72:af:76:c4:12:29:22:60:37:69:06:
90:24:68:f9:b3:b8:08:c9:0d:c2:da:ad:23:89:cf:
ea:eb:86:e2:8b:bb:65:72:ef:33:9a:3a:83:29:5b:
6c:e3:e9:38:95:8a:75:57:73:f2:34:f2:8b:c2:97:
38:c8:fd:73:6e:9d:8a:91:19:78:4e:67:af:b4:2d:
d0:a1:ba:6a:65:98:b3:94:bd:13:3b:c7:95:09:30:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:CD:35:E1:21:FF:3A:55:54:38:06:08:8F:42:3A:49:32:68:A4
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/npXNNeEh_zpVVDgGCI9COkkyaKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.52.0/24
193.46.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:f0:ca:c8:af:32:77:62:7a:7c:87:bb:5c:a6:62:7f:2f:32:
e6:f3:43:89:4c:66:1e:84:29:a6:2f:b2:6c:3d:b5:2a:fb:48:
49:fe:bc:53:fa:58:a5:06:01:b9:41:15:f1:ce:a3:a8:11:ca:
9b:4f:33:0b:fb:7e:ed:dd:63:56:30:22:be:12:31:81:ea:2d:
b8:8e:4c:b8:4b:54:34:a3:55:c6:06:24:1d:81:0d:eb:ea:12:
f6:c2:55:82:1c:86:5c:66:ab:37:7d:fa:ad:dc:30:22:4e:46:
13:88:93:c1:a6:eb:2b:36:5f:fd:9c:99:9b:18:d5:41:07:f4:
a3:34:89:75:a8:ab:f7:bf:28:58:8b:b8:2d:07:b8:d7:cf:57:
39:57:93:c6:f9:5f:ec:62:d0:5e:e3:28:78:34:f3:4a:c1:82:
86:68:27:33:38:61:7b:db:72:cb:c7:d7:49:a3:ff:88:fb:60:
49:1e:bb:f1:28:9f:4d:bd:48:b9:21:9a:f3:f8:f5:f8:0f:70:
f8:6f:21:b8:a5:10:c7:e2:38:c1:53:7c:bc:8f:a3:8a:ae:04:
b2:7b:9a:a2:1c:cb:b7:ee:64:68:10:f1:34:92:30:80:80:cf:
8b:36:38:b9:0f:e1:ab:61:c7:ef:fa:aa:75:de:88:67:b3:10:
76:05:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org