Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/NnmvQ64VpQOWlBIuippGe2DhDOY.roa
File: NnmvQ64VpQOWlBIuippGe2DhDOY.roa (raw, json)
Hash identifier: Ocj1WbbJYEyOWPFFCScF4QglcOSn4cm974UCb53RG50=
Subject key identifier: 36:79:AF:43:AE:15:A5:03:96:94:12:2E:8A:9A:46:7B:60:E1:0C:E6
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 0240A9BE
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/NnmvQ64VpQOWlBIuippGe2DhDOY.roa
Signing time: Sat 01 Jan 2022 04:53:23 +0000
ROA not before: Sat 01 Jan 2022 04:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198881
IP address blocks: 194.99.96.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37792190 (0x240a9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Jan 1 04:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3679af43ae15a5039694122e8a9a467b60e10ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:0f:4d:67:6b:dc:4d:fd:4f:c1:9e:e1:0a:
74:3c:fa:5f:51:19:8b:5d:02:d6:87:27:c0:5c:b1:
d0:60:f1:ac:aa:4d:bb:38:a3:da:90:40:c3:b6:43:
4d:4d:cd:2b:e7:3f:af:31:fa:65:a5:c0:13:be:44:
79:9d:90:a6:d6:98:71:62:e7:16:e7:72:b8:6c:53:
3b:76:ba:6b:46:ee:1c:42:22:45:a1:e7:93:e8:1d:
37:52:5d:44:70:de:60:5c:03:63:7e:94:17:5c:30:
c9:4a:e0:3d:c0:81:ec:73:e0:2f:59:6a:d8:5c:4d:
8c:d8:dd:7d:ee:4e:7a:75:42:04:0c:79:9b:4e:b5:
4e:6b:97:78:1d:11:1b:e1:c1:32:f9:85:f8:ac:27:
1f:70:1a:f8:2e:08:db:dd:2a:41:24:fc:a7:a1:39:
d6:6c:17:ea:ba:fb:3a:f4:12:31:47:20:98:44:94:
91:ba:7b:c8:6c:fd:e1:da:cf:bd:a6:ca:63:ab:cb:
9d:d8:3c:b2:38:83:8b:9e:32:b8:46:96:9e:5a:fd:
4e:3d:b9:1f:30:d7:71:e9:88:91:e0:4d:02:b3:bd:
6d:db:0b:2d:54:5a:bb:2c:44:40:b7:2c:64:ec:2e:
0e:a7:cf:59:0b:1d:89:21:b6:e6:9b:a3:f8:7d:bc:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:79:AF:43:AE:15:A5:03:96:94:12:2E:8A:9A:46:7B:60:E1:0C:E6
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/NnmvQ64VpQOWlBIuippGe2DhDOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.96.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:6a:8d:13:c8:a8:ba:19:8d:b5:a3:1b:50:d0:b7:4f:ab:f9:
8e:2d:be:07:91:2d:60:96:89:7d:91:9b:ac:3f:e7:d9:83:bd:
d8:a4:8b:1a:aa:3f:43:c6:a5:68:dd:59:aa:eb:38:c5:fc:28:
3f:59:6b:57:5e:0a:c6:8b:ce:5e:ea:a1:ae:97:21:d2:7f:22:
81:27:52:e3:17:ac:86:bf:1a:da:fc:c3:10:66:e3:ef:6a:1b:
cc:02:b6:1a:9c:d6:38:7c:a3:47:4d:1a:d9:a3:63:d2:77:04:
f0:b0:70:19:d1:af:cd:52:a9:58:b8:07:24:75:27:69:75:78:
1d:5f:f9:99:b1:6e:28:b5:79:9d:26:27:ee:93:04:49:07:e2:
cc:ae:93:c8:8f:18:ac:48:79:7c:20:f0:d0:a8:7e:9a:49:f7:
7c:e9:76:17:fd:92:5b:52:b2:f9:22:b8:b6:86:98:cf:a5:20:
3d:76:78:85:e6:54:6a:c5:7f:fe:1a:91:73:3c:c0:bc:64:8c:
d1:f9:0c:88:c5:41:aa:dd:fb:f4:2d:a1:6b:2e:3f:7c:34:f5:
95:aa:e2:d8:63:18:ed:41:cd:9c:41:5b:b1:26:a2:da:07:93:
5c:93:86:cd:b1:55:e2:96:b0:97:7f:df:19:d8:a2:07:bb:67:
91:2c:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:16 2024 by rpki-client on console-ams.rpki-client.org