Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/nqPN83Bo8qgNzjyDmfaIdCJB4BM.roa
File: nqPN83Bo8qgNzjyDmfaIdCJB4BM.roa (raw, json)
Hash identifier: A1bu8D+4CMntp9UtRBNOiZwG4Qdg0AqJBXTkuu/yUpQ=
Subject key identifier: 9E:A3:CD:F3:70:68:F2:A8:0D:CE:3C:83:99:F6:88:74:22:41:E0:13
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E204796
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/nqPN83Bo8qgNzjyDmfaIdCJB4BM.roa
Signing time: Sat 01 Jan 2022 03:02:57 +0000
ROA not before: Sat 01 Jan 2022 03:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62044
IP address blocks: 213.152.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236996502 (0xe204796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ea3cdf37068f2a80dce3c8399f688742241e013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:89:84:3a:a6:53:f9:c8:5f:27:d7:fe:db:
28:54:66:3e:8c:1d:d4:24:52:cf:9d:87:b6:cd:8f:
36:eb:8b:7f:69:c3:f9:46:4f:00:bd:fb:38:6b:2e:
ae:c6:ae:10:cc:36:da:90:f4:6b:cd:c8:5d:18:98:
83:6c:0d:18:bd:3b:9b:a5:47:84:31:f3:eb:65:49:
3a:79:28:a8:da:4e:b0:f4:f7:4a:36:cd:55:93:e7:
ef:6e:70:9b:94:ac:28:0c:bd:fc:4a:a1:e4:d2:1f:
5e:de:9b:9a:b5:24:36:ed:9b:be:2a:57:fa:e1:a1:
c1:1d:ee:28:75:5a:64:89:d3:f3:03:15:26:6f:40:
87:84:c5:95:64:e5:66:5e:67:0d:c5:a5:9b:d4:b6:
cd:4c:4d:ba:af:6f:fd:f0:16:5e:2e:48:d6:9f:58:
9a:f8:79:f7:99:6c:d5:26:57:b7:58:68:e5:27:59:
5c:86:5c:75:ac:aa:10:ef:62:fd:2c:8b:6e:16:77:
98:69:14:cd:64:e5:d2:23:7e:07:ac:6e:ff:68:9f:
7b:fe:67:ac:9d:95:31:77:f8:5a:56:64:4f:54:e5:
86:9a:c6:8e:2f:45:8d:c4:aa:ce:fc:6e:60:b1:45:
56:a6:19:9d:bf:9f:2f:74:41:be:a5:64:a5:d7:fa:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:CD:F3:70:68:F2:A8:0D:CE:3C:83:99:F6:88:74:22:41:E0:13
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/nqPN83Bo8qgNzjyDmfaIdCJB4BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.228.0/24
Signature Algorithm: sha256WithRSAEncryption
48:83:63:5c:a9:ce:a4:98:18:e2:16:15:ef:7a:ae:a9:0a:34:
29:f3:f4:01:48:9a:af:93:b4:88:21:50:12:57:b5:f5:0f:f4:
aa:a9:97:d7:e1:c6:38:a8:34:48:99:b0:35:7f:4d:6f:7b:9b:
ed:bb:5b:0d:f9:fb:9d:87:d6:fd:60:18:f2:7d:9d:0c:3e:a8:
10:af:33:3b:22:02:5e:54:6f:9c:b0:0e:0d:62:60:5a:ca:74:
be:e6:b4:fb:3b:4b:6c:03:1f:1e:ba:92:a2:a7:52:81:58:38:
d3:53:8c:08:a9:ad:ec:34:ca:3a:13:96:98:d3:d0:a2:a9:b6:
76:0d:66:46:3a:61:be:af:09:39:c5:3e:17:75:5b:3b:d2:a3:
17:e8:60:ae:da:7c:74:82:8c:5f:a2:47:eb:5d:82:89:98:79:
6d:1c:8c:c0:06:df:f1:e0:99:53:bb:89:fc:78:5b:8e:2e:95:
0a:a9:ac:f0:46:06:7a:4f:02:8f:74:32:f9:0c:1e:e2:2a:42:
cc:d3:94:33:43:4f:0c:cd:8f:f8:8b:26:a2:c9:44:7a:a0:e5:
7c:b4:6c:08:2b:88:54:fd:b9:8e:46:00:fa:15:64:a4:dc:e0:
01:50:99:e7:c4:64:92:11:56:3a:d4:bc:d0:fc:e1:e2:73:5e:
8e:2c:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org