Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/NbGGsIPLV337L-RKEIjbKB1nY30.roa
File: NbGGsIPLV337L-RKEIjbKB1nY30.roa (raw, json)
Hash identifier: c5B6iGY/Lbd/kKFCHY8P6lZ65bbL3re/vy29c2klNik=
Subject key identifier: 35:B1:86:B0:83:CB:57:7D:FB:2F:E4:4A:10:88:DB:28:1D:67:63:7D
Certificate issuer: /CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Certificate serial: 03B20E
Authority key identifier: 29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/NbGGsIPLV337L-RKEIjbKB1nY30.roa
Signing time: Wed 02 Feb 2022 12:37:39 +0000
ROA not before: Wed 02 Feb 2022 12:37:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.81.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242190 (0x3b20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292c5d372319fa6175e56ca79883d12b0c6e38ec
Validity
Not Before: Feb 2 12:37:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35b186b083cb577dfb2fe44a1088db281d67637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:0e:e0:f5:57:b1:6a:c8:ad:64:d7:bb:27:
3c:44:99:8f:99:4b:ab:20:49:74:88:3b:b9:38:f3:
c8:cd:61:ef:c0:49:81:5f:4d:17:46:84:67:20:cf:
3d:0a:89:ae:c2:4e:10:4d:09:2f:67:6b:e6:a8:f0:
a0:17:8b:8c:1e:b1:22:06:5c:dd:fb:c2:94:de:cd:
77:77:67:17:12:7a:ac:8c:2b:ba:6b:ec:5d:1b:b5:
03:f1:2b:11:9f:09:7b:96:6d:eb:02:b1:42:79:39:
26:50:41:d5:33:71:92:63:ed:91:a7:45:d3:4b:40:
83:a0:9c:7e:e9:1b:64:ce:0b:00:c0:9b:6a:9b:3b:
ab:49:7f:63:17:05:e1:5d:2b:b4:4a:81:33:78:bf:
fd:e2:ec:c8:d4:25:82:88:47:28:b0:28:05:1f:6d:
7d:b2:e8:e2:dd:ff:84:8c:20:24:2c:c0:b6:7b:70:
29:7e:42:63:2d:9d:19:5a:65:ca:59:8e:ab:38:db:
62:99:8f:6f:f1:2a:f0:14:d7:3e:0b:97:f6:3a:6b:
34:62:15:c1:06:9e:b9:66:35:c6:0f:68:5e:51:cf:
cc:4d:d0:ea:9f:54:e5:4f:1f:c4:60:97:e2:6c:9e:
68:c1:2e:df:5f:40:89:02:45:81:6b:ea:9e:e8:ac:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:86:B0:83:CB:57:7D:FB:2F:E4:4A:10:88:DB:28:1D:67:63:7D
X509v3 Authority Key Identifier:
keyid:29:2C:5D:37:23:19:FA:61:75:E5:6C:A7:98:83:D1:2B:0C:6E:38:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSxdNyMZ-mF15WynmIPRKwxuOOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/NbGGsIPLV337L-RKEIjbKB1nY30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e3f562-5929-44ad-9cc9-d3134c66bf6c/1/KSxdNyMZ-mF15WynmIPRKwxuOOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5d:ac:99:9c:6d:24:c6:57:f0:da:50:79:7b:21:8f:9e:12:
6b:a5:b3:8c:a2:7c:7c:53:dd:bd:43:52:89:80:fe:37:54:0e:
7e:cc:b6:03:1f:1d:b6:ac:0b:9b:65:a6:ae:bc:cf:7f:3b:98:
83:85:ae:4f:12:b4:bc:a5:da:b7:65:22:55:5b:2a:ec:91:48:
ce:a0:d5:78:91:8b:c4:0d:16:13:a5:8b:90:74:7f:7d:89:e6:
b4:b8:9b:d3:2e:7c:78:63:5d:9f:dc:56:85:c3:16:d4:26:5b:
8f:46:e3:7e:a5:9e:52:51:27:68:ad:0a:57:59:be:03:0d:fc:
df:17:7f:93:04:f3:ad:a0:63:96:9b:dd:86:81:2b:2b:48:79:
b3:bf:17:ef:ff:d7:4f:5d:a6:de:ad:00:f6:0d:77:73:ea:3f:
d3:82:ff:96:02:90:db:4d:e9:d2:4b:28:c5:84:ca:ba:c3:53:
c3:e3:2c:87:60:14:ed:35:80:a6:de:13:56:be:29:48:3f:4c:
8b:2a:ff:30:4f:67:9f:2f:92:19:cb:af:9a:6d:fd:fe:31:19:
e3:dd:7a:aa:60:6f:f5:58:04:63:bc:2d:a3:09:61:eb:db:6e:
8a:a9:39:50:11:14:de:71:fb:1b:6b:3a:06:93:4f:c8:97:00:
65:0f:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:52 2023 by rpki-client on console-ams.rpki-client.org