Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/NYJUyTgmuuF5Leq3XOl3ACHJSYQ.roa
File: NYJUyTgmuuF5Leq3XOl3ACHJSYQ.roa (raw, json)
Hash identifier: 3rfnC1NqdbyAQUUmybG1JgECgVYu9bhauMr8ejyjja4=
Subject key identifier: 35:82:54:C9:38:26:BA:E1:79:2D:EA:B7:5C:E9:77:00:21:C9:49:84
Certificate issuer: /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial: 03D8C3A2
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/NYJUyTgmuuF5Leq3XOl3ACHJSYQ.roa
Signing time: Sat 01 Jan 2022 03:59:04 +0000
ROA not before: Sat 01 Jan 2022 03:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24940
IP address blocks: 195.248.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64537506 (0x3d8c3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Validity
Not Before: Jan 1 03:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=358254c93826bae1792deab75ce9770021c94984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b5:d5:75:00:37:5a:75:51:91:4f:56:bb:82:
6a:91:0b:e2:48:85:1d:9f:b9:ea:31:f8:a8:21:c8:
03:9f:66:59:66:71:0b:38:af:ad:8d:77:18:a7:2b:
80:3b:f1:3a:aa:9b:f0:f4:34:7e:c5:37:5e:5b:34:
35:9d:f5:2f:93:9d:99:e8:1f:d7:3b:34:fb:5b:49:
8f:df:5f:a8:12:0f:f9:c1:a5:ae:c9:9a:66:a5:d8:
64:fc:25:3e:10:76:de:36:11:a1:70:e2:70:96:85:
07:99:bf:99:5b:c1:4c:17:1f:02:8c:f4:a4:9c:70:
44:1f:19:af:f3:ab:8a:cc:f1:d1:ba:d1:34:22:ce:
5b:aa:8f:04:5a:47:40:c5:af:9b:a6:5d:9b:24:f5:
33:74:81:52:f7:6e:b6:49:19:a2:0d:4d:7d:b1:50:
82:c8:df:ad:73:ac:7e:82:9e:69:da:7b:81:ad:fd:
e9:e4:33:84:c8:59:dc:74:22:1c:91:11:2d:8d:8a:
91:5b:ef:37:40:51:49:ef:27:6c:a0:5a:3b:b6:0f:
66:81:bc:ed:be:c8:a8:dc:94:46:e9:69:af:cf:ca:
cd:53:f6:69:4e:ab:33:72:d1:48:42:e8:ee:be:ca:
d4:58:ed:ab:57:90:7a:f7:fb:f7:97:43:bd:1c:46:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:54:C9:38:26:BA:E1:79:2D:EA:B7:5C:E9:77:00:21:C9:49:84
X509v3 Authority Key Identifier:
keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/NYJUyTgmuuF5Leq3XOl3ACHJSYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.224.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c7:0e:a7:b6:44:f0:3f:d4:1f:ba:b8:a5:33:03:59:a0:78:
8e:75:1d:98:f4:27:c2:d2:d9:ff:9e:ab:20:44:c7:a9:c5:56:
c0:8e:f6:a8:4f:46:09:2e:bf:9d:27:87:32:bd:6f:c9:12:2a:
f6:d8:b5:e8:56:af:44:11:f0:e5:98:fd:a0:9b:f4:4b:97:12:
57:43:ae:bb:52:f0:bd:63:f4:d7:37:19:2e:c7:52:02:28:9d:
e7:eb:88:e9:2f:1b:95:e1:33:cf:83:70:0d:c0:de:37:c7:b4:
af:c5:5e:f6:d8:a2:62:db:f6:c2:7e:4f:c6:e5:07:82:d2:9f:
1f:99:26:86:7f:96:0e:b2:d6:4b:49:78:88:5f:cb:ed:18:87:
5b:2f:eb:4a:0e:e4:56:b6:14:45:8c:1a:68:d4:69:2b:0a:ba:
d2:55:9e:31:ac:49:2e:f9:8c:57:17:1c:69:5e:66:57:66:40:
28:74:5d:0c:59:a8:48:83:16:56:53:8b:69:81:1d:36:ab:cd:
b9:99:49:df:b2:86:82:48:41:ed:d2:a5:7f:7e:20:4e:b6:33:
9d:26:fd:33:5c:b3:cd:4b:50:79:c9:96:d6:ac:ea:ef:6c:ed:
e4:9b:0e:7c:4a:b1:ae:90:6f:ee:bc:37:29:26:85:2e:eb:f3:
eb:ed:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:46 2024 by rpki-client on console-fra.rpki-client.org