Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/NXODjkwKe1Xv-TuUfig3ZzF4fuc.roa
File: NXODjkwKe1Xv-TuUfig3ZzF4fuc.roa (raw, json)
Hash identifier: F8ckWBkmGsMBc5qTI687G75n7svRc6s0rUR6UD1wYOQ=
Subject key identifier: 35:73:83:8E:4C:0A:7B:55:EF:F9:3B:94:7E:28:37:67:31:78:7E:E7
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 076955F1
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/NXODjkwKe1Xv-TuUfig3ZzF4fuc.roa
Signing time: Sat 01 Jan 2022 02:01:32 +0000
ROA not before: Sat 01 Jan 2022 02:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42012
IP address blocks: 194.36.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124343793 (0x76955f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Jan 1 02:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3573838e4c0a7b55eff93b947e28376731787ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:e8:63:1c:8d:f5:7d:38:c3:aa:3c:ab:ec:
ae:46:bf:24:3e:7a:02:86:50:68:ca:46:ad:cf:fd:
fa:72:16:68:44:05:12:36:56:32:5d:84:10:04:96:
a6:28:56:d1:70:4b:68:7e:e3:ff:fe:7e:6d:3e:67:
48:9f:57:82:d7:6a:38:f7:14:9c:38:d8:07:ec:11:
ea:57:7a:96:4d:d2:6a:5a:bc:56:0d:6b:2a:73:68:
80:86:34:bb:42:2f:e5:3f:9b:63:1c:5b:e7:e0:3e:
9e:8c:58:ff:b9:2a:54:62:43:55:46:73:9a:83:1e:
45:0f:19:97:82:f5:41:97:00:2f:fe:93:82:0b:34:
2d:1e:bb:70:62:e5:0f:da:cf:9f:68:26:eb:33:af:
34:05:25:bc:1f:ec:da:92:82:7c:89:7b:52:56:fb:
dc:c0:a3:67:7c:7d:63:94:41:b8:7c:10:71:a8:4a:
52:fb:47:7f:78:53:df:bc:87:ed:cd:45:dc:10:fd:
ce:d9:98:a9:cc:03:b7:61:d9:b9:58:00:3a:1d:49:
9c:a5:98:16:3f:e2:46:2b:23:62:56:0d:e9:fa:5c:
fb:b2:50:55:5b:3a:8c:99:e1:b1:55:60:2a:a7:f3:
0d:94:8b:b8:d0:be:87:0f:a1:64:82:5d:aa:84:76:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:73:83:8E:4C:0A:7B:55:EF:F9:3B:94:7E:28:37:67:31:78:7E:E7
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/NXODjkwKe1Xv-TuUfig3ZzF4fuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9b:e5:f8:9c:8e:f0:bd:2d:bd:8b:7a:4d:69:8e:a0:e8:24:
32:c6:1d:e4:12:47:27:fe:44:f6:cc:9b:83:15:e5:21:ff:ae:
1f:f9:ba:a1:e1:69:31:8a:4b:e3:de:dd:b7:69:08:7d:2b:14:
c3:0f:20:77:5d:24:2b:d1:e1:3f:6d:33:9b:1b:93:1e:7d:7b:
6e:f8:39:4e:12:32:44:6f:3d:d9:ff:eb:e6:86:90:3c:b7:6e:
00:b2:cb:73:d9:6b:f7:f5:cf:60:ce:52:d1:95:cb:e6:45:ae:
39:25:9f:c4:eb:e3:05:6f:06:cc:77:b4:10:71:a7:e4:fe:65:
b1:35:25:21:58:74:4a:7c:43:5b:91:12:f6:51:c5:72:49:22:
bf:73:cf:74:2a:f9:08:b7:28:8c:14:74:b9:12:5e:aa:59:51:
fc:47:d5:be:5e:df:95:dd:1c:02:7c:06:8d:02:1f:5a:4f:70:
95:39:94:61:0b:57:0f:40:09:d6:d3:c2:9f:88:6e:28:85:5d:
89:43:38:9d:62:10:7b:f1:ec:40:62:f2:6a:7b:2f:08:ed:3a:
87:30:66:c9:de:dd:91:bf:6d:9e:44:66:39:b7:cc:9e:13:e3:
31:af:42:7e:40:2d:6c:24:f0:f3:f4:65:d5:3b:8c:2c:e4:59:
93:96:6e:15
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2lV8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NzY4YTMxZTVjOGE1YTg4MjI1OTg5YTFiYWVmNGEzODEzMzg2MDFhMB4XDTIyMDEw
MTAyMDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzU3MzgzOGU0YzBh
N2I1NWVmZjkzYjk0N2UyODM3NjczMTc4N2VlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnq6GMcjfV9OMOqPKvsrka/JD56AoZQaMpGrc/9+nIWaEQF
EjZWMl2EEASWpihW0XBLaH7j//5+bT5nSJ9XgtdqOPcUnDjYB+wR6ld6lk3Salq8
Vg1rKnNogIY0u0Iv5T+bYxxb5+A+noxY/7kqVGJDVUZzmoMeRQ8Zl4L1QZcAL/6T
ggs0LR67cGLlD9rPn2gm6zOvNAUlvB/s2pKCfIl7Ulb73MCjZ3x9Y5RBuHwQcahK
UvtHf3hT37yH7c1F3BD9ztmYqcwDt2HZuVgAOh1JnKWYFj/iRisjYlYN6fpc+7JQ
VVs6jJnhsVVgKqfzDZSLuNC+hw+hZIJdqoR2h5kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ1c4OOTAp7Ve/5O5R+KDdnMXh+5zAfBgNVHSMEGDAWgBR3aKMeXIpaiCJZ
iaG670o4EzhgGjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2QyaWpIbHlLV29naVdZbWh1dTlLT0JNNFlCby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvZTMwNTBlLTk5OTQtNGI5Ni1iYzc5LTc2NmVhZDdlNjUxMy8x
L05YT0Rqa3dLZTFYdi1UdVVmaWczWnpGNGZ1Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
ZTMwNTBlLTk5OTQtNGI5Ni1iYzc5LTc2NmVhZDdlNjUxMy8xL2QyaWpIbHlLV29n
aVdZbWh1dTlLT0JNNFlCby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIkojANBgkqhkiG9w0BAQsFAAOC
AQEAOpvl+JyO8L0tvYt6TWmOoOgkMsYd5BJHJ/5E9sybgxXlIf+uH/m6oeFpMYpL
497dt2kIfSsUww8gd10kK9HhP20zmxuTHn17bvg5ThIyRG892f/r5oaQPLduALLL
c9lr9/XPYM5S0ZXL5kWuOSWfxOvjBW8GzHe0EHGn5P5lsTUlIVh0SnxDW5ES9lHF
ckkiv3PPdCr5CLcojBR0uRJeqllR/EfVvl7fld0cAnwGjQIfWk9wlTmUYQtXD0AJ
1tPCn4huKIVdiUM4nWIQe/HsQGLyansvCO06hzBmyd7dkb9tnkRmObfMnhPjMa9C
fkAtbCTw8/Rl1TuMLORZk5ZuFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:47 2024 by rpki-client on console-ams.rpki-client.org