Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nkkjNRTCya1Wnmdh-FxM2s3QmiA.roa
File: nkkjNRTCya1Wnmdh-FxM2s3QmiA.roa (raw, json)
Hash identifier: 0p97o00tGBY6y+CbOiWFszPPa4fDboZVRN7YSPp1eGs=
Subject key identifier: 9E:49:23:35:14:C2:C9:AD:56:9E:67:61:F8:5C:4C:DA:CD:D0:9A:20
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03E2AAA2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nkkjNRTCya1Wnmdh-FxM2s3QmiA.roa
Signing time: Sat 01 Jan 2022 13:04:10 +0000
ROA not before: Sat 01 Jan 2022 13:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207091
IP address blocks: 185.244.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65186466 (0x3e2aaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e49233514c2c9ad569e6761f85c4cdacdd09a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:f0:c0:3f:d7:02:5d:a4:8e:12:73:cd:81:
a8:26:84:43:02:56:55:43:0d:42:44:e2:b5:ed:c1:
c3:47:dc:46:a3:ba:5c:f7:a3:f9:fc:84:eb:e1:02:
1b:ac:2d:d7:85:66:2d:a3:9a:e9:fe:49:ee:89:80:
67:2f:5e:c9:bc:a8:e2:0f:47:b3:c5:88:61:da:14:
3f:82:a6:03:46:2b:b9:ee:cf:26:82:a4:05:47:38:
3f:22:21:0a:e9:d7:b7:5d:3b:81:84:1f:cf:b6:65:
37:ff:a5:ad:05:b0:0f:8e:f4:32:69:a0:f4:d7:b1:
53:73:bd:3f:ee:41:7f:34:b3:7c:02:62:f3:6a:4c:
c8:bc:e0:40:8c:66:50:30:db:2f:1c:45:e8:d9:be:
b6:b9:a4:c4:1c:87:26:c3:72:17:54:70:57:07:38:
de:ce:86:93:f8:46:b5:92:5f:ba:86:bf:30:80:a7:
12:bb:00:2b:8a:f0:4d:45:bf:b7:24:60:7e:23:4f:
aa:60:8c:59:c6:23:ce:74:45:02:9b:d5:1b:f9:fb:
39:a4:b8:54:ff:62:6e:34:af:9d:25:c1:88:b6:fc:
53:9f:2f:40:8c:ae:eb:d0:68:2a:d8:45:96:b1:42:
dd:6d:4c:31:94:43:db:ac:06:41:5e:b1:13:b5:b2:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:23:35:14:C2:C9:AD:56:9E:67:61:F8:5C:4C:DA:CD:D0:9A:20
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nkkjNRTCya1Wnmdh-FxM2s3QmiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.234.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fa:1b:14:06:c1:2c:59:20:6c:d2:e4:b5:0e:a7:79:ee:8a:
e7:3e:11:18:51:0c:0c:95:a6:c2:dc:36:2d:aa:15:75:48:f3:
57:52:c8:82:76:1a:1e:f5:e2:3b:fd:1a:e3:a1:0d:99:87:f3:
6d:3f:14:c6:54:55:22:9b:9c:66:4c:68:5f:0d:2a:b0:f8:7d:
b9:13:b4:4f:e5:4d:bf:75:d6:58:50:f8:24:cc:ec:57:7d:84:
11:99:10:12:23:28:0c:ff:b1:13:a1:2d:ba:e7:25:ee:93:ba:
0d:be:fd:a2:5e:73:83:71:35:4a:44:01:aa:47:ad:ab:c7:c7:
86:79:c0:5b:ae:b0:cd:c6:96:27:fb:97:97:1b:83:5d:1c:ea:
fc:ad:cf:71:51:a2:15:87:5e:b2:91:cb:16:98:6c:76:c4:53:
0f:e6:55:a0:70:b6:97:de:44:5e:4b:c1:98:9d:80:2f:77:ce:
24:b8:8f:db:34:c0:62:8f:17:8a:15:ea:f1:9a:41:f7:0c:83:
b4:e7:c0:83:b7:8f:ef:c5:a5:1e:92:1f:e1:de:b6:14:b1:4f:
f4:ba:bb:eb:21:5f:36:bd:4d:12:a6:17:ff:e4:20:49:18:69:
39:aa:56:55:8e:6c:43:41:22:33:01:30:24:94:75:a3:1a:6a:
90:de:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org