Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/NrbF4Ezaztn7j4XHnwBSQOOc3sc.roa
File: NrbF4Ezaztn7j4XHnwBSQOOc3sc.roa (raw, json)
Hash identifier: K0PN5vnSDHKzpMR32H3u/xckb5C9QOz2XL7AoSEFM2A=
Subject key identifier: 36:B6:C5:E0:4C:DA:CE:D9:FB:8F:85:C7:9F:00:52:40:E3:9C:DE:C7
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 5478
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/NrbF4Ezaztn7j4XHnwBSQOOc3sc.roa
Signing time: Thu 24 Feb 2022 16:48:36 +0000
ROA not before: Thu 24 Feb 2022 16:48:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9091
IP address blocks: 194.8.10.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21624 (0x5478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Feb 24 16:48:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36b6c5e04cdaced9fb8f85c79f005240e39cdec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:6a:76:8c:18:e4:ae:36:27:ef:4e:1c:22:
bd:fd:0d:33:b3:6e:55:c9:cd:82:d1:04:36:98:ad:
08:29:13:03:ea:de:f3:0f:1e:a1:94:15:da:3b:d5:
16:9a:29:f7:67:33:de:b4:33:5c:7b:31:6c:64:9a:
7b:cf:95:71:6d:b2:0c:02:24:c6:49:4d:c3:f7:2c:
08:87:79:fd:8c:26:19:a6:31:77:68:6a:1f:9d:5d:
14:4c:d8:5c:c6:f6:1e:f1:a7:16:57:79:c1:09:4b:
2c:87:59:12:63:ef:2c:19:da:94:05:db:d9:57:22:
8c:3a:ab:5d:a8:67:f2:93:91:8f:81:25:cb:5d:3c:
a9:fb:1a:0b:d9:63:d1:bb:72:6e:35:bf:bb:00:4c:
67:5f:1d:7f:14:d2:fe:91:50:3f:00:16:e0:b2:25:
d0:cf:86:97:4a:53:6a:4f:06:13:f4:5e:07:13:3c:
e8:96:e9:04:66:d8:5f:d9:1d:12:01:90:e1:62:f2:
7b:f5:36:88:9a:8b:a2:61:e7:3e:5c:b9:ad:3d:8e:
8f:97:2f:89:13:7c:85:7c:2e:d7:3f:35:67:e6:8b:
83:37:82:dc:6f:f6:35:1e:a7:1a:d4:f3:12:a4:68:
17:5d:7b:45:b6:02:30:f5:d6:e9:99:67:cc:c4:bf:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:C5:E0:4C:DA:CE:D9:FB:8F:85:C7:9F:00:52:40:E3:9C:DE:C7
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/NrbF4Ezaztn7j4XHnwBSQOOc3sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.10.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:ef:e7:9b:96:c6:8e:e1:6c:c6:13:29:8a:59:87:a8:d1:df:
de:9d:9c:fa:e4:1c:e3:5f:4d:be:26:70:16:25:58:a1:1c:34:
9c:3b:87:2d:d0:1d:1b:d6:d7:8f:7f:62:af:11:df:3c:1a:c9:
13:40:3a:9e:6c:9c:78:ac:b1:98:0f:18:ef:8b:bb:c0:c4:97:
57:72:ac:f2:8a:d8:9c:91:9e:3a:79:b9:29:77:10:e9:d1:b0:
77:38:50:80:11:e0:e4:91:35:d9:1f:4c:d3:88:c1:6a:df:12:
9e:45:0c:a1:02:40:c5:c0:9a:0b:20:c1:f7:f3:37:d6:ef:05:
f4:cb:28:ce:52:25:d8:7d:4f:0f:86:04:f1:b7:bf:66:9b:23:
a3:89:ef:c3:79:3e:ff:e6:49:9a:7b:0e:d4:19:32:4e:19:f7:
1b:aa:1c:5b:a0:b4:c2:c9:2e:87:6d:40:8d:71:4a:df:09:46:
f5:a7:0b:c4:0c:60:1c:64:69:06:39:17:82:ca:06:f1:45:80:
cd:cc:b2:e0:2d:3b:d5:6e:10:53:79:df:8a:54:48:98:c9:e4:
3e:dc:9e:cd:0e:a0:e3:04:b6:b6:ed:58:96:49:0c:0b:8b:9d:
29:c8:04:10:f9:b9:b6:59:91:1a:06:d1:17:45:1f:87:cf:e7:
d7:8d:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org