Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/nwPIaGU384VX6BH9DcVBapUZfwg.roa
File: nwPIaGU384VX6BH9DcVBapUZfwg.roa (raw, json)
Hash identifier: GpJLvbt8J5deawAofp6d41sdp9S/Fd9Xqy01qYxvklM=
Subject key identifier: 9F:03:C8:68:65:37:F3:85:57:E8:11:FD:0D:C5:41:6A:95:19:7F:08
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AC6574F
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/nwPIaGU384VX6BH9DcVBapUZfwg.roa
Signing time: Sat 01 Jan 2022 16:03:17 +0000
ROA not before: Sat 01 Jan 2022 16:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211996
IP address blocks: 85.153.135.0/24 maxlen: 24
85.153.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449206095 (0x1ac6574f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f03c8686537f38557e811fd0dc5416a95197f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:7e:52:83:ed:e1:2b:6f:0e:02:8f:b9:54:
4f:4c:4e:3d:d0:d5:2e:e4:80:71:05:d1:f1:71:7e:
d8:a6:e1:27:6d:67:3a:65:41:e7:44:24:fb:6a:96:
aa:17:90:0c:5b:38:02:7f:3c:81:ac:1e:64:ac:22:
50:3b:fb:1d:89:8e:15:8c:75:d7:26:52:f8:05:a0:
09:23:b1:7f:b0:7b:7e:40:fa:69:8f:b6:68:08:04:
25:24:10:3e:64:14:67:37:45:0f:af:fb:eb:1e:8f:
e3:52:b3:3d:b0:bd:a9:9e:24:fc:ce:e7:75:63:05:
6a:1f:1d:1a:01:f0:b7:a7:b7:bd:c1:b6:62:95:d9:
7d:b8:b5:b8:df:f6:85:a3:a2:e9:b1:cf:51:5c:64:
8b:a7:f7:22:8a:e2:d5:1a:4c:4e:df:d8:c4:f0:07:
37:59:bf:1f:b5:99:3f:05:bc:3d:c6:f9:66:12:98:
3d:f7:d6:5f:41:ce:2f:a6:f4:5b:a4:f1:dc:8f:d4:
28:ae:d1:48:77:7b:e5:8e:60:76:5c:eb:84:ec:b7:
9e:11:fd:e8:fb:06:6e:52:e1:74:a7:ec:9f:65:11:
66:a2:58:69:43:b1:49:0c:72:81:9b:d0:d1:9f:66:
8b:da:3e:33:63:53:dc:52:28:af:e5:b0:a0:ae:9c:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:C8:68:65:37:F3:85:57:E8:11:FD:0D:C5:41:6A:95:19:7F:08
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/nwPIaGU384VX6BH9DcVBapUZfwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.135.0/24
85.153.140.0/24
Signature Algorithm: sha256WithRSAEncryption
00:32:db:97:b0:bf:91:91:cc:7d:d5:72:07:ac:af:01:11:88:
98:b6:9d:34:0b:67:71:05:5c:e5:b8:2b:07:15:e8:5b:96:cf:
39:3d:cc:39:fa:04:0b:93:67:8f:67:36:eb:89:2a:e1:8d:18:
c4:6d:a6:bd:7b:09:8a:83:55:ba:02:be:55:6c:b3:e3:43:a3:
f8:6e:26:d1:cd:5a:76:c6:ed:d4:ea:52:e3:48:08:01:5e:f5:
c1:7a:7e:aa:be:59:c2:55:60:76:27:ca:8f:cf:ea:d6:d2:d4:
55:e5:ac:36:00:21:a9:3e:32:72:09:69:88:2c:3f:50:7f:de:
af:a9:4d:bc:3f:6d:26:1f:68:31:4a:d3:5a:e9:34:1d:01:89:
87:31:da:15:24:f6:ae:9b:90:0d:4e:23:f2:11:fa:7f:1b:93:
24:05:fd:c8:cc:9b:16:a6:2f:eb:c9:a1:03:08:f8:0e:c0:60:
74:39:d2:e4:d0:d4:8b:bc:41:d6:9b:01:63:88:e7:45:b0:48:
f5:4f:7d:fa:28:11:51:d1:9c:46:4d:7a:d8:75:be:06:a3:7c:
ab:8a:8d:ac:ae:14:21:0e:7b:e5:f5:c0:11:bd:18:62:41:9b:
57:07:9c:74:9c:97:5a:19:09:cb:94:2a:f5:43:32:0d:4a:66:
4c:d3:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org