Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/NrUotq016Qd6TzDmqwxtrGVJcWQ.roa
File: NrUotq016Qd6TzDmqwxtrGVJcWQ.roa (raw, json)
Hash identifier: QrfNfHSPWbTthFPXmpIp7h1ab95flxu9xptho29JFC0=
Subject key identifier: 36:B5:28:B6:AD:35:E9:07:7A:4F:30:E6:AB:0C:6D:AC:65:49:71:64
Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial: 018B37796C88F2FA9B69A4BD79FFADA2BFD0
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/NrUotq016Qd6TzDmqwxtrGVJcWQ.roa
Signing time: Mon 16 Oct 2023 07:53:06 +0000
ROA not before: Mon 16 Oct 2023 07:53:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62159
IP address blocks: 185.133.56.0/22 maxlen: 24
2a06:e3c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:79:6c:88:f2:fa:9b:69:a4:bd:79:ff:ad:a2:bf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
Validity
Not Before: Oct 16 07:53:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36b528b6ad35e9077a4f30e6ab0c6dac65497164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:f5:5e:9b:85:9b:1c:c4:5f:83:49:28:0f:
97:56:5f:ef:de:44:b3:63:03:e2:07:43:99:39:4d:
34:b5:55:10:52:bf:32:24:f2:3d:c5:35:83:64:50:
c9:52:2b:41:40:73:00:e6:63:7a:ff:50:4e:38:56:
a8:d7:34:5b:7c:fd:37:25:9f:45:6d:9d:1d:49:6c:
14:40:82:49:c8:ba:ac:e2:f4:b0:a0:f3:5f:fe:d2:
ee:1f:61:fc:8d:8a:0b:50:4d:e4:d4:3d:39:37:34:
6d:ca:c2:14:34:2c:9d:2f:ee:e3:e6:8e:9f:0c:c5:
b1:46:cf:4e:8d:c3:7a:a8:82:6e:e1:18:ff:9b:d3:
19:18:c9:96:95:b7:40:6f:8d:68:20:f4:77:e6:ff:
e4:fa:04:61:d4:a5:c3:39:28:ab:80:e8:ba:4f:9a:
4b:0c:62:f0:d6:98:db:95:ce:24:80:bc:a4:e4:62:
50:68:56:2c:1d:38:1d:e6:ab:6c:ab:1c:ef:9b:49:
a2:cf:58:05:fb:f6:d1:fb:14:b6:4c:fb:79:e6:f7:
9a:33:2d:95:52:8e:5d:61:57:80:c1:f2:41:eb:77:
bd:6a:f6:32:ea:2c:75:a9:37:35:d9:c5:57:d7:64:
ea:5e:ce:42:20:21:76:68:86:4d:ef:65:4d:02:b2:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:28:B6:AD:35:E9:07:7A:4F:30:E6:AB:0C:6D:AC:65:49:71:64
X509v3 Authority Key Identifier:
keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/NrUotq016Qd6TzDmqwxtrGVJcWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.56.0/22
IPv6:
2a06:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:e8:7e:12:65:b4:b2:ce:57:b5:08:46:67:f5:97:e3:12:28:
07:50:bf:cc:2a:ea:44:d0:df:d2:60:0f:fe:e8:65:d9:eb:9d:
c7:46:6e:95:23:81:2c:0b:19:d3:96:7e:ca:15:4b:1d:a8:da:
fd:1c:d9:9e:ce:84:f3:b5:6c:29:ab:10:1b:29:7c:f4:f5:1a:
1e:e8:e4:51:f9:c5:71:b1:63:95:49:13:9b:20:1e:24:ab:f7:
46:b2:a1:da:65:49:9b:23:b1:f4:8d:dd:3a:cd:39:1e:d9:c4:
2f:0a:39:25:a9:ca:61:45:93:ce:ac:33:f7:43:b8:0c:78:d3:
23:9c:a5:80:ac:da:0a:34:9d:de:22:26:0b:b9:fe:d0:33:a3:
fb:a0:8f:16:6c:46:a7:be:07:a8:8d:57:8c:0a:b6:76:48:82:
24:d7:d2:91:fc:91:ff:f6:62:14:ea:8f:22:6f:42:80:11:5d:
ad:52:28:8b:9b:da:87:7d:0e:58:56:07:b1:df:1f:43:ad:70:
1b:de:7e:44:2c:a6:92:03:2f:03:28:fa:f5:f3:01:78:4a:bf:
f7:87:f3:54:3e:1a:c9:ef:7c:96:4f:6c:7e:da:26:61:1f:56:
0c:f0:e7:9f:46:28:33:5a:3c:39:1e:aa:81:9b:72:86:81:88:
26:50:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:23 2025 by rpki-client