Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/NxV2gFcHlgeMxWgh7JiiPdKjpl8.roa
File: NxV2gFcHlgeMxWgh7JiiPdKjpl8.roa (raw, json)
Hash identifier: oQcClsoVcTvvDQYzCOwMzX2cbuoqe5Jmx2fjnbiDZTI=
Subject key identifier: 37:15:76:80:57:07:96:07:8C:C5:68:21:EC:98:A2:3D:D2:A3:A6:5F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A70A2EC
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/NxV2gFcHlgeMxWgh7JiiPdKjpl8.roa
Signing time: Sat 01 Jan 2022 04:51:53 +0000
ROA not before: Sat 01 Jan 2022 04:51:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42246
IP address blocks: 82.177.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980460268 (0x3a70a2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37157680570796078cc56821ec98a23dd2a3a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:3d:f5:df:10:bf:a7:65:a0:d2:d5:e6:48:
82:ab:74:71:73:45:ea:ca:b2:4c:6f:73:da:0c:1f:
e0:97:5a:9e:0f:f5:d4:85:ab:23:13:aa:36:d4:4e:
7c:3e:3b:75:5e:2d:d4:c2:de:b6:42:25:b9:15:c8:
da:fb:8b:c2:b5:34:9d:bf:8f:56:9c:dc:84:6d:92:
78:ee:a7:ad:fa:ef:d1:d8:08:39:70:16:a7:a3:3a:
fe:b4:2e:dd:b0:af:f9:dd:61:05:d7:71:ad:b2:a7:
d4:d7:a0:77:a2:4f:17:33:4c:fc:86:90:1f:5a:87:
a8:6d:62:e9:66:a1:c4:34:35:fd:3a:5e:0f:42:d9:
8c:2c:20:49:95:d1:03:86:20:17:0d:42:de:49:01:
b1:4c:c8:0d:e9:27:8e:07:31:d3:ea:e0:4a:fe:9c:
4f:2d:e7:1a:41:f6:fa:d8:00:c2:83:96:68:27:a1:
93:29:76:44:22:84:1d:67:b9:fd:02:68:21:29:b1:
c2:2e:89:93:42:07:3c:b4:ed:f0:85:55:c5:d4:c0:
f0:e0:0e:34:7e:8b:c6:08:95:58:2a:25:b5:be:0b:
8b:44:ed:d4:93:b0:e1:96:52:7e:36:6b:de:36:fd:
ca:7e:05:b2:6d:0f:80:f6:65:76:20:46:0c:8b:5f:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:76:80:57:07:96:07:8C:C5:68:21:EC:98:A2:3D:D2:A3:A6:5F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/NxV2gFcHlgeMxWgh7JiiPdKjpl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.201.0/24
Signature Algorithm: sha256WithRSAEncryption
42:38:07:6c:ac:6a:e9:43:4f:ee:a3:6a:19:25:89:7e:16:a4:
cd:c7:74:6a:1c:5e:07:00:b4:bc:a7:12:0c:ca:2d:0b:0e:c1:
d6:2b:75:c1:14:56:c9:e8:c8:39:d1:ac:61:f4:5b:28:27:87:
6c:0b:58:6e:3d:66:8a:fb:2e:da:d0:c3:6b:70:52:6d:3f:fc:
88:12:a9:58:00:f8:59:9c:c8:cf:44:03:87:5d:bf:f5:82:2e:
52:2d:1e:4a:5d:3d:b4:a6:0a:52:49:1b:b3:aa:77:03:5a:fa:
16:f3:0a:61:f5:62:7c:83:44:34:a6:48:b5:7a:25:9f:cd:f4:
79:71:11:dc:1b:a4:fd:c6:f4:b0:33:a6:f4:28:14:9f:da:07:
56:4f:13:c4:d0:67:0e:f7:78:2e:8b:46:57:b1:5d:79:e6:92:
c5:d8:a8:36:50:de:ca:f0:92:57:4a:65:05:44:a1:e2:bc:7d:
34:69:8b:89:11:42:79:1e:1a:8e:cd:81:de:65:5f:58:d3:31:
bc:43:fc:d8:dc:5d:c6:c1:8f:63:f8:78:55:44:41:cc:ea:ff:
ec:9a:86:13:f0:7d:12:25:93:2a:c7:79:fd:ad:fa:47:24:f6:
58:6f:1f:aa:77:06:a0:80:99:4d:59:11:b9:8f:c9:55:6e:ce:
f8:08:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org