Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Nw_IeJSLZIFg5iJb3s_h9_wSdSQ.roa
File: Nw_IeJSLZIFg5iJb3s_h9_wSdSQ.roa (raw, json)
Hash identifier: xHoP8vw6zMuEIvkdxlGqdvJ7BV1E1zYfnjqAKld50T8=
Subject key identifier: 37:0F:C8:78:94:8B:64:81:60:E6:22:5B:DE:CF:E1:F7:FC:12:75:24
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38D1E7EE
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Nw_IeJSLZIFg5iJb3s_h9_wSdSQ.roa
Signing time: Sat 01 Jan 2022 07:55:12 +0000
ROA not before: Sat 01 Jan 2022 07:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2687
IP address blocks: 145.30.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953280494 (0x38d1e7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=370fc878948b648160e6225bdecfe1f7fc127524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:3a:7b:60:72:b3:c3:8c:d0:69:20:77:9d:
21:f1:6f:dd:6e:e4:89:4a:8d:78:19:81:e0:4f:0c:
5e:cf:de:67:60:2c:93:66:b8:6b:c0:1e:95:c4:da:
11:aa:b3:aa:ac:11:08:04:4b:c2:23:fe:58:f8:bf:
ed:e1:21:39:81:81:c0:7e:c5:0b:b9:4f:a4:86:18:
89:4b:a5:85:0b:a8:86:56:b1:63:ac:8f:9b:46:d3:
1f:03:99:74:79:4c:16:57:9e:2c:ad:33:3d:ed:c2:
b4:e2:30:65:5d:c3:21:ea:e2:ab:6d:de:f7:90:55:
c7:47:5d:cb:39:ea:48:91:5c:e9:0a:07:86:a3:51:
84:78:82:07:c8:21:4d:2b:20:fa:4a:e3:0a:d8:0e:
73:a6:88:c0:67:67:b0:b6:1a:59:d4:76:dd:fd:94:
82:a1:eb:4e:07:f6:b4:f3:ae:83:85:8f:75:ac:14:
0c:16:dd:54:11:3a:e9:05:85:d5:95:a8:c0:0b:f9:
ae:d0:48:58:11:82:1c:fd:45:31:a1:a1:07:c1:4b:
a8:f3:c6:e5:61:0c:0e:67:fe:5d:56:87:d3:f7:f1:
19:91:52:03:67:ae:e8:68:cb:cf:fc:81:f3:c1:fd:
66:15:11:cf:71:8d:6a:f2:51:9c:5c:5d:21:3f:24:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:C8:78:94:8B:64:81:60:E6:22:5B:DE:CF:E1:F7:FC:12:75:24
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Nw_IeJSLZIFg5iJb3s_h9_wSdSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b2:95:1a:1d:f9:95:2a:82:d4:2c:4b:ce:97:90:e9:30:46:
be:7f:f1:d3:ce:4d:4d:33:b5:09:11:89:28:e5:07:9f:fc:30:
1d:58:9d:c1:fa:cd:36:ba:61:40:ca:16:7e:d7:95:e4:4b:7c:
b8:d9:79:a8:0a:1b:7f:db:4c:29:2f:e5:61:b7:23:86:12:10:
51:92:a5:69:e7:c9:27:47:3f:1f:af:ae:e3:f5:0b:9a:15:ba:
52:0b:fe:cc:5b:9c:c8:48:b3:67:58:8c:af:f3:99:46:69:e3:
87:a3:28:70:c7:41:1b:c5:1f:9e:f4:13:4a:f0:f1:e5:87:36:
77:39:42:9e:42:91:46:e2:35:01:cd:6b:e3:fd:4f:f5:24:09:
2e:b1:3d:0c:c0:0c:de:a4:55:74:a7:a7:8e:2c:cb:1f:95:3b:
f1:89:22:db:4f:c5:c3:e4:04:0c:ec:98:35:df:66:54:18:d7:
70:64:3d:8f:98:ec:a6:c4:d0:3a:5b:c1:21:4e:22:73:73:c2:
f9:fc:6e:60:90:03:49:8d:d4:e3:5a:09:c2:bd:50:05:9e:1e:
c9:09:18:d4:ac:22:59:ce:8e:56:99:81:de:06:bf:bf:11:a6:
57:75:17:dc:1d:d4:6c:65:61:d8:16:a3:a9:f2:a3:6c:dc:51:
11:c8:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org