Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ncCDx5KT2NxCiYW9AmlxxucXtxI.roa
File: ncCDx5KT2NxCiYW9AmlxxucXtxI.roa (raw, json)
Hash identifier: F8tGu/6Yu9od5hkiBBzVMQTM6anw3LuBlRw3ls8AOhU=
Subject key identifier: 9D:C0:83:C7:92:93:D8:DC:42:89:85:BD:02:69:71:C6:E7:17:B7:12
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13FDD53E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ncCDx5KT2NxCiYW9AmlxxucXtxI.roa
Signing time: Tue 01 Mar 2022 22:47:29 +0000
ROA not before: Tue 01 Mar 2022 22:47:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9516
IP address blocks: 185.129.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335402302 (0x13fdd53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 1 22:47:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dc083c79293d8dc428985bd026971c6e717b712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:e0:5e:69:2e:89:0e:81:8b:0e:a8:d7:4a:
4a:6d:3c:04:ca:e8:78:11:03:de:67:3b:1c:9e:85:
01:88:ee:28:ef:8c:d2:35:63:04:be:20:eb:ad:ab:
d7:9f:17:26:6f:6d:ab:96:57:cb:67:8f:38:70:d1:
99:25:74:58:d3:dc:a5:29:01:3e:eb:d1:e9:cf:d6:
5b:93:fd:59:65:46:96:d5:1f:52:b8:cf:60:70:d0:
c3:5c:ae:20:76:25:15:c6:6e:69:99:25:b7:df:4c:
0d:3d:4f:d9:29:b0:19:48:3c:35:a0:f5:9c:d6:c1:
41:63:d6:73:9b:cc:eb:63:06:b6:9a:d6:1c:99:dd:
da:16:3d:b6:2a:df:97:ae:42:2e:b5:57:cb:95:67:
84:69:28:f9:1b:66:8f:d1:2d:29:bc:df:96:74:e3:
b6:07:ad:3d:a2:e9:0a:0f:51:c3:4f:66:32:36:44:
c5:ea:2f:1a:93:62:bc:fe:5f:8b:f7:19:75:1e:de:
f1:eb:07:2e:b3:ca:ca:b7:88:28:6c:aa:a6:b6:58:
19:f0:d5:01:c7:1b:3f:dd:37:8b:c6:47:c6:3d:df:
d1:53:fd:71:10:46:f7:51:6b:17:cf:69:82:48:a9:
d1:a4:02:e0:39:24:f5:ce:68:64:6d:24:77:24:62:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:83:C7:92:93:D8:DC:42:89:85:BD:02:69:71:C6:E7:17:B7:12
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ncCDx5KT2NxCiYW9AmlxxucXtxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.110.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a2:c2:29:b0:ac:fa:48:b7:80:05:f4:1b:16:72:95:8f:a8:
f7:a7:c7:7d:bb:b8:4a:b7:89:93:17:eb:b9:a3:67:27:dc:fb:
99:58:1d:40:ef:84:22:3a:df:ef:3d:2b:aa:39:5e:88:93:ed:
42:75:de:8c:1a:3e:9b:f7:27:d4:b8:70:e8:0a:5b:c5:c4:bc:
ad:aa:55:a1:7d:8c:50:ba:9f:3b:fe:90:32:9a:37:db:0f:e9:
b4:b9:23:b1:c1:4a:81:2c:ba:18:4d:30:12:e0:de:7d:72:03:
d2:bc:3b:02:21:af:d5:0f:98:8d:af:fa:71:f2:c4:e5:e6:52:
32:9d:80:c5:84:43:fb:f6:d7:8d:49:38:be:53:17:8b:c1:85:
9f:94:51:e4:bf:6d:42:75:92:e8:dc:b0:24:03:21:10:04:fb:
cd:22:f8:26:66:f9:38:54:e6:a8:d6:3a:a7:73:e7:9f:d7:db:
fc:e9:cc:fd:5a:a4:e1:93:42:4b:df:13:ce:ca:5e:8a:f3:67:
de:e2:75:8f:15:d6:d0:6f:63:33:77:65:96:e1:44:12:23:6c:
2a:64:d8:d0:41:ce:e6:6c:0e:e0:e2:ce:67:e8:b9:e1:22:09:
94:a1:a8:35:e3:4f:be:db:e1:94:25:4d:6e:d1:2c:2e:9c:be:
4f:ee:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org