Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/NANQAz8sXg9awppp1DMeSCBxsk0.roa
File: NANQAz8sXg9awppp1DMeSCBxsk0.roa (raw, json)
Hash identifier: 6YDDPZpLXDUiLxfryBbtdC6lLXSqnlc8CPBFbbvmk+Q=
Subject key identifier: 34:03:50:03:3F:2C:5E:0F:5A:C2:9A:69:D4:33:1E:48:20:71:B2:4D
Certificate issuer: /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial: 371102E6
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/NANQAz8sXg9awppp1DMeSCBxsk0.roa
Signing time: Sat 01 Jan 2022 07:58:50 +0000
ROA not before: Sat 01 Jan 2022 07:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44489
IP address blocks: 109.164.0.0/17 maxlen: 25
185.131.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923861734 (0x371102e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Validity
Not Before: Jan 1 07:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=340350033f2c5e0f5ac29a69d4331e482071b24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:88:3a:d0:bb:09:de:bd:5e:34:ab:07:3b:
22:18:97:1c:11:0e:db:e9:82:8a:c3:4a:7f:4e:19:
d6:d2:71:e4:36:2d:ef:60:15:35:c0:97:4c:6e:af:
bd:5c:10:04:50:58:f1:6b:0e:1b:80:02:83:3a:c6:
07:f7:b2:d6:8a:e1:77:5b:f2:2c:9d:a8:6c:b2:b7:
55:c2:cc:d9:f9:73:e2:dd:ad:6c:60:60:cd:c6:1f:
e1:e4:8b:c1:58:5e:c9:d0:f2:fe:c0:7e:3f:39:a3:
d6:a7:7d:36:b1:fb:e8:0c:2e:79:82:d6:b5:ab:33:
7c:3c:58:b0:05:b6:33:d0:65:9f:47:53:c9:c3:f4:
81:2c:e9:58:6a:66:f3:51:1d:66:9d:65:d1:0c:e1:
37:ae:52:c9:66:52:c7:cd:ac:8f:c4:d3:f6:ce:62:
60:07:83:8e:0a:52:96:7f:16:e5:3d:b5:1d:58:71:
df:15:7e:1d:d3:6b:01:0b:cd:5c:e8:33:f6:ec:ff:
e9:64:cb:b9:b9:b9:9b:c8:eb:69:6d:94:2c:2c:f1:
cd:e0:08:fd:8e:4d:06:87:be:25:42:58:a2:cb:20:
07:dc:f2:ea:da:18:c9:0e:46:d7:fd:96:39:c9:5d:
5c:c9:43:93:b5:f6:1c:7d:3d:da:26:43:45:b7:59:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:50:03:3F:2C:5E:0F:5A:C2:9A:69:D4:33:1E:48:20:71:B2:4D
X509v3 Authority Key Identifier:
keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/NANQAz8sXg9awppp1DMeSCBxsk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.0.0/17
185.131.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:46:a6:d6:bf:f8:b2:04:60:32:47:bc:dd:88:aa:bf:0b:80:
ba:32:e7:38:54:b9:52:24:b8:f9:68:86:e1:b9:3b:2a:a4:94:
aa:20:a1:65:fb:4c:a4:b2:93:21:09:8e:7b:a2:2f:54:79:65:
ea:58:85:d9:b5:61:27:f1:1d:11:eb:b9:16:e1:dd:24:bb:e3:
b6:5f:08:c1:0d:8c:40:e6:bf:1a:1f:38:a2:88:23:01:a6:32:
59:c1:3d:de:e0:49:01:78:71:7b:b2:56:1e:cb:b0:54:7d:64:
4c:75:b9:6b:96:c1:39:37:02:b6:cf:35:0c:54:9b:fc:97:4b:
27:bd:80:f2:5c:a7:65:40:1d:f3:50:69:a3:39:4e:ee:ba:63:
df:c8:6e:05:58:12:86:88:45:f5:8f:9b:02:6f:36:d1:36:cd:
9a:1d:f5:22:34:46:cc:7e:8a:07:45:8a:10:ab:36:79:6f:ee:
87:5d:6d:d7:02:2d:04:52:18:ff:75:19:af:94:fe:cd:80:9f:
29:e4:dc:b9:95:ec:f2:5d:9a:ec:ab:6e:d8:5e:88:21:dc:cc:
15:b9:bf:c5:33:8a:7d:04:6b:17:c4:53:9c:ee:ea:c3:ab:c5:
18:7a:76:a5:4a:80:b5:e3:b0:f4:8c:07:52:91:cf:58:25:3b:
29:b0:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org