Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NkVpweDslV6agFCQt7X0EkVqvnQ.roa
File: NkVpweDslV6agFCQt7X0EkVqvnQ.roa (raw, json)
Hash identifier: xULH3TV5LgM0dhdY9Mzx8CyGMGqX+mWuciXi7nACuFY=
Subject key identifier: 36:45:69:C1:E0:EC:95:5E:9A:80:50:90:B7:B5:F4:12:45:6A:BE:74
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 05AFD766
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NkVpweDslV6agFCQt7X0EkVqvnQ.roa
Signing time: Tue 22 Mar 2022 14:59:51 +0000
ROA not before: Tue 22 Mar 2022 14:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46844
IP address blocks: 185.77.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95410022 (0x5afd766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Mar 22 14:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=364569c1e0ec955e9a805090b7b5f412456abe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:71:2d:be:d3:c6:84:6b:ae:9d:36:98:5b:
e8:81:a2:00:91:8b:96:14:bd:10:68:3f:02:43:91:
03:5b:8f:92:25:81:8a:a2:44:28:b7:6f:21:a6:27:
dc:ef:98:d6:67:8e:9f:f0:20:bd:2a:1c:f7:e3:e1:
ba:b3:74:4e:c0:28:6b:d0:b6:30:7c:ca:96:4a:8a:
82:ab:e9:35:8a:8c:b2:eb:11:62:12:de:d9:6e:21:
d8:ba:48:8b:f7:92:a8:02:b0:f6:55:0c:7a:ef:dc:
86:fc:7b:f5:e4:86:85:e0:c1:73:b1:50:50:f4:f5:
21:77:90:1b:30:96:3c:8c:8b:87:86:df:ba:50:4f:
a8:79:d5:59:f7:59:48:e9:d3:59:66:a6:3d:76:ef:
23:5e:86:b6:a8:3e:03:1f:7e:d9:af:aa:7b:a6:40:
eb:b0:f9:3c:43:26:e2:fa:bf:1a:67:72:61:e9:72:
2e:2b:56:8a:a5:45:ac:e2:2f:1e:94:ad:7c:53:38:
40:41:85:5c:11:2e:8b:88:bc:03:6c:8d:9e:a4:50:
d6:a4:39:72:49:e7:97:34:f0:5e:b1:a1:0c:ca:99:
7b:f9:23:d8:14:1f:60:b5:04:b1:de:30:7a:cd:2a:
e6:ae:de:76:af:c2:83:71:70:fb:1a:4a:b6:c5:66:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:69:C1:E0:EC:95:5E:9A:80:50:90:B7:B5:F4:12:45:6A:BE:74
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/NkVpweDslV6agFCQt7X0EkVqvnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.216.0/24
Signature Algorithm: sha256WithRSAEncryption
02:5c:9c:1e:dc:69:fc:aa:e6:7f:03:32:8c:6c:b8:82:30:0a:
ae:e2:af:1a:f0:d8:8a:24:de:05:e4:b6:6f:b9:57:7c:6b:b2:
b7:01:e6:3c:c8:ee:65:4f:fa:8b:26:6d:1f:db:38:65:62:62:
eb:cc:59:56:cd:5f:1e:f5:c8:09:72:a1:78:04:2c:23:7c:3a:
c3:bb:1c:88:3e:f3:bc:d4:05:18:b4:b0:ef:61:5a:54:99:55:
82:88:fa:38:dd:21:79:e0:ac:09:61:4a:23:c4:52:1e:8b:6a:
49:85:b2:42:ed:bc:24:ed:34:45:9c:30:55:b7:e8:04:19:a5:
de:09:2b:ef:26:fb:07:e2:58:4a:27:12:9e:a0:15:ab:df:d1:
24:e0:6c:e3:61:3d:b6:a6:73:77:ac:c6:2b:df:f6:a9:7f:2b:
4c:73:29:84:02:75:e2:5b:04:0e:06:65:b5:db:de:2c:4f:d2:
11:e6:17:b0:80:97:3b:95:8e:12:71:17:99:29:c4:eb:de:79:
fa:96:c5:42:b8:55:ad:4c:af:19:c6:85:f5:77:97:87:01:ff:
7a:5c:45:c9:e3:ba:bf:97:bd:43:37:49:c8:a7:78:49:18:ba:
c6:ba:a6:ce:16:50:f0:bf:19:d2:98:cd:64:df:33:20:ad:1e:
82:e9:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org