Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/NHQxYM9WpPaTsEXS77YxGq7kzpM.roa
File: NHQxYM9WpPaTsEXS77YxGq7kzpM.roa (raw, json)
Hash identifier: Btn7l38V54nd4ZCgWW/f0jSdyz9zoH3i83pirIK2mjs=
Subject key identifier: 34:74:31:60:CF:56:A4:F6:93:B0:45:D2:EF:B6:31:1A:AE:E4:CE:93
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 07128CF5
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/NHQxYM9WpPaTsEXS77YxGq7kzpM.roa
Signing time: Sat 01 Jan 2022 11:54:01 +0000
ROA not before: Sat 01 Jan 2022 11:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203735
IP address blocks: 92.119.61.0/24 maxlen: 24
92.119.60.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118656245 (0x7128cf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 11:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34743160cf56a4f693b045d2efb6311aaee4ce93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:69:9e:4a:f6:22:19:a8:46:50:06:8e:33:
2a:f0:d0:27:a1:4a:f2:4a:e2:c6:b6:99:4b:5e:65:
7e:7b:65:89:77:b2:f5:04:e9:35:c5:5e:74:53:25:
4c:83:0a:3a:78:b5:28:f4:45:e8:32:8a:03:aa:b7:
71:15:ab:e5:9f:38:93:41:92:cb:40:3f:67:37:d8:
de:c0:07:62:4c:03:83:dd:cb:e8:53:ea:de:53:1b:
19:ba:24:29:5b:1b:67:46:04:84:35:68:e6:1d:10:
f7:d1:89:08:89:40:a1:d0:4d:65:e4:73:f6:70:2e:
28:45:08:a1:25:f9:db:f0:d6:44:46:49:4a:e5:42:
50:0a:67:b1:39:0d:b9:63:fe:ef:cc:2a:14:b5:77:
d6:c7:4a:82:5f:03:1d:7e:d4:48:64:0b:59:78:b1:
e3:d9:33:45:7e:3d:60:c4:a3:f4:0d:c5:a0:7d:b4:
00:e7:fb:ab:a7:63:23:7d:0f:02:55:5b:6a:25:0a:
09:dd:8d:da:54:ab:08:1d:91:3d:8d:6a:24:48:1c:
02:f2:aa:9a:c2:00:14:19:09:b6:93:6d:5f:a2:2f:
83:ce:d8:be:ca:89:43:da:b0:67:24:54:b5:2c:04:
fc:6d:6e:b9:23:69:8d:b3:43:81:06:fa:68:bf:0d:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:31:60:CF:56:A4:F6:93:B0:45:D2:EF:B6:31:1A:AE:E4:CE:93
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/NHQxYM9WpPaTsEXS77YxGq7kzpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:05:8e:da:68:3f:bb:40:82:e0:97:3d:fe:55:1a:be:06:2d:
2b:ec:9e:f0:50:03:ef:01:ba:cf:41:36:21:09:b9:9a:96:e9:
b5:9e:b7:2a:5a:4f:b7:5e:a1:00:63:74:63:5d:07:d2:1c:b1:
9a:93:b1:09:7d:1d:7e:aa:26:2c:03:0b:13:6d:c4:73:72:6c:
0d:0d:fa:96:70:1c:d7:86:72:fc:27:40:47:8c:30:43:9f:fa:
44:68:04:d7:e7:d5:20:c6:27:ab:ee:1e:03:a0:70:09:e0:6e:
38:b9:35:c3:96:ca:f2:f5:41:18:e3:c8:cc:bd:3b:50:e3:8e:
fb:85:1e:59:10:55:7d:cb:2c:96:e8:e8:12:b1:a2:8e:db:a4:
8d:eb:60:84:35:57:15:b9:65:0b:83:98:88:35:ab:ec:23:36:
cb:8d:d6:2d:d1:04:71:c5:ca:a3:d0:dc:d8:ab:22:2e:b6:75:
83:7f:ab:ef:4f:47:f2:6e:ba:91:8a:86:e9:05:a3:75:75:b3:
bb:d3:bf:83:e6:7c:c4:2a:6e:14:f5:70:3b:f6:30:c1:e5:12:
6f:25:62:54:4e:ce:df:03:f6:9a:7f:24:21:39:d8:47:09:f0:
4a:1a:c7:ce:aa:d7:be:ce:98:e2:5a:2c:f1:cd:a5:1f:1b:b1:
1c:ac:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org