Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/NjqwcL-RV8s8lo8Cwprf_j8JNAw.roa
File: NjqwcL-RV8s8lo8Cwprf_j8JNAw.roa (raw, json)
Hash identifier: U4TKnNJRf4xfoDNlyxyfNfyg93WTsb5FFB6od9tU49o=
Subject key identifier: 36:3A:B0:70:BF:91:57:CB:3C:96:8F:02:C2:9A:DF:FE:3F:09:34:0C
Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial: 1577BD49
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/NjqwcL-RV8s8lo8Cwprf_j8JNAw.roa
Signing time: Sat 01 Jan 2022 08:05:42 +0000
ROA not before: Sat 01 Jan 2022 08:05:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60786
IP address blocks: 185.51.42.0/24 maxlen: 24
185.51.43.0/24 maxlen: 24
2a04:c147:8000::/34 maxlen: 34
2a04:c147:c000::/34 maxlen: 34
2a04:c147:4000::/34 maxlen: 34
2a04:c147::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360168777 (0x1577bd49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
Validity
Not Before: Jan 1 08:05:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=363ab070bf9157cb3c968f02c29adffe3f09340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:35:73:8d:59:11:35:12:98:e2:64:a1:5d:
17:1e:e9:40:5c:79:1a:5b:e4:8e:1a:29:1f:c0:a7:
d9:b9:56:57:f6:ea:94:d3:1f:f1:89:f7:2a:ae:28:
3f:e7:47:c2:86:19:eb:98:38:e9:17:ba:f8:b9:96:
62:dc:ff:93:52:8f:dd:03:34:df:47:7f:fc:1a:72:
1e:68:d0:6d:35:52:3e:de:cb:0e:df:f9:6c:cd:d0:
9b:b5:f3:35:c8:35:13:bb:b3:87:a9:ab:af:45:5e:
e6:44:b6:4b:f1:27:a8:af:8b:53:00:67:89:3f:12:
72:99:f5:d2:6a:e0:fd:8e:c4:81:a9:79:66:c6:92:
92:23:b6:11:81:0e:cd:09:d9:81:dd:2a:a8:ee:4b:
4a:db:19:3e:3f:ea:72:7e:a0:8a:64:24:f4:5f:65:
e7:44:7c:b1:20:a9:a6:eb:c3:ad:e4:aa:75:25:25:
c6:16:77:e6:6f:e0:f5:39:80:4a:e1:34:4e:8e:4a:
09:a6:e7:87:2a:63:7b:a0:be:a9:b8:82:90:51:85:
4d:ae:80:18:be:23:9a:82:48:a6:aa:14:a3:17:19:
e3:29:52:02:2b:9d:5d:1b:93:3f:ab:23:5e:fb:55:
e0:ec:65:c9:90:37:af:f7:c3:87:36:98:5e:7e:60:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:B0:70:BF:91:57:CB:3C:96:8F:02:C2:9A:DF:FE:3F:09:34:0C
X509v3 Authority Key Identifier:
keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/NjqwcL-RV8s8lo8Cwprf_j8JNAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.42.0/23
IPv6:
2a04:c147::/32
Signature Algorithm: sha256WithRSAEncryption
79:67:04:a6:af:6f:7c:80:f3:50:57:9f:c2:2d:3f:00:53:6d:
54:7d:e4:cb:96:ff:0c:07:aa:18:fa:e4:ac:f1:e1:79:4f:32:
b3:5b:6c:bd:b8:66:ca:c0:66:5e:85:b5:53:ea:b5:0b:32:49:
91:d3:45:b1:3b:16:32:91:fe:9e:41:e9:5b:2c:a4:57:b8:04:
c1:29:9d:cb:98:9e:e7:c4:a0:89:2f:39:59:40:ca:dc:3e:c2:
b3:b0:5a:24:95:1a:44:9f:2e:62:ab:4c:88:51:b7:e1:5b:97:
02:e3:2f:71:32:b1:0f:11:8d:5c:14:c4:6e:01:39:2d:de:0c:
f3:e3:fc:e7:14:8d:e6:f0:5b:af:15:49:97:f4:e7:99:b7:52:
16:77:3a:95:02:43:c1:40:2c:6c:ae:2c:6e:84:a8:8b:42:f4:
cb:f5:1d:ca:c7:19:33:e7:de:e2:cf:c6:f1:18:3f:24:ec:77:
e2:68:c2:ea:f8:a1:b3:bf:2e:54:2a:d9:8e:8e:15:f1:71:97:
60:42:51:1f:8f:12:0d:17:a0:22:d8:c8:71:73:ca:53:55:58:
11:66:eb:68:8a:e5:cb:41:90:47:1e:d2:b6:c3:3a:16:87:60:
cc:c2:8c:2d:1c:03:21:77:7c:ff:a9:fb:d6:35:34:ea:3b:3b:
5c:03:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:21 2024 by rpki-client on console-ams.rpki-client.org