Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/NqMI0A1iI8YdyCbmtFGEXIRsRv0.roa
File: NqMI0A1iI8YdyCbmtFGEXIRsRv0.roa (raw, json)
Hash identifier: EODm0+nJv7COVudnTYQD7P2RNea8f3N6/mBA+bhroWA=
Subject key identifier: 36:A3:08:D0:0D:62:23:C6:1D:C8:26:E6:B4:51:84:5C:84:6C:46:FD
Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01
Certificate serial: 036A9C5A
Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/NqMI0A1iI8YdyCbmtFGEXIRsRv0.roa
Signing time: Sat 01 Jan 2022 05:02:24 +0000
ROA not before: Sat 01 Jan 2022 05:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212484
IP address blocks: 185.205.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57318490 (0x36a9c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969326562af70e79f3d512488e290e92432d5a01
Validity
Not Before: Jan 1 05:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36a308d00d6223c61dc826e6b451845c846c46fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:31:3a:d9:98:22:fb:d4:02:79:4c:51:67:
62:ff:2d:1e:48:6e:73:88:16:ca:01:c1:56:42:b5:
17:eb:75:2d:e0:c7:48:66:9c:81:13:50:bf:d1:47:
62:41:d9:ef:ff:c3:1c:f2:15:c4:34:77:b1:c9:ea:
1f:9e:ce:3c:f9:76:cc:ff:7a:ad:17:d1:2a:20:38:
5f:ee:5e:54:ee:d8:84:6d:fe:9b:c3:0c:21:72:59:
eb:12:dc:ee:fb:82:be:a2:e5:a3:23:62:8c:0e:d7:
1b:59:eb:74:91:ed:a0:5a:e8:dd:47:03:e6:94:ee:
96:26:a6:7a:9a:8e:1d:31:90:cd:d8:54:0d:6f:82:
94:90:6c:a3:1e:08:28:67:90:bd:84:6d:f0:63:66:
dc:5c:18:d9:e5:42:72:ee:2e:f5:f6:1a:bb:eb:a6:
c6:82:a7:f4:46:06:47:73:68:61:57:75:57:89:ee:
b3:a2:99:96:9d:10:74:5a:20:82:d9:57:26:cc:83:
b6:3a:7b:79:a5:68:93:4f:43:93:80:e8:bc:9e:a0:
ee:17:c5:30:cb:0b:52:30:74:fa:84:e0:23:76:47:
bb:41:2f:09:b4:1a:3d:d8:9e:a7:5c:ec:2e:c9:cd:
18:5c:da:bb:3d:48:7c:5d:81:f0:6a:ed:dc:ca:16:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:08:D0:0D:62:23:C6:1D:C8:26:E6:B4:51:84:5C:84:6C:46:FD
X509v3 Authority Key Identifier:
keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/NqMI0A1iI8YdyCbmtFGEXIRsRv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:37:da:1a:1f:2e:b6:2f:50:ac:53:48:56:44:e2:d4:07:8d:
ac:d3:61:a3:6b:54:d9:0d:28:02:93:09:e0:68:41:ac:21:26:
57:08:0e:97:68:e3:43:eb:f0:7e:d3:56:f8:fd:12:0b:f5:80:
ed:d8:cf:87:04:9b:1a:86:e3:a9:b1:02:49:2a:5e:1c:5c:f6:
61:0c:92:5c:84:c1:53:33:36:05:b8:93:1f:c7:9d:95:b8:f4:
47:75:25:86:a7:8a:4d:cc:f7:b6:ef:64:6c:59:cf:cd:e7:e8:
dd:62:9b:c1:11:74:b4:a5:7a:9b:ff:f4:0c:45:13:0b:27:22:
e3:25:4b:06:7c:74:81:9e:14:03:a0:45:9a:d2:15:7a:78:bd:
8e:d0:10:aa:43:03:c0:2e:52:8b:16:f8:f5:98:b2:eb:32:1b:
7c:71:52:1b:6d:43:fd:64:b4:b5:af:54:f7:6d:cf:1e:24:64:
a5:f5:4e:13:c0:7b:be:89:a5:6e:b5:d9:5c:96:fa:eb:2d:08:
d8:f7:aa:d9:39:bb:92:10:94:69:94:7b:ec:0e:dd:72:08:0d:
2f:09:9b:f1:b6:70:2d:7b:f8:09:a2:b3:43:d6:b6:97:4d:8b:
91:e7:eb:7a:13:82:cc:50:85:18:65:7e:6d:b2:30:99:74:bf:
42:1a:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:27 2024 by rpki-client on console-fra.rpki-client.org