Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Nb9as7eGO0kvULd7MYYyFOKjNQk.roa
File: Nb9as7eGO0kvULd7MYYyFOKjNQk.roa (raw, json)
Hash identifier: 1zHBWj9jF1nWQ4C2FTEt/CctbPHIccdIFby5ni9hStA=
Subject key identifier: 35:BF:5A:B3:B7:86:3B:49:2F:50:B7:7B:31:86:32:14:E2:A3:35:09
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 09B449EB
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Nb9as7eGO0kvULd7MYYyFOKjNQk.roa
Signing time: Fri 01 Jul 2022 07:24:02 +0000
ROA not before: Fri 01 Jul 2022 07:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162810347 (0x9b449eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jul 1 07:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35bf5ab3b7863b492f50b77b31863214e2a33509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:c0:fb:a2:8c:1d:40:ed:b3:18:4b:9f:2c:
01:c4:1c:c9:e6:23:b3:f5:04:c9:86:bf:7e:be:2e:
c7:b1:d5:7e:df:3b:24:6b:01:49:78:74:18:cc:4a:
75:eb:a4:cd:f4:0c:71:07:7b:31:3f:43:f1:d9:c0:
7e:c6:bb:31:48:37:72:fe:c6:ec:cf:98:ff:a3:0b:
ca:57:32:c1:ce:65:9a:fd:50:6c:c2:b2:4d:49:6a:
5a:fb:45:fb:06:8f:5f:ca:8e:c1:bd:aa:7d:7c:4b:
bb:e0:f9:40:f8:8d:61:ed:2f:19:d4:ff:f9:50:40:
8d:b2:b7:cc:9e:da:19:65:b5:2d:29:62:0f:b2:3d:
98:e7:3a:0b:c9:b3:8c:b0:d3:63:a9:b8:3a:0b:a0:
a8:e9:f5:b5:7a:ed:2d:50:ef:33:78:fd:5e:02:ea:
21:19:2a:bc:96:04:d6:2a:92:9d:fc:17:85:0e:46:
3c:5a:76:6c:b8:87:c6:6c:69:de:28:70:67:01:e4:
ab:93:55:92:75:1b:cf:e8:cd:f7:2b:0f:f5:15:e9:
9b:3a:52:97:f5:c4:f1:ee:a4:d8:64:8e:9e:8e:1e:
04:d6:9a:42:38:92:10:b7:56:9f:8d:ba:c6:ac:49:
27:f3:d2:16:a4:d7:3b:cb:4e:75:b3:c1:56:f1:58:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:5A:B3:B7:86:3B:49:2F:50:B7:7B:31:86:32:14:E2:A3:35:09
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Nb9as7eGO0kvULd7MYYyFOKjNQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
193.164.4.0/24
193.164.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:35:ff:94:35:2c:27:59:f5:89:4b:f9:05:ec:df:d4:ca:84:
2b:24:0c:0b:44:c2:6c:58:b1:de:1d:81:d7:65:12:18:3f:78:
40:fe:39:96:26:9e:a6:57:aa:12:d4:6a:e2:09:eb:d0:d0:a5:
34:74:6c:8f:96:44:ac:64:86:03:6d:b2:4a:88:d7:d0:6c:06:
b8:11:be:1a:97:65:38:c8:53:8a:bd:b2:a5:33:87:dc:f4:ba:
c5:d7:47:30:eb:a5:46:db:a4:d2:0c:06:5b:d4:59:89:4d:71:
ad:23:7b:cf:59:cf:e7:c6:63:39:b9:fb:de:3a:64:97:bb:bb:
e0:c4:c1:3f:2c:9b:23:95:e4:99:9b:e1:3e:8d:36:93:bd:bf:
35:d8:2d:b9:ff:7c:ec:93:b5:29:ff:47:a0:a3:43:7b:d1:1c:
ef:0b:0b:37:2a:bc:dc:b5:7d:28:a6:77:86:c7:50:d9:70:e2:
7e:68:d2:df:23:58:e4:f5:84:12:67:e2:04:03:e5:40:10:69:
db:ab:a5:82:53:d5:f4:d1:32:9a:d6:be:c1:4d:78:0c:13:1c:
2f:15:66:72:4a:da:5d:09:09:84:be:88:9e:8e:81:7e:16:6a:
f6:f3:b1:22:09:da:b3:6f:0d:84:35:7b:95:60:51:4a:14:9e:
df:e4:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org