Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/NPsl1VcEorYY4i_nIC590CTN1_8.roa
File: NPsl1VcEorYY4i_nIC590CTN1_8.roa (raw, json)
Hash identifier: mWaXrtdSB+NnaoKz6XDcadZruvYOe2LOTfvJtpB9DFs=
Subject key identifier: 34:FB:25:D5:57:04:A2:B6:18:E2:2F:E7:20:2E:7D:D0:24:CD:D7:FF
Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial: 09840C92
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/NPsl1VcEorYY4i_nIC590CTN1_8.roa
Signing time: Sat 01 Jan 2022 15:03:48 +0000
ROA not before: Sat 01 Jan 2022 15:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9051
IP address blocks: 77.246.64.0/20 maxlen: 24
92.242.168.0/22 maxlen: 24
2a0d:b340::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159648914 (0x9840c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Validity
Not Before: Jan 1 15:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34fb25d55704a2b618e22fe7202e7dd024cdd7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:62:89:68:62:27:fd:06:32:cf:03:77:56:
7b:7c:17:7e:c5:23:18:0b:a7:fd:f0:ad:1c:5c:b0:
9d:78:f6:9a:3b:0f:45:0b:70:06:bd:c5:20:02:ca:
e4:45:0c:75:92:ce:b0:02:7c:e0:f0:61:ed:e7:f0:
c2:e1:d7:fd:f5:f5:03:53:66:be:1d:c6:1e:cf:86:
ea:7d:51:4e:4c:47:1e:35:db:6c:90:13:42:4c:c8:
7d:07:b8:96:2b:20:45:6a:b0:47:42:69:1b:40:fe:
ba:68:34:3e:dc:89:1c:23:f3:3d:9d:e3:85:ea:5b:
24:ed:1d:2e:fd:93:a1:ce:91:e8:4e:a4:fd:14:93:
6a:45:1a:fd:44:37:43:67:b3:34:11:8c:34:3a:f4:
c9:c3:f2:d3:6a:da:a1:6e:82:66:25:9d:be:c6:94:
f0:ae:f1:ce:ca:d0:bf:2b:bd:9b:f0:4b:ef:91:ef:
7f:ce:1d:bc:9a:ec:c2:f9:78:d3:6e:fd:e5:f8:2c:
42:dd:1a:08:ba:d0:dc:90:0f:e5:c2:fb:06:93:07:
fe:4b:4f:f3:f6:d1:8d:1c:3b:25:dc:bf:ba:21:01:
cf:f0:6d:45:45:f1:d0:fe:2b:f2:7d:46:2d:fb:6a:
c2:cd:7b:1a:4b:94:ac:68:46:06:49:c6:86:62:6b:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FB:25:D5:57:04:A2:B6:18:E2:2F:E7:20:2E:7D:D0:24:CD:D7:FF
X509v3 Authority Key Identifier:
keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/NPsl1VcEorYY4i_nIC590CTN1_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.64.0/20
92.242.168.0/22
IPv6:
2a0d:b340::/29
Signature Algorithm: sha256WithRSAEncryption
1b:26:10:ca:9b:dd:12:1a:f6:2c:a0:0d:5e:25:84:63:2d:5c:
8e:6f:3c:83:85:3f:ee:5d:e5:d4:60:28:aa:63:01:78:1b:4f:
57:11:a0:f7:e4:fa:33:74:85:e2:21:44:86:be:27:a2:3d:5c:
ef:ae:20:f1:b3:9f:a1:4b:df:35:60:93:4d:13:db:66:56:28:
46:d2:96:69:a6:e7:44:5c:0c:34:3c:4d:f2:85:54:e9:51:09:
31:c9:84:60:92:31:c9:6e:b7:7f:95:64:f1:6d:84:74:b0:17:
3c:6c:e3:f6:ce:d1:04:68:de:55:79:8f:f7:69:8e:08:dc:05:
a5:26:f5:b0:26:91:07:bf:14:d4:64:bd:59:80:bf:2b:d2:02:
cd:39:ac:af:a4:b8:55:65:ba:ec:db:21:6d:95:fc:5d:58:49:
d0:f0:bc:0a:35:54:e3:ef:59:98:79:6b:f3:41:a8:c6:1e:c3:
8c:0d:78:b5:aa:bd:a6:66:fb:7d:ce:5d:50:b9:77:1e:03:6c:
68:2a:48:fc:89:97:bf:55:c8:9d:4d:5e:ee:39:f2:08:12:49:
07:39:0c:07:9e:28:98:da:11:0e:d0:5a:fd:e0:6d:43:66:53:
44:bd:ab:c2:aa:24:ed:31:86:6e:31:a3:41:3b:b4:d6:84:10:
81:d2:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:49 2024 by rpki-client on console-ams.rpki-client.org