Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/nO-6gxs9r4Ny1nDNVSOM7zzGQPQ.roa
File: nO-6gxs9r4Ny1nDNVSOM7zzGQPQ.roa (raw, json)
Hash identifier: 1xxCs8/HEZReuu8BdVazYClv6jKLqXrxhMsZVQYtb9Q=
Subject key identifier: 9C:EF:BA:83:1B:3D:AF:83:72:D6:70:CD:55:23:8C:EF:3C:C6:40:F4
Certificate issuer: /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial: 0181B1
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/nO-6gxs9r4Ny1nDNVSOM7zzGQPQ.roa
Signing time: Thu 21 Apr 2022 09:15:48 +0000
ROA not before: Thu 21 Apr 2022 09:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31354
IP address blocks: 195.234.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98737 (0x181b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Validity
Not Before: Apr 21 09:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cefba831b3daf8372d670cd55238cef3cc640f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:33:72:d5:a9:cf:31:0c:e7:32:e1:08:5f:
74:88:3c:9e:17:78:bf:69:87:16:77:8a:6c:55:1d:
40:7b:ef:a7:4a:20:bd:c8:c8:bc:e0:9c:e5:60:e8:
94:ad:2a:1e:62:43:90:25:5f:81:c1:19:5d:57:b8:
a9:61:4c:04:4d:97:a8:eb:7a:d0:e5:e0:25:fd:0c:
4a:f2:ff:84:bb:b6:0e:67:72:dc:84:89:57:10:d2:
21:02:eb:ec:e3:57:df:12:44:24:76:0a:92:54:8d:
d4:28:2b:cf:98:47:b7:23:ad:a5:f7:62:27:54:b0:
47:8b:0a:a6:0c:99:e8:0f:fd:eb:7b:d8:46:ea:98:
13:d2:db:13:d2:72:53:ec:4e:48:36:d0:e7:4f:bb:
7b:b3:e7:c7:bf:36:6e:9d:25:bf:73:33:e9:99:d1:
34:67:08:8d:75:97:fd:5b:33:26:7c:ef:d1:64:02:
95:d0:eb:b7:fd:c7:61:7c:65:b6:9c:d5:01:21:bf:
3b:e8:9a:a0:bb:b7:7a:61:89:90:55:c4:bb:35:82:
6b:1d:95:6f:9c:3b:f3:d9:b5:c4:a1:75:50:9e:0c:
b3:cc:7d:dd:9e:6f:41:9f:a6:a4:95:e5:0f:44:f7:
4c:49:37:72:9a:99:26:69:5a:22:d8:21:73:54:5f:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EF:BA:83:1B:3D:AF:83:72:D6:70:CD:55:23:8C:EF:3C:C6:40:F4
X509v3 Authority Key Identifier:
keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/nO-6gxs9r4Ny1nDNVSOM7zzGQPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.182.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:da:8b:f3:8f:8d:0b:72:b5:5c:c6:45:f9:37:26:26:7b:04:
a0:f1:6c:52:db:9f:62:7b:4b:55:26:69:c4:07:88:e1:54:d0:
a4:37:e4:03:d0:6c:94:ee:0a:b1:30:50:c0:35:f0:71:4a:90:
28:b1:46:4e:f9:27:ec:38:d6:0a:ab:f4:5c:c9:7c:0c:47:73:
f2:c8:c5:72:8e:61:11:eb:22:9c:ff:35:e1:a8:15:f8:40:b0:
50:52:a7:e1:cb:ee:33:a3:5e:86:73:cc:2a:51:b1:01:e7:92:
fe:81:c8:f4:c9:d7:be:ec:8e:30:6d:64:a9:37:41:8f:63:d6:
bd:2b:02:aa:68:ea:49:d6:34:4f:8d:53:6e:68:7a:0e:bf:e0:
55:bf:45:c1:3e:f9:68:1f:77:a0:04:5d:48:92:15:2c:04:6a:
f7:ea:d6:4e:b2:4b:f5:aa:28:36:d5:71:28:0e:fa:a8:3d:e2:
93:e5:39:9b:89:93:2b:23:16:e1:ec:d8:8c:fd:3c:d4:7e:d7:
4f:80:71:b8:60:47:16:f0:f7:b3:0e:57:97:0f:35:00:fd:48:
0a:b2:5f:dd:06:af:fd:46:4a:92:0d:8f:b2:9c:3e:11:3e:6f:
3b:f2:3f:0b:4f:62:e3:f6:13:cd:db:b1:4d:b9:be:d0:08:7f:
9f:bf:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-ams.rpki-client.org