Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/NRCyU7T3VGVg81rtNHe1xBrzZFQ.roa
File: NRCyU7T3VGVg81rtNHe1xBrzZFQ.roa (raw, json)
Hash identifier: XnVi6YtyailysW2c/1pwTM1EVqC8957ZfRywxP7ArcY=
Subject key identifier: 35:10:B2:53:B4:F7:54:65:60:F3:5A:ED:34:77:B5:C4:1A:F3:64:54
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: DF7771
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/NRCyU7T3VGVg81rtNHe1xBrzZFQ.roa
Signing time: Tue 26 Apr 2022 06:53:47 +0000
ROA not before: Tue 26 Apr 2022 06:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14645105 (0xdf7771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Apr 26 06:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3510b253b4f7546560f35aed3477b5c41af36454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:6a:44:d5:c1:e0:14:e8:0f:47:f2:46:d5:
6a:eb:2b:c3:7b:23:89:7e:c3:db:a5:3e:5b:8b:ec:
7c:97:90:53:6b:6d:94:a7:80:8e:1b:cd:4b:50:fd:
b0:35:f0:e3:a3:c9:52:2c:a1:88:c2:82:f7:3d:91:
cf:a8:d8:48:fc:8f:60:1d:25:08:1d:c5:ae:b3:75:
6d:68:30:8b:2a:e8:d9:b6:11:67:e5:44:43:14:8d:
f9:95:81:e5:48:5e:c0:3c:47:28:55:56:33:b6:b4:
b5:24:10:41:76:01:a6:db:c0:9f:61:7f:81:2a:ed:
7c:b8:32:17:fc:c0:58:27:13:14:2a:1c:65:58:5c:
ae:a4:59:e2:17:7c:ee:04:10:1d:ae:57:0f:23:9f:
74:88:4b:57:1b:60:11:21:43:c1:9d:19:c3:34:53:
31:5b:73:87:09:4d:7d:08:5a:db:42:40:fa:21:87:
92:d7:4f:e9:f8:70:33:19:17:ef:27:59:56:ce:bb:
8d:97:c7:50:91:56:1b:a0:dc:1d:9a:c5:b3:4b:bf:
be:bc:c0:5e:61:29:dc:62:ea:8f:08:ab:a6:d6:72:
14:c4:95:70:11:81:f3:1d:84:d2:99:fb:20:8f:55:
74:8a:a6:57:80:55:bc:0d:62:80:ec:96:e9:98:c0:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:10:B2:53:B4:F7:54:65:60:F3:5A:ED:34:77:B5:C4:1A:F3:64:54
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/NRCyU7T3VGVg81rtNHe1xBrzZFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
40:07:bb:91:2e:9f:70:61:4c:a6:42:89:56:34:dd:bb:d4:18:
9f:c8:fb:cd:07:ba:2e:b7:af:0f:bb:78:39:83:03:c3:5e:47:
ed:55:77:b7:4d:0b:13:e8:54:1e:58:d9:0c:71:ab:94:a6:0b:
15:8e:8c:7c:a5:a4:59:28:f8:c4:ad:14:3e:25:38:5d:04:07:
20:94:51:16:e7:38:2e:f6:02:eb:b8:68:ae:7a:5a:ba:fb:11:
af:b6:b2:04:85:5f:29:e6:6c:fa:36:a2:4b:f3:bc:16:72:ad:
c7:50:9b:b0:6f:51:82:85:96:d2:64:4c:f8:a9:0f:d8:82:bf:
a8:53:eb:dc:e9:1e:b2:20:d9:e0:6c:19:d2:b1:de:72:71:b4:
75:4a:f0:f2:e9:0c:98:f5:09:92:a5:d4:4a:ea:cf:b7:2b:8f:
ce:2c:30:2f:cb:92:3e:46:c3:a6:72:51:ce:f6:f9:aa:e3:6a:
c1:d3:5a:06:57:f9:be:bd:ac:3b:f5:cc:2d:39:43:fe:91:a7:
b4:63:92:85:3f:e0:34:c2:e7:1b:99:b5:b5:b6:f0:7e:e9:7d:
47:a3:43:f8:00:c0:96:89:03:72:5e:83:36:87:b9:8d:41:fe:
67:80:6d:a8:32:94:2e:3d:d8:0b:9c:82:c2:5f:c3:ba:17:55:
5b:61:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-ams.rpki-client.org