Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/nxVreGKRhs4EeELiQQ4zctbScuc.roa
File: nxVreGKRhs4EeELiQQ4zctbScuc.roa (raw, json)
Hash identifier: 5YBzXbIXLqOTN+x38DjOgS4Dmfe5b+XYqY6UFjQid1Y=
Subject key identifier: 9F:15:6B:78:62:91:86:CE:04:78:42:E2:41:0E:33:72:D6:D2:72:E7
Certificate issuer: /CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Certificate serial: 0521D793
Authority key identifier: AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/nxVreGKRhs4EeELiQQ4zctbScuc.roa
Signing time: Sat 01 Jan 2022 09:58:50 +0000
ROA not before: Sat 01 Jan 2022 09:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202105
IP address blocks: 185.206.31.0/24 maxlen: 24
185.206.28.0/24 maxlen: 24
185.206.29.0/24 maxlen: 24
185.206.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86103955 (0x521d793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Validity
Not Before: Jan 1 09:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f156b78629186ce047842e2410e3372d6d272e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9b:d2:51:b8:4a:a1:4c:2a:fe:c6:be:91:a1:
77:e9:84:9f:02:f0:3c:4d:a5:f9:11:9b:e3:04:96:
02:2d:a7:e3:5e:d7:69:fa:c4:c6:ee:a9:6e:85:fa:
8c:10:81:13:a4:b1:68:fe:6c:84:1e:f8:e6:65:da:
4f:58:ca:00:52:c0:90:91:e0:70:43:0b:c9:2f:a2:
94:20:bd:b2:e8:89:12:52:5c:0e:0d:18:9d:0d:d6:
8d:6b:11:af:10:62:98:10:2d:81:22:c2:00:c2:05:
93:54:6c:db:67:f0:de:9a:32:bd:c3:6b:01:00:84:
ea:61:3e:34:46:a4:15:37:a2:5b:19:86:f6:01:75:
b3:b2:db:71:45:81:1e:3a:bb:68:c4:4e:b9:8f:57:
71:7f:71:b1:07:b1:a8:3e:1b:40:ea:ff:8b:a6:b7:
35:17:0f:2e:20:bd:5f:22:0d:9a:5a:1a:85:c8:08:
e7:c8:1a:f3:12:cb:78:62:69:5d:1b:2e:86:75:47:
bb:d6:ea:5b:7e:34:57:3b:3b:ff:ab:8d:d7:9a:77:
c3:83:6d:f4:71:87:5c:ef:7f:7d:aa:58:01:f7:2e:
bf:9d:77:77:62:9e:f1:87:e2:ca:16:a7:a2:9d:c6:
47:56:66:48:e1:7a:99:ab:52:0f:ca:fc:db:c2:e2:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:6B:78:62:91:86:CE:04:78:42:E2:41:0E:33:72:D6:D2:72:E7
X509v3 Authority Key Identifier:
keyid:AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/nxVreGKRhs4EeELiQQ4zctbScuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.28.0/22
Signature Algorithm: sha256WithRSAEncryption
46:65:d5:3c:b5:c3:70:13:dc:29:e4:3d:fa:1a:c5:a0:6f:39:
b9:9f:e4:89:ef:e4:1f:87:ed:de:a1:0c:8f:0f:8b:69:0c:ae:
5c:f5:87:8d:b8:66:0c:33:cc:f1:b8:97:1e:34:e7:5b:57:39:
f0:62:7c:9d:35:aa:4d:40:04:b1:51:4a:29:8a:f8:e3:e4:fb:
c5:ac:31:ae:50:44:e4:78:bc:a2:0a:2d:e0:95:4c:8b:79:ad:
ef:bf:b9:60:cf:22:8e:fe:77:87:c0:99:f2:4a:5d:97:a9:27:
50:31:95:4a:b5:d8:2f:09:06:e3:1c:0a:b6:81:c9:a3:a3:09:
7c:e7:e7:dc:81:d9:82:f2:e2:fd:a4:c1:5d:c2:d9:6b:4c:b2:
0a:8e:87:d2:4c:79:06:28:4c:e6:1b:8d:26:b2:24:be:ba:0a:
2d:6d:48:6d:e0:a2:79:79:3b:06:1a:87:b8:1f:0b:5f:af:2a:
6c:23:3d:3d:71:d9:52:ab:b3:60:d3:43:22:b3:b0:36:84:a0:
13:9b:aa:ad:55:94:34:ed:eb:44:79:0e:23:65:24:f2:50:68:
94:d2:32:01:22:d9:1a:9f:ad:33:3f:01:6d:78:41:d2:8e:cd:
ab:1c:f6:c7:ba:ee:7a:21:a7:8e:ff:bf:a6:a2:45:45:4f:4d:
b6:7c:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:59 2023 by rpki-client on console-fra.rpki-client.org