Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/N-BUU8K16jXNvXD5mq9Idj1Zt3E.roa
File: N-BUU8K16jXNvXD5mq9Idj1Zt3E.roa (raw, json)
Hash identifier: GNlVkYZtMRyh1k1JgrxVxfsOZ43+HyxbONUP2bjFpHQ=
Subject key identifier: 37:E0:54:53:C2:B5:EA:35:CD:BD:70:F9:9A:AF:48:76:3D:59:B7:71
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 018360B59C9B993515C5F066952ADE5A9FE5
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/N-BUU8K16jXNvXD5mq9Idj1Zt3E.roa
Signing time: Wed 21 Sep 2022 15:40:58 +0000
ROA not before: Wed 21 Sep 2022 15:40:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 185.255.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:b5:9c:9b:99:35:15:c5:f0:66:95:2a:de:5a:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Sep 21 15:40:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37e05453c2b5ea35cdbd70f99aaf48763d59b771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:26:ba:03:45:f9:74:41:7a:e4:75:11:fc:
a0:85:db:82:c0:dc:cd:d7:30:44:95:90:94:5e:08:
85:5f:64:eb:9c:41:77:cb:ed:0e:32:f3:45:aa:c6:
db:a5:fc:a6:76:60:f6:51:85:7c:ea:33:a4:57:39:
4a:cc:d2:e4:34:91:27:75:57:5a:2a:ad:4b:c8:6d:
d7:23:c4:0e:9f:69:72:7a:b1:9e:4f:9c:5e:10:3c:
12:55:65:82:b2:f7:1d:49:cf:9f:8e:5f:b5:5e:cb:
d9:db:92:fb:c0:e5:53:aa:f4:3c:16:42:28:2d:3e:
34:85:14:04:0b:4a:07:04:c4:6d:c1:2c:d2:98:08:
74:03:db:aa:a4:29:61:64:9b:79:a2:47:e1:a2:ca:
dc:6e:82:9c:ed:63:6c:6e:2d:f4:35:b4:e1:6b:6e:
f6:3a:8a:73:10:54:fe:e5:53:76:9e:85:e0:0b:c4:
c6:e0:c5:b3:aa:04:3f:64:bf:fe:1f:d8:2e:97:e0:
20:de:e6:c9:65:cf:c6:33:4b:d1:7d:d1:6c:72:51:
de:2f:69:4e:9d:fd:c5:6a:3d:cb:1e:e3:00:8e:fb:
ca:61:2f:ce:10:7a:84:ed:d6:24:b6:a6:d9:43:53:
57:0f:5f:ee:0a:6c:39:6c:26:12:82:a8:33:33:8b:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E0:54:53:C2:B5:EA:35:CD:BD:70:F9:9A:AF:48:76:3D:59:B7:71
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/N-BUU8K16jXNvXD5mq9Idj1Zt3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:30:9e:0c:02:db:c6:87:68:1c:39:d4:44:21:78:e3:de:5a:
8f:5a:9f:0c:3c:da:48:2f:17:ec:8c:12:a2:0a:ab:29:ef:41:
02:e5:d3:6f:71:09:20:37:e5:f7:30:08:30:be:ca:70:ee:b6:
3a:fd:51:41:2b:e4:09:dc:e6:6f:24:b5:07:4e:62:25:0e:f7:
37:b2:36:86:af:5d:27:aa:e2:8d:2b:9b:46:77:ef:eb:93:56:
61:1d:c2:8c:94:0f:c6:2c:d7:4e:bc:11:52:a1:00:a3:17:2e:
04:f6:0e:97:d7:0e:d1:fd:05:89:c7:c5:a7:b1:b3:c3:56:c2:
cf:69:75:35:b9:f3:c6:db:65:e5:7e:c8:5e:77:e6:f0:63:3e:
9f:6e:04:23:ae:21:d0:4a:8e:ee:08:e1:fa:35:36:72:da:63:
41:96:41:bd:66:b5:7c:eb:85:15:2a:02:e2:74:5f:75:c4:eb:
61:2a:09:39:8d:b4:fd:f2:25:1a:05:3f:f7:60:88:12:c0:83:
41:b4:02:25:b1:04:e9:96:94:de:55:01:28:58:7d:10:c0:96:
d8:27:0f:14:41:b4:fa:4f:b8:b5:d7:0b:eb:64:3c:9b:40:d0:
1f:9e:10:a2:da:d8:45:eb:ab:2e:97:28:d0:d2:b8:c3:f8:ab:
5f:ca:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:22 2023 by rpki-client on console-ams.rpki-client.org