Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7NvVIR_sKorkBj3-W_sBth7dn8o.roa
File: 7NvVIR_sKorkBj3-W_sBth7dn8o.roa (raw, json)
Hash identifier: SwsZ/PpwRBVEX6y/POSOuS7Cvip4gxlibvrFgbrnq94=
Subject key identifier: EC:DB:D5:21:1F:EC:2A:8A:E4:06:3D:FE:5B:FB:01:B6:1E:DD:9F:CA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19E9C619
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7NvVIR_sKorkBj3-W_sBth7dn8o.roa
Signing time: Sat 01 Jan 2022 15:56:51 +0000
ROA not before: Sat 01 Jan 2022 15:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203268
IP address blocks: 136.144.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434751001 (0x19e9c619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecdbd5211fec2a8ae4063dfe5bfb01b61edd9fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:0c:7e:ac:49:55:37:62:cb:47:eb:e0:c1:
df:ca:4a:36:bd:f5:a8:df:39:f9:da:51:f9:cd:98:
b5:10:a4:42:df:ca:cd:82:f0:0a:6b:73:43:2c:64:
78:8d:c8:9e:3c:51:a3:05:93:cb:b0:a3:68:25:57:
d3:91:78:6e:ce:c4:fd:e4:a7:59:61:0b:b4:8a:2a:
e1:83:80:72:ee:db:0c:ca:92:cd:73:17:12:9e:b2:
32:09:d4:2a:05:e4:5e:ae:35:f1:b1:06:63:a7:4f:
3a:3c:8e:15:c7:8f:2a:d6:b1:77:76:c1:4a:e4:d2:
ba:b0:fa:c4:e1:14:81:03:c7:a5:0f:c7:f0:e7:46:
a4:78:fc:6c:85:34:40:e8:d5:db:38:54:b5:5c:1d:
75:03:e5:27:b4:4c:45:58:74:3d:d8:53:9c:ef:ef:
37:f9:27:5f:df:ec:98:01:d7:c3:f3:10:e9:ff:99:
84:6d:8a:cb:89:f7:37:02:5b:7c:a5:28:0d:49:29:
6b:6e:f0:cb:0f:8d:fa:d9:96:d9:c5:d2:51:2f:cc:
36:ce:27:91:c7:4d:a3:1b:00:18:be:f2:36:89:6d:
e8:4e:1e:5b:dc:33:b0:62:9a:3f:3f:29:6d:8f:ac:
5e:50:1f:3d:14:92:47:11:26:11:db:45:7d:51:91:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DB:D5:21:1F:EC:2A:8A:E4:06:3D:FE:5B:FB:01:B6:1E:DD:9F:CA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7NvVIR_sKorkBj3-W_sBth7dn8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.44.0/22
Signature Algorithm: sha256WithRSAEncryption
25:35:a6:c6:a3:b3:1e:9c:16:11:71:07:a4:27:11:79:ae:a3:
de:24:1c:3b:e8:19:25:2f:0f:94:bc:2d:1b:12:0a:fe:88:a8:
48:36:cd:9f:45:3c:c7:ed:db:f9:60:28:a8:3e:45:2a:53:6c:
99:02:62:ce:7d:02:08:04:14:59:8b:7b:68:58:e6:53:9e:b8:
af:2c:02:b2:15:59:09:92:b4:87:10:1f:0a:ab:99:6d:ad:24:
f6:82:7f:f8:df:8d:a0:49:c0:16:18:bf:80:6b:34:44:ed:8b:
b7:91:54:96:83:20:fe:c5:03:db:b4:39:fa:ba:c1:b2:9c:8a:
5d:7a:eb:4e:4c:c5:0c:ae:49:17:46:62:38:8d:26:68:22:ae:
ab:3a:c8:cd:e4:ac:7f:0f:93:99:79:56:8a:6a:df:1f:bb:e7:
87:41:90:5d:ee:64:eb:3d:f4:1a:5b:9e:8e:e6:b1:53:36:a0:
b0:aa:ba:10:5b:a3:9a:1b:43:d3:61:e3:f5:25:f4:3b:e1:0d:
ff:b7:b5:e2:8f:b1:dc:89:a1:c5:61:f3:19:7f:01:11:0c:e7:
2d:46:bb:cb:08:95:fd:21:26:a0:47:1c:37:3d:1a:1c:cd:23:
ae:f8:40:3c:77:d0:a3:3d:77:48:0e:3e:52:ae:02:7f:a1:ce:
4c:da:d7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org