Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/NxyOk99V8O2pZRmDELn9Jp9GplE.roa
File: NxyOk99V8O2pZRmDELn9Jp9GplE.roa (raw, json)
Hash identifier: Q2EbozUS5OhbI1gUHskbY+sDdD5kLQzBgZuwxYmG4+w=
Subject key identifier: 37:1C:8E:93:DF:55:F0:ED:A9:65:19:83:10:B9:FD:26:9F:46:A6:51
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0AC385E5
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/NxyOk99V8O2pZRmDELn9Jp9GplE.roa
Signing time: Sat 01 Jan 2022 15:06:23 +0000
ROA not before: Sat 01 Jan 2022 15:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39440
IP address blocks: 81.88.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180585957 (0xac385e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Jan 1 15:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=371c8e93df55f0eda965198310b9fd269f46a651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:21:d1:f9:f1:9e:55:33:b6:81:12:c9:d4:
20:63:45:d5:a7:cb:45:33:f5:d7:64:35:36:10:32:
af:45:a5:88:fa:fa:29:29:d8:0e:0c:ee:0f:5a:d3:
8a:a7:6a:88:61:ec:eb:5e:d5:7e:88:7a:6a:da:70:
4e:3b:0e:e6:67:73:1c:25:a1:05:2b:c1:1c:7e:9d:
ee:89:9f:b6:ae:2f:be:eb:5a:de:b5:10:b4:a5:38:
9c:20:91:f9:cd:c4:05:38:47:fb:71:d8:df:9c:22:
31:4d:43:75:a0:3d:0a:90:7b:99:8c:35:d0:f9:a1:
5b:f9:74:67:4c:a8:c1:a9:d1:36:9c:a1:21:fd:6f:
13:0e:e2:42:d7:2f:e3:6c:5c:69:33:9f:b1:38:be:
7a:3b:61:ec:d2:b4:17:9f:63:01:43:9c:3d:e8:61:
b4:49:8c:c8:b7:c5:42:44:0a:15:77:fe:70:99:f7:
cc:71:42:74:4a:b2:16:1c:9a:09:55:0d:e7:51:d2:
72:d6:e6:95:65:38:54:54:a1:cc:23:42:ae:6f:46:
5b:91:09:4e:9a:75:98:71:5a:c9:93:f1:c5:8a:6f:
c5:ed:50:24:be:52:34:0b:f5:4a:b3:ea:1c:72:73:
1f:88:35:9c:7b:da:94:ed:f5:3b:37:7c:68:eb:23:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:8E:93:DF:55:F0:ED:A9:65:19:83:10:B9:FD:26:9F:46:A6:51
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/NxyOk99V8O2pZRmDELn9Jp9GplE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.184.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:ba:b3:de:b5:08:cf:79:97:17:fd:58:45:ae:18:cb:b1:85:
3f:d9:17:66:90:93:9c:57:d7:41:04:6f:a5:f6:3d:3e:0a:ed:
e8:b3:6e:5a:77:4f:52:9f:10:d5:70:21:f3:67:10:f6:67:26:
9b:d7:eb:99:ad:a8:75:83:73:58:68:e8:f5:72:69:1a:8b:2b:
48:59:0c:13:b2:15:82:8a:88:d7:96:0c:a5:87:8c:d7:4c:35:
79:d2:37:18:df:43:b4:c7:ac:9f:3f:c6:86:d4:1f:cf:f4:3c:
3f:dc:2c:5e:34:a8:a7:b8:45:f4:72:f2:6d:db:9e:79:61:29:
34:23:cd:06:01:04:04:12:9c:6d:81:f4:a5:c0:70:3b:e9:f8:
5b:06:70:6e:98:c2:81:bb:fd:2c:5a:48:fb:53:30:5d:29:80:
ac:a1:27:cf:a4:a7:4e:d3:b3:c1:a4:2d:ed:2b:9c:35:61:ca:
60:58:fe:d1:cd:6d:50:fc:4a:5e:f6:a8:3f:90:9f:6e:04:60:
58:e8:44:ac:6e:92:ec:ec:83:d4:8c:21:45:1b:7b:75:2d:5a:
a3:2e:78:b5:f3:d5:c0:33:c6:67:a9:4d:a6:1d:fd:02:23:fa:
c4:00:e6:57:1f:a6:7c:05:68:f8:51:1a:39:cd:fd:29:c2:82:
33:10:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:09 2024 by rpki-client on console-ams.rpki-client.org