Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/nffNMAmoM_5QJixU9hRprC83lLE.roa
File: nffNMAmoM_5QJixU9hRprC83lLE.roa (raw, json)
Hash identifier: 7jbO+CF94bagp83g3g9Fz6mytG16DafO75RScH0tJ0M=
Subject key identifier: 9D:F7:CD:30:09:A8:33:FE:50:26:2C:54:F6:14:69:AC:2F:37:94:B1
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 086ED503
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/nffNMAmoM_5QJixU9hRprC83lLE.roa
Signing time: Sat 16 Apr 2022 11:38:34 +0000
ROA not before: Sat 16 Apr 2022 11:38:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 91.244.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141481219 (0x86ed503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Apr 16 11:38:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9df7cd3009a833fe50262c54f61469ac2f3794b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:17:f1:b8:27:fd:3a:ea:2b:17:1e:7a:51:
d2:cf:08:86:e4:c2:65:ef:4a:50:12:2c:ba:05:ae:
a1:4b:90:22:a1:e6:50:b4:a7:80:49:b6:3e:da:2b:
d6:92:90:2d:15:6b:33:bb:de:05:b1:26:93:0c:c7:
3f:34:83:83:65:1a:1e:21:4e:f3:8d:bd:1e:11:96:
54:63:7e:db:85:3e:8e:c1:e0:cd:31:7b:75:4f:0c:
5f:88:2a:f1:24:9d:e9:e4:fb:f0:8b:ba:3f:c2:c5:
af:b8:c2:0e:74:ca:75:25:c0:03:ca:db:f1:d4:05:
3d:06:f3:5f:94:00:87:e8:34:8a:ad:4c:e5:cb:a2:
8c:77:bf:ce:16:31:b4:9d:f5:e4:1d:db:f1:ee:40:
27:2a:32:02:e5:d3:ea:ac:f8:dc:74:b4:1a:5c:11:
75:6d:21:07:6f:06:45:25:e8:f2:88:41:93:dd:c7:
c4:c2:5a:04:28:7c:74:20:28:2d:d3:74:1c:b2:35:
0e:05:82:20:13:fe:b1:f3:9e:4c:e4:52:16:fa:6b:
de:ed:bd:20:37:51:e9:e0:39:50:de:e7:34:fb:99:
87:d6:1a:e6:5d:7f:6a:fa:51:0d:1a:38:a1:a0:88:
78:be:86:a1:c3:1a:26:da:f4:94:c2:a0:c0:4e:84:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:CD:30:09:A8:33:FE:50:26:2C:54:F6:14:69:AC:2F:37:94:B1
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/nffNMAmoM_5QJixU9hRprC83lLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.196.0/24
Signature Algorithm: sha256WithRSAEncryption
07:23:2c:29:d1:71:0b:f2:d2:a6:0d:d3:2c:77:51:79:68:36:
94:c9:da:69:4f:39:47:8c:37:7d:ff:f4:42:74:33:71:63:b2:
60:4f:ab:2f:3e:c6:87:2a:77:6a:22:78:8e:69:92:07:54:d3:
75:61:cc:2b:85:34:64:82:5e:75:67:7b:d8:a1:81:c3:ad:bb:
bc:ae:f0:ea:3c:fc:aa:f4:0b:24:89:75:ad:e9:11:15:33:ab:
0b:09:be:68:8f:1c:7a:3e:62:e8:dc:a0:c0:69:f5:00:f9:4c:
03:72:be:0c:55:f8:b4:b5:82:12:24:db:f0:bf:09:4a:6d:52:
aa:9c:0a:7f:1b:2f:f7:82:48:fe:36:5f:f5:ca:9d:4a:34:38:
a5:52:a9:86:44:c1:57:da:3f:60:33:07:af:db:3e:47:ac:8f:
09:a7:f3:90:92:81:51:65:10:8d:b9:7f:d8:c4:cb:0e:e9:31:
3f:92:c2:3b:9e:9f:66:c9:d7:39:d7:ce:d3:0d:7e:57:71:4b:
56:e3:59:4e:f7:b5:22:9c:92:c8:2b:78:d3:c3:7a:e0:e9:70:
3b:be:24:5b:bb:da:2d:10:35:c7:e9:06:df:27:c9:e4:df:44:
e9:bb:44:de:62:81:45:77:14:05:e8:c6:ff:c6:92:10:81:a0:
8c:a8:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org