Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/nlTOqOQcMEML5li_j5Wdb2FwP5U.roa
File: nlTOqOQcMEML5li_j5Wdb2FwP5U.roa (raw, json)
Hash identifier: C6aADgGFPzRv16VNh8xzC6Qv6MVMnoHlrl43h0NaM08=
Subject key identifier: 9E:54:CE:A8:E4:1C:30:43:0B:E6:58:BF:8F:95:9D:6F:61:70:3F:95
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01824FF836C19BDC2FC368589B104E46586F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/nlTOqOQcMEML5li_j5Wdb2FwP5U.roa
Signing time: Sat 30 Jul 2022 16:37:23 +0000
ROA not before: Sat 30 Jul 2022 16:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 91.186.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4f:f8:36:c1:9b:dc:2f:c3:68:58:9b:10:4e:46:58:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 30 16:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e54cea8e41c30430be658bf8f959d6f61703f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e9:8d:d7:6a:ed:c5:30:09:51:0a:aa:f4:67:
3e:49:61:79:23:14:84:a0:08:d7:31:25:e3:9e:2b:
dd:20:ad:87:db:79:55:67:88:45:bc:79:f8:2e:97:
0e:73:3c:93:cb:40:bf:4e:f1:f6:ba:d9:4b:45:0e:
ba:38:9b:56:82:b5:9e:2c:5f:37:45:9b:c5:31:59:
e0:c4:43:9b:c4:4e:1a:f5:13:d0:49:ea:d1:e2:61:
7a:49:42:09:a3:e8:68:ab:0b:f6:33:a7:4e:a2:10:
bd:54:e1:69:14:b7:34:70:cb:6b:b3:27:b0:aa:c9:
7a:36:c3:6a:9f:2c:08:0d:a8:5c:1c:9d:82:bb:f9:
03:43:fb:9a:6c:15:3d:b4:66:6a:ed:41:65:58:61:
28:28:3b:44:f7:96:50:9e:44:44:f4:3a:a1:1a:21:
5e:88:b3:85:05:05:5f:bd:0e:2e:78:f6:69:7f:1e:
b2:c6:86:ea:c7:cc:4a:fb:72:2b:cf:0a:1a:4b:ea:
dd:ef:c2:53:37:b8:62:9c:3b:49:02:d3:78:18:b8:
9f:6b:50:8d:b2:cf:94:69:17:af:c3:dc:f4:02:9c:
e0:fb:69:0d:19:82:4a:a0:1f:c6:64:3c:8c:f3:5a:
39:c8:42:72:8e:8b:ce:59:1a:9b:f9:6d:69:05:cf:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:CE:A8:E4:1C:30:43:0B:E6:58:BF:8F:95:9D:6F:61:70:3F:95
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/nlTOqOQcMEML5li_j5Wdb2FwP5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
Signature Algorithm: sha256WithRSAEncryption
95:1e:02:03:3e:9e:63:9d:66:6f:f2:8c:89:d6:a4:41:d3:5a:
b4:76:ed:16:79:7b:eb:6b:f7:e8:aa:ef:c4:a7:47:eb:50:aa:
f7:5a:49:51:27:b4:27:db:8d:b8:50:c6:02:40:d0:f3:e2:24:
d8:0c:96:99:f8:24:38:fc:75:0f:7d:26:0b:3c:1c:5a:60:39:
1e:a2:a6:66:9b:3a:2d:4f:6f:dd:ca:4b:00:39:1c:e9:22:d5:
ad:6a:67:2e:07:cf:56:7c:e1:61:4f:2c:46:3e:3c:e4:6e:a0:
7b:c5:7c:bd:f3:38:d4:80:47:9d:b4:e4:7d:f7:5d:2a:06:66:
7b:e1:80:6e:ae:5d:97:16:e8:ac:3a:bd:71:a3:4c:75:92:20:
64:61:40:f7:29:2d:f6:a1:33:b9:44:da:03:a3:27:72:9f:18:
f9:73:b0:9a:45:05:2d:79:96:34:24:ec:0c:6a:48:0e:77:7c:
69:e8:f9:bf:19:57:e4:6a:43:81:21:43:94:0d:c2:ad:60:f5:
c6:a6:df:c4:41:24:0b:5d:8e:b9:b2:5d:ee:d0:28:6f:a1:f7:
ca:96:ea:2d:c8:fa:5a:c8:d4:40:30:52:cd:68:c8:48:e5:9d:
6e:9f:87:76:0e:bc:63:8c:85:6c:9c:fd:0c:57:d6:72:b5:c6:
88:a8:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org