Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NVv9APPsuYegSrtm2lNgILoFCaM.roa
File: NVv9APPsuYegSrtm2lNgILoFCaM.roa (raw, json)
Hash identifier: 1IJuaV/gIdLrmxJHO5EbReN5VFDrvjqmaQx5FtNHk3c=
Subject key identifier: 35:5B:FD:00:F3:EC:B9:87:A0:4A:BB:66:DA:53:60:20:BA:05:09:A3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01842501E6DF2898A2F05F4BE8441AF24A21
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NVv9APPsuYegSrtm2lNgILoFCaM.roa
Signing time: Sat 29 Oct 2022 18:29:52 +0000
ROA not before: Sat 29 Oct 2022 18:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212477
IP address blocks: 45.141.200.0/23 maxlen: 24
45.141.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:25:01:e6:df:28:98:a2:f0:5f:4b:e8:44:1a:f2:4a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 29 18:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=355bfd00f3ecb987a04abb66da536020ba0509a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:e3:f5:ee:4e:0b:2f:75:90:55:b7:aa:2b:
71:18:1f:37:2a:11:f7:e8:f1:ae:00:2e:dc:f4:c9:
c9:d2:f9:ff:70:b3:b5:48:d7:27:ec:38:92:66:08:
ac:76:fd:c7:f4:42:f4:7a:5d:06:8a:e1:ef:dd:50:
2b:5f:99:59:62:55:0c:e5:b3:e4:7f:87:54:54:16:
85:1c:aa:19:9b:fb:14:53:71:11:02:86:4f:08:78:
b7:c0:a2:fd:81:81:1b:23:97:ae:b7:3c:c4:da:4d:
50:92:3c:d7:d2:10:1e:41:03:00:21:c2:e1:90:c7:
1e:9e:e2:06:17:40:ca:f3:45:a1:87:20:f4:90:6a:
78:31:a1:15:33:23:18:48:9e:49:cb:b3:1e:ea:20:
91:a4:22:8b:08:52:44:59:8c:08:b4:b6:7b:6f:95:
40:68:bf:6c:55:7e:58:5a:16:5d:c6:7c:69:c7:1c:
9d:e3:78:6a:38:a8:62:fe:9d:fe:5d:42:02:20:57:
9f:1c:0a:d8:4d:fa:18:a9:ba:f2:f9:91:f4:6b:96:
2e:ff:93:51:13:bd:ff:3a:6e:ed:72:51:07:83:52:
bc:3f:ef:1e:57:aa:60:cd:fb:89:8b:18:f5:9b:5c:
17:5d:af:16:bb:47:60:4f:ef:6d:ac:e6:81:9a:52:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5B:FD:00:F3:EC:B9:87:A0:4A:BB:66:DA:53:60:20:BA:05:09:A3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NVv9APPsuYegSrtm2lNgILoFCaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.200.0-45.141.202.255
Signature Algorithm: sha256WithRSAEncryption
64:24:08:d2:80:fb:d8:09:51:35:ca:3b:cb:0a:8f:7b:19:77:
f7:ae:36:6f:d8:12:0e:fe:92:65:37:c2:f1:68:bf:51:15:d6:
70:e1:6b:02:72:a1:87:b7:7d:c6:3f:84:4f:16:ec:fe:82:af:
06:42:7b:61:6d:38:66:49:a7:30:cf:f0:13:b5:87:51:8b:fc:
b2:cb:7d:15:03:7d:31:2c:2f:ae:c6:9c:ce:c4:0a:3a:0d:11:
49:d3:6f:48:fc:c4:e4:77:87:08:8a:36:c8:49:86:c3:f3:e0:
07:f4:7e:4c:42:a9:84:dd:63:df:1e:86:9d:61:4a:b7:f0:02:
20:35:f6:23:94:49:2b:61:3e:c7:2a:f5:5d:ea:c7:de:9a:62:
b2:24:eb:e3:75:06:55:ae:53:af:2e:8e:68:9f:30:1e:58:05:
a1:7f:6f:66:94:a9:95:cd:92:09:b5:0b:b3:e9:64:93:80:6c:
46:a2:51:10:04:68:da:ab:40:5e:57:3e:b2:73:58:bd:7b:92:
8c:eb:26:83:69:42:c7:25:b2:01:91:25:78:b0:e8:e5:99:6e:
1c:0e:87:2b:d2:b4:c7:31:4d:bd:52:17:6e:c3:ba:46:d4:96:
84:ae:e2:3b:30:b3:9b:4f:c4:ee:6d:1a:43:93:af:19:9b:d2:
dc:f4:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org