Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nyJlL8xNq3Z3DUXqx66d5ahvxlk.roa
File: nyJlL8xNq3Z3DUXqx66d5ahvxlk.roa (raw, json)
Hash identifier: TRBm5Bp7SmqKANCBRO9UaV5Q6ZzQzNeYCTw9A5yxapI=
Subject key identifier: 9F:22:65:2F:CC:4D:AB:76:77:0D:45:EA:C7:AE:9D:E5:A8:6F:C6:59
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0E7F935E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nyJlL8xNq3Z3DUXqx66d5ahvxlk.roa
Signing time: Wed 22 Jun 2022 10:27:32 +0000
ROA not before: Wed 22 Jun 2022 10:27:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 45.130.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243241822 (0xe7f935e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 22 10:27:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f22652fcc4dab76770d45eac7ae9de5a86fc659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:7e:e6:fb:db:e2:ad:8f:6c:1d:58:bc:61:
08:33:cf:31:7b:b4:db:05:6f:c9:73:52:69:57:c6:
af:28:c1:e7:06:60:65:d4:f2:aa:0b:ed:47:c3:d3:
ad:6f:08:95:ef:02:df:83:94:9d:5a:0f:92:be:31:
be:97:a6:fe:54:9e:6e:55:2e:f5:d3:63:c6:25:fc:
d6:26:91:28:61:26:a8:c3:c3:e2:91:4b:b3:36:87:
4d:37:08:f1:82:f3:bb:fc:f0:4c:1e:18:bb:4e:7e:
dd:6b:27:dd:a5:a9:81:12:ac:9f:e1:b3:ad:34:24:
27:06:26:80:30:28:64:e6:60:a9:cf:77:9b:86:7d:
4f:40:f0:ca:8d:88:f5:e0:8f:1c:91:e7:3f:cb:19:
c4:24:d5:7e:bf:6d:fc:7d:da:43:b1:2e:45:dd:0b:
73:07:19:6c:90:a7:d4:cf:b6:2b:d4:4a:e1:c8:9f:
f2:8e:74:6a:fc:bd:e3:90:94:e0:6f:5f:e9:10:a8:
a2:f2:67:c9:c1:6a:94:1d:52:fd:64:22:bb:60:4a:
d3:a0:43:9c:f2:f6:d2:68:e1:2a:a5:2f:4c:f5:48:
d8:14:4d:6e:e6:87:b8:d8:01:55:8b:23:0a:e9:e7:
6c:67:53:13:5b:bc:8d:b8:b0:aa:93:0e:73:35:6f:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:22:65:2F:CC:4D:AB:76:77:0D:45:EA:C7:AE:9D:E5:A8:6F:C6:59
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nyJlL8xNq3Z3DUXqx66d5ahvxlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:01:3d:67:21:b8:9f:d5:80:46:04:6d:ce:be:df:46:7b:0e:
44:87:e9:d2:eb:45:e5:e0:f7:d8:16:cd:43:6d:78:95:b3:da:
00:d4:73:75:5a:a7:85:a6:fe:50:ab:17:4d:01:df:13:0a:ba:
3e:8c:29:50:5d:d9:10:8c:18:e0:9c:f4:f6:be:e0:ad:f5:9e:
58:e6:0c:c6:4a:b2:d4:64:ec:a5:3c:3d:47:4b:2f:44:04:30:
ee:44:ed:3a:63:73:12:14:18:ab:fe:7c:8c:f2:71:b8:01:17:
49:b4:15:f8:d5:82:e3:11:b4:e1:23:c3:9c:51:fa:41:36:5a:
9c:a8:14:35:74:88:e9:cc:4b:63:eb:47:96:31:c3:7c:61:aa:
c3:f1:53:ab:0f:4f:e8:4e:99:b5:f5:8c:60:6f:fa:f5:a0:d9:
ab:28:a1:1c:3e:b9:22:70:a0:99:dd:fd:9c:2f:4d:cc:e2:82:
21:ab:9a:16:7f:3f:c2:77:56:21:14:5b:e1:d6:ae:5b:8f:4c:
44:79:09:32:2b:f1:77:41:78:b8:32:a0:f1:42:31:97:c8:da:
ae:99:51:84:31:73:07:8c:61:1e:31:4b:98:db:44:da:2d:fe:
40:b7:ef:ef:22:cd:69:b0:55:7a:41:20:bb:07:73:20:c1:13:
fc:df:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org