Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/NFnryunmkmTQND-m6Zdm90K5y0c.roa
File: NFnryunmkmTQND-m6Zdm90K5y0c.roa (raw, json)
Hash identifier: 8YZilb9x9MVDH9B5fo6DnQNvnrCRAWslnKlivxjSKWE=
Subject key identifier: 34:59:EB:CA:E9:E6:92:64:D0:34:3F:A6:E9:97:66:F7:42:B9:CB:47
Certificate issuer: /CN=74f59301011c45af635634d2e53c0b08c2054e2d
Certificate serial: 01852A946400BD70A2DB57DC1A4F676B35C2
Authority key identifier: 74:F5:93:01:01:1C:45:AF:63:56:34:D2:E5:3C:0B:08:C2:05:4E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPWTAQEcRa9jVjTS5TwLCMIFTi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/NFnryunmkmTQND-m6Zdm90K5y0c.roa
Signing time: Mon 19 Dec 2022 13:30:46 +0000
ROA not before: Mon 19 Dec 2022 13:30:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 185.248.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:94:64:00:bd:70:a2:db:57:dc:1a:4f:67:6b:35:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f59301011c45af635634d2e53c0b08c2054e2d
Validity
Not Before: Dec 19 13:30:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3459ebcae9e69264d0343fa6e99766f742b9cb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:d0:73:04:a6:29:dc:8b:9e:30:94:ae:be:
8a:fe:71:57:4a:cd:6c:49:c3:c6:5b:8c:9f:26:fb:
5d:95:46:c3:e5:e7:be:fe:9f:8c:c9:ef:49:68:ae:
73:b0:6a:fb:35:0d:f2:e3:77:d6:9f:0e:bc:39:e9:
50:91:66:c2:f1:75:27:ca:e7:f5:f1:14:a8:48:96:
2d:9e:31:8c:4d:f7:22:ec:81:bc:2f:0d:54:45:c8:
58:9e:1f:12:5f:39:fd:50:ea:87:76:e9:96:96:5b:
18:f8:ea:6d:02:f5:e2:e2:54:1f:28:71:c0:8c:79:
d1:68:1d:af:96:18:b0:c2:5e:2a:b1:a7:86:f4:61:
0c:7a:cd:aa:d3:f4:ab:50:5f:34:55:c0:4f:71:d6:
90:2d:3f:0b:7a:3a:57:ea:f8:2b:b4:c9:91:1b:69:
df:4d:61:e8:a9:cd:b7:23:a0:07:6d:f7:af:23:43:
43:bf:c8:a1:29:32:84:e1:e7:ac:0d:a9:0a:58:c6:
5e:f2:cc:e9:7c:51:32:fe:f7:e9:95:35:f1:9a:99:
c9:ad:c3:a3:15:6f:3b:e9:c9:a7:30:3e:9d:2d:69:
c5:3e:ae:eb:52:64:39:48:bf:aa:fb:06:a3:9a:ad:
89:81:7f:ee:4c:d7:5e:7d:2e:8b:14:f2:3f:37:33:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:59:EB:CA:E9:E6:92:64:D0:34:3F:A6:E9:97:66:F7:42:B9:CB:47
X509v3 Authority Key Identifier:
keyid:74:F5:93:01:01:1C:45:AF:63:56:34:D2:E5:3C:0B:08:C2:05:4E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPWTAQEcRa9jVjTS5TwLCMIFTi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/NFnryunmkmTQND-m6Zdm90K5y0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ca945b-0e15-456d-8b90-5aa16e7a9989/1/dPWTAQEcRa9jVjTS5TwLCMIFTi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.144.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7b:2d:e9:2c:06:de:5e:e5:0d:88:70:d6:fa:1e:90:f4:28:
70:53:f1:dc:0c:bd:9c:66:30:f3:3e:9c:cc:21:70:f0:02:5e:
51:20:dc:d7:cd:b6:cc:fe:9f:cc:2a:f0:83:aa:14:e5:53:bb:
13:67:35:07:55:ef:9c:df:ec:03:63:37:4a:fd:f5:20:64:f5:
f9:b8:91:3f:8f:d4:5f:b7:19:ed:40:55:c8:44:c6:d0:98:ab:
bf:94:55:ca:c5:23:db:c1:fa:33:ac:23:94:a6:2a:c8:2d:8d:
ef:1b:38:cf:bb:01:c3:b4:dd:c5:74:72:ca:95:cd:ed:20:59:
f0:64:a6:15:4e:c2:c7:60:2f:ef:22:e7:62:04:a7:96:76:91:
d9:d5:02:e8:3e:20:6e:35:e6:de:9f:71:dd:b2:08:f0:37:d3:
a0:c6:27:49:4d:d7:93:bf:4e:ba:45:54:83:91:15:96:ab:31:
d5:c4:e5:48:1c:c4:31:e0:f1:e4:ec:75:4b:e8:81:29:0d:a2:
04:bb:24:7d:83:8c:2a:18:4c:85:09:44:75:69:86:14:9a:9d:
fd:d2:92:e1:e2:03:e6:2e:19:52:c2:ff:a0:fa:d7:1b:23:ca:
32:3d:ce:a1:1b:63:7e:d8:ce:9d:8a:38:7f:8e:f6:49:96:06:
a7:e4:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:15 2024 by rpki-client on console-fra.rpki-client.org