Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/nQDJl1lEjDP_4v0hPr2jgn0S7SA.roa
File: nQDJl1lEjDP_4v0hPr2jgn0S7SA.roa (raw, json)
Hash identifier: zO28RyZaBd7/dK4DdhHZXUkmZ07dL5SB6SYiVjb0PG8=
Subject key identifier: 9D:00:C9:97:59:44:8C:33:FF:E2:FD:21:3E:BD:A3:82:7D:12:ED:20
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 0182675CAD440D092F56CF4EBE5825F942FD
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/nQDJl1lEjDP_4v0hPr2jgn0S7SA.roa
Signing time: Thu 04 Aug 2022 05:38:23 +0000
ROA not before: Thu 04 Aug 2022 05:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44863
IP address blocks: 185.93.185.0/24 maxlen: 24
185.93.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:5c:ad:44:0d:09:2f:56:cf:4e:be:58:25:f9:42:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Aug 4 05:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d00c99759448c33ffe2fd213ebda3827d12ed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:96:8e:19:07:f5:e4:9d:1a:02:86:49:55:
6a:82:7b:52:0e:55:43:ed:aa:61:5d:10:18:60:85:
23:7f:aa:aa:2c:d1:10:de:ca:e3:c8:5e:71:8f:e5:
a4:29:2f:95:cb:88:7f:85:46:3e:92:db:a9:f9:b8:
80:46:d8:f3:8a:58:72:27:db:48:c3:6b:60:69:dd:
88:be:03:bb:10:79:26:0e:d7:44:35:3e:5b:17:9c:
1c:85:ae:27:cc:53:cb:15:0b:af:c9:7b:6c:fe:2f:
fe:52:1b:1e:62:f6:e3:00:87:4d:7f:7a:87:12:09:
4f:bd:bf:32:6b:d5:3a:8e:f9:2d:e1:81:31:60:5b:
a8:d1:56:fc:76:d6:ff:5c:f6:b2:a6:5c:13:15:ea:
e9:af:4f:78:fd:2c:23:e0:e6:ac:06:a3:de:d2:fa:
62:20:a0:1b:f9:69:c5:51:5e:0d:c6:9f:1c:85:37:
04:6c:e8:1f:a6:bf:69:82:e7:e7:56:d7:9d:15:d3:
92:44:c0:90:4c:fe:fe:e4:d6:58:75:c7:19:ed:4c:
0b:da:3d:70:38:05:68:3f:6a:be:ea:58:07:d1:46:
e2:8c:2a:ad:28:10:9b:fb:af:3f:34:b0:05:01:35:
cd:e6:ee:4b:2d:02:1b:c1:7c:6f:09:25:00:e4:00:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:C9:97:59:44:8C:33:FF:E2:FD:21:3E:BD:A3:82:7D:12:ED:20
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/nQDJl1lEjDP_4v0hPr2jgn0S7SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.185.0/24
185.93.187.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e9:26:08:58:e6:dd:ed:d1:9d:c4:35:8d:48:01:6f:3e:c5:
bf:71:89:7b:26:10:ff:0e:9a:ad:bb:d2:4c:6f:47:3c:23:a7:
b4:eb:35:58:de:67:d0:e7:be:90:33:a7:83:25:3d:9b:0e:e6:
fc:c9:d5:36:33:1f:7d:9b:52:9a:2c:ca:b6:88:93:2b:af:48:
50:40:b7:9d:d1:15:d5:3f:e2:38:da:b5:81:35:82:2e:ed:59:
58:9a:1d:3e:be:56:2a:44:b2:3c:7d:70:a5:28:2a:6b:71:05:
81:9a:4a:6d:92:43:13:ff:5e:68:96:a8:9a:f0:98:4b:57:08:
a4:2a:af:ba:af:69:09:9a:30:2e:ec:73:62:e9:ce:ab:47:c5:
33:11:ab:3c:17:68:35:e5:c5:ba:32:0c:17:88:a2:9d:55:1d:
43:57:60:13:cd:86:ec:0a:79:79:13:d8:76:d0:21:ef:12:87:
01:47:7f:c1:b2:e0:52:0b:9e:d8:17:af:11:54:3f:24:46:26:
a2:5f:53:0b:6d:24:fd:65:8a:18:78:56:90:c8:1b:d7:49:17:
4e:3f:fd:3d:a2:08:03:89:c7:05:cb:74:34:c6:80:2f:47:88:
3b:df:b3:ca:88:3c:82:cc:de:1a:49:12:ba:8b:2c:2c:b7:84:
a7:0d:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:42 2024 by rpki-client on console-fra.rpki-client.org