Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/NwD5Byi2t8BPOg6hxtVLbIoxavE.roa
File: NwD5Byi2t8BPOg6hxtVLbIoxavE.roa (raw, json)
Hash identifier: eYNlwACPL3wUacHwb6Tpa1oXk5/hSHg9msmNUWktJn8=
Subject key identifier: 37:00:F9:07:28:B6:B7:C0:4F:3A:0E:A1:C6:D5:4B:6C:8A:31:6A:F1
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01598DCD
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/NwD5Byi2t8BPOg6hxtVLbIoxavE.roa
Signing time: Mon 03 Jan 2022 11:08:34 +0000
ROA not before: Mon 03 Jan 2022 11:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212567
IP address blocks: 141.98.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22646221 (0x1598dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 3 11:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3700f90728b6b7c04f3a0ea1c6d54b6c8a316af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:7b:05:61:46:6b:79:c8:53:a3:d4:c4:df:
65:95:12:5d:17:b4:9a:ee:70:39:a5:8a:30:20:46:
10:a1:99:ff:be:18:10:95:38:da:5d:6d:91:87:29:
25:39:17:78:b5:d2:1c:70:e6:13:89:61:0c:cc:b8:
cc:11:03:51:b3:ce:d1:53:c2:c3:b0:72:1b:88:a4:
6c:52:b0:8c:09:6c:d7:7d:c5:eb:89:3b:ed:66:df:
8e:d1:4f:2a:27:b4:34:f2:c1:42:ee:64:20:d9:1c:
7e:8f:46:d4:0b:ef:40:cc:60:44:4c:bf:3d:89:cd:
89:37:cc:fd:5e:4d:b5:31:af:d7:e8:ab:44:23:f0:
5e:cf:93:11:63:7d:13:5f:c6:6f:f5:ff:bb:4f:bb:
93:bd:b2:e0:8c:07:b4:11:69:27:2b:5c:1e:54:d5:
35:0e:c5:7e:95:02:51:38:dd:83:c7:6a:08:bb:ec:
86:86:b2:2f:7c:7a:ff:be:bf:03:73:54:dd:fe:2b:
8c:9c:f6:9b:4b:b2:92:a4:da:e7:33:92:05:4d:d7:
ed:f7:f4:b9:fb:53:b2:91:88:66:11:02:1c:0e:b4:
df:f8:80:c4:c2:17:50:1f:ff:55:90:cd:34:22:f1:
21:73:a8:db:bb:ed:e3:ba:f9:32:4a:60:8a:b1:c4:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:F9:07:28:B6:B7:C0:4F:3A:0E:A1:C6:D5:4B:6C:8A:31:6A:F1
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/NwD5Byi2t8BPOg6hxtVLbIoxavE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:49:71:c1:2f:99:64:20:df:15:44:9c:1c:f5:14:f7:70:b1:
07:e7:22:cd:35:65:b1:20:48:b7:72:9b:3a:d1:97:4d:ec:d9:
36:cf:bc:38:e3:aa:19:71:db:66:5f:aa:2c:4a:c5:64:e1:74:
d9:3a:f4:b1:9f:f0:53:25:de:fb:b2:ce:4f:fc:21:d9:fa:9e:
06:bd:3a:02:31:04:7a:ea:1f:f4:9f:a8:30:3b:ef:62:46:e8:
9d:68:81:1b:af:2d:92:fb:2a:cd:9f:c4:00:19:25:ee:9d:7e:
c2:33:45:08:76:f2:d3:88:81:f1:c7:57:13:d5:0d:2a:51:69:
83:02:16:06:db:d6:87:60:6a:60:9c:11:ce:20:8b:91:68:f6:
ba:3a:0f:ae:5b:8d:72:2b:22:5e:7b:ef:c8:8b:62:4d:d8:a5:
b3:57:cf:91:3b:12:f9:a9:8f:38:85:ae:87:21:ca:04:20:22:
c6:b9:c4:d0:9a:d8:39:ef:8a:68:34:de:d2:37:24:ab:c0:e8:
b1:62:60:a6:1e:3b:0c:e6:97:06:c4:83:44:e9:e3:92:fd:80:
5e:7f:64:f1:58:ec:14:75:9f:96:99:bc:b3:c0:e3:d5:1f:99:
da:63:23:7c:c1:6d:68:6a:78:a4:73:e6:d5:8d:a3:02:66:b5:
a3:07:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org