Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/NF0t5KkgxxfK0iIzg-XHMwJK0YA.roa
File: NF0t5KkgxxfK0iIzg-XHMwJK0YA.roa (raw, json)
Hash identifier: BkFbOBiq0neZeUfhHMK3ns0zWHUXM2Wp48lD2wyRoJA=
Subject key identifier: 34:5D:2D:E4:A9:20:C7:17:CA:D2:22:33:83:E5:C7:33:02:4A:D1:80
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 15EA64C5
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/NF0t5KkgxxfK0iIzg-XHMwJK0YA.roa
Signing time: Sat 01 Jan 2022 11:05:13 +0000
ROA not before: Sat 01 Jan 2022 11:05:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205914
IP address blocks: 185.72.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367682757 (0x15ea64c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jan 1 11:05:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=345d2de4a920c717cad2223383e5c733024ad180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:05:95:f2:1a:33:55:35:e2:8d:7e:84:85:
e4:68:a7:f5:5e:a1:ca:39:2c:50:ec:2f:e3:67:65:
6a:a1:44:1f:c3:b6:0f:97:f1:a0:1c:0c:07:b6:e4:
b7:ba:1b:08:43:0f:ce:62:16:2b:9f:06:75:64:63:
9a:29:8d:eb:e0:ae:67:2f:c2:b8:c0:82:79:52:0e:
45:f6:83:4f:af:25:5f:53:1a:3c:ed:2d:34:a9:8e:
60:10:58:39:21:4d:3c:e8:26:c2:3c:b2:07:43:08:
9a:89:30:8a:c7:80:58:6d:a5:75:e0:f3:f9:e3:36:
cd:a2:b6:2a:ad:8a:04:4b:22:0d:7a:d7:91:7d:a9:
3f:8e:77:fb:e9:67:b4:6a:21:00:31:3a:a3:9a:02:
5f:39:ea:4a:b6:9b:3d:18:63:66:27:0d:38:25:ea:
ee:2a:e7:75:ed:a8:67:fe:a1:31:51:68:65:19:fc:
6c:1b:16:af:43:0f:e2:45:1e:ad:b4:30:0c:c7:7d:
8d:be:52:e7:41:d2:b5:dd:3c:af:c1:85:7c:a6:38:
bf:4b:d1:f0:a2:e4:60:78:1d:27:d9:78:f8:f4:5c:
ee:a2:11:ff:f1:5a:68:c2:fe:b1:fc:bb:52:25:ea:
38:40:f0:fa:c6:a3:20:70:70:50:1d:08:4c:34:3b:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:2D:E4:A9:20:C7:17:CA:D2:22:33:83:E5:C7:33:02:4A:D1:80
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/NF0t5KkgxxfK0iIzg-XHMwJK0YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.19.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a2:01:bb:19:e0:f7:d2:17:2b:c4:54:9b:32:b1:b7:ac:e0:
9e:c3:30:37:1c:c3:d0:81:4f:56:3c:b7:61:f6:4a:fe:05:f4:
c0:c6:91:fb:5e:32:7d:d2:2e:ed:fd:fd:f5:3c:05:1d:09:7e:
bc:bf:0b:cb:17:8f:3c:b7:e0:cb:4e:5d:56:13:67:c1:60:4e:
f6:1f:e0:49:23:d3:fc:5c:fc:98:b0:6f:94:27:5b:80:88:49:
33:4c:46:0e:82:30:27:68:a2:7e:75:f0:bb:b7:78:29:88:e9:
66:c2:4a:49:58:5d:47:28:11:f9:84:85:01:27:67:6c:17:09:
4a:5b:3c:29:f1:7f:0a:f1:80:93:64:1d:12:03:95:5d:08:d5:
3d:78:bc:c6:94:d2:68:4a:98:91:20:e9:5e:4e:2e:b8:6a:f1:
4a:2f:62:c3:98:0c:de:7c:8c:7f:9b:28:46:99:bb:fc:27:fe:
0b:6d:4f:ea:85:36:01:b8:9d:40:89:10:1a:bb:87:97:d1:56:
14:94:b0:40:c4:77:ad:c9:de:b0:3f:6b:bd:92:8c:08:54:3e:
46:74:be:74:33:81:e2:d4:da:4f:13:33:88:f8:76:f4:5e:3c:
f7:cf:8d:bd:8a:0d:a3:56:5d:d2:62:55:8c:97:67:22:cc:a2:
c6:4c:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-ams.rpki-client.org