Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/nmSc0ByBZ13_Q5_C-aHaVDj9X_E.roa
File: nmSc0ByBZ13_Q5_C-aHaVDj9X_E.roa (raw, json)
Hash identifier: x9HeMW1amGkTerrmG2S8NUHGotNYc0Cp9tFz6ZBaaJA=
Subject key identifier: 9E:64:9C:D0:1C:81:67:5D:FF:43:9F:C2:F9:A1:DA:54:38:FD:5F:F1
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 079B7E2A
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/nmSc0ByBZ13_Q5_C-aHaVDj9X_E.roa
Signing time: Sat 01 Jan 2022 16:05:11 +0000
ROA not before: Sat 01 Jan 2022 16:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198594
IP address blocks: 37.60.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127630890 (0x79b7e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Jan 1 16:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e649cd01c81675dff439fc2f9a1da5438fd5ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:65:ab:c6:06:d0:68:c2:7d:4c:80:f5:3b:
90:40:e0:d7:a2:d6:20:d1:71:66:e5:46:92:4c:0c:
2d:f4:89:fd:e7:a8:5e:ec:aa:3f:47:54:67:49:39:
1a:03:b3:2a:f1:ff:7b:eb:95:36:63:ed:8e:ca:57:
73:3a:66:70:96:08:83:75:e2:5a:92:ca:72:45:37:
8a:2f:16:dd:f5:f5:22:ad:a9:0b:b8:b9:76:d7:88:
fe:49:ed:a3:ef:0a:79:0d:43:03:bf:7a:f1:22:69:
ef:b3:e6:d5:2d:e0:89:6f:63:44:27:d7:b8:85:d2:
e0:86:92:3f:da:4f:6e:f8:0e:3f:15:74:3f:f5:d1:
72:c6:48:d6:79:25:c6:f5:65:55:27:2c:09:a1:d8:
37:98:9c:35:a1:ba:9f:c6:85:80:df:b7:7f:78:1b:
30:fb:7e:e1:80:27:35:a4:fb:0b:1e:b8:7a:33:9f:
f5:ee:6b:a3:1b:e9:88:f7:7d:a1:6d:b1:1a:59:5b:
98:3e:48:0c:0b:f4:a6:b9:68:ac:26:ae:8b:61:d5:
2f:0c:b7:24:e2:7f:47:a2:f0:f9:72:27:2d:c5:5e:
fb:69:29:56:9c:5f:95:7a:2a:7c:0e:5f:0a:5b:ab:
b0:90:2c:53:19:8a:48:af:66:14:4d:9a:e8:88:27:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:9C:D0:1C:81:67:5D:FF:43:9F:C2:F9:A1:DA:54:38:FD:5F:F1
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/nmSc0ByBZ13_Q5_C-aHaVDj9X_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.24.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:1f:f7:f1:c0:78:d5:25:55:c1:9a:41:be:9d:3a:f0:0a:9e:
17:72:96:9f:88:86:4b:f6:de:85:27:89:2e:f5:67:44:02:67:
c3:50:1e:c9:57:fe:cd:7c:d9:bd:ef:8f:3b:01:b5:bf:68:5b:
16:c4:12:bd:26:ab:37:c8:cf:93:35:8e:5d:79:1e:ed:a0:59:
09:40:8b:ea:2e:7d:2c:5c:4f:ef:a5:4d:e9:21:f4:df:27:a6:
15:78:6f:b4:d7:c6:97:83:98:01:1e:f0:1e:22:52:92:95:92:
70:39:95:cc:c2:75:ad:fe:6f:3f:79:1a:6a:ca:b9:54:ff:fa:
91:10:67:85:34:b5:eb:39:b3:d4:d8:5c:24:82:c9:90:a9:82:
1c:1a:cf:6e:5a:06:3d:1d:8d:ab:79:22:dd:24:28:fc:21:b8:
c3:2c:45:ab:08:76:4a:35:e9:14:c6:ca:25:79:e6:e8:07:a3:
28:01:c5:f1:3d:6b:f2:7e:82:0b:d6:f6:1d:38:10:e2:84:ae:
67:05:eb:99:f3:be:26:09:73:fd:c5:9e:47:27:f7:46:07:c4:
6b:e1:57:3b:76:67:29:db:00:d5:72:ed:cd:57:e0:90:05:61:
4d:9c:85:5e:b8:c0:9e:20:c5:c7:88:55:c9:9d:95:bd:88:54:
5d:a4:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:47 2024 by rpki-client on console-ams.rpki-client.org