Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/N7tt2JF6Y2Dpk8z6bMFS0QbqmLk.roa
File: N7tt2JF6Y2Dpk8z6bMFS0QbqmLk.roa (raw, json)
Hash identifier: +TxWJIdJ003rtTBw6FWHrw35dBL+cdyhChP/Bge26HI=
Subject key identifier: 37:BB:6D:D8:91:7A:63:60:E9:93:CC:FA:6C:C1:52:D1:06:EA:98:B9
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 3515065D
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/N7tt2JF6Y2Dpk8z6bMFS0QbqmLk.roa
Signing time: Sat 01 Jan 2022 05:58:44 +0000
ROA not before: Sat 01 Jan 2022 05:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208555
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890570333 (0x3515065d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 05:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37bb6dd8917a6360e993ccfa6cc152d106ea98b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:78:5d:09:7e:6f:a0:39:24:f9:d5:0a:b9:
30:9a:51:12:19:1b:5c:ef:6d:c3:d6:e1:26:cf:1c:
a3:75:23:47:0b:aa:d1:9d:1e:18:88:34:ca:bb:80:
31:33:d3:cf:24:f5:94:43:d9:1e:b6:c8:7d:73:b5:
8f:1c:5a:5b:53:14:d6:99:89:f3:19:ee:e0:19:5c:
d6:da:3c:34:91:22:33:08:33:02:26:ed:13:46:bd:
bd:02:a3:c9:1a:48:76:2a:d2:e9:94:e7:60:e5:31:
8a:35:a8:b5:44:92:bb:93:85:ad:51:21:8b:48:ea:
a9:8e:c8:f6:bd:04:f8:a7:1a:ae:ae:36:c9:bc:91:
ed:39:b4:13:f6:a9:72:09:d1:fb:d6:60:83:6f:73:
60:0f:f3:e2:62:d0:fa:b6:aa:b0:01:d9:ef:75:30:
23:6f:28:c9:c0:6b:e3:60:30:86:fc:fa:87:2f:16:
30:ed:0b:3b:d5:8c:20:37:13:84:b0:27:5f:72:4a:
d0:7b:dc:42:12:e9:ca:a2:ae:73:59:53:78:08:11:
55:51:f2:99:b2:28:94:b1:99:60:5b:90:b7:ca:75:
f0:0e:21:30:ad:07:60:ad:39:77:3b:01:c7:8e:d6:
e9:df:43:d3:f1:79:87:77:d0:6e:11:a3:81:99:fa:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BB:6D:D8:91:7A:63:60:E9:93:CC:FA:6C:C1:52:D1:06:EA:98:B9
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/N7tt2JF6Y2Dpk8z6bMFS0QbqmLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:a0:02:9e:f2:a9:db:09:5b:6e:51:99:52:f0:96:25:f2:d1:
85:cd:2d:97:bd:28:3f:bf:64:57:ff:d4:58:49:9a:c2:e5:bc:
9a:95:65:56:dd:d5:eb:33:60:fa:37:5f:00:0e:c2:10:30:6e:
83:e7:1c:42:64:22:e6:fc:ca:fc:b1:da:87:55:e4:05:73:28:
a2:a6:8c:a0:87:02:9b:3e:e8:8c:54:38:02:14:e0:7a:74:81:
8b:5e:61:09:f2:db:1e:e0:0b:97:09:ee:9e:b7:fc:19:d4:fc:
cf:37:a5:fe:42:dc:3c:b7:97:b2:c6:38:ad:d9:9b:d4:50:f2:
c4:86:d5:cf:c2:2f:52:8b:39:67:19:f3:60:64:49:e8:28:d9:
34:79:0e:5f:29:40:0e:60:5f:36:8e:23:f0:d0:fa:88:fd:c5:
d7:ec:56:a6:7f:73:6d:ec:ba:df:3f:d0:eb:97:e8:fd:f4:57:
e4:b9:9d:25:19:49:1e:4a:52:20:68:0c:e1:5f:31:02:9b:05:
62:09:dc:61:5c:89:14:e5:40:49:81:6b:ea:70:fe:c7:36:9f:
be:7b:28:db:34:1d:1d:cb:65:7f:fb:96:9d:a4:72:94:29:e6:
c1:1c:17:9d:e4:96:22:9d:4e:50:ed:17:32:f3:ec:b7:26:79:
7d:54:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org