Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/4_NbMmyEFuQTWyiA9rIAW6Um-Uw.roa
File: 4_NbMmyEFuQTWyiA9rIAW6Um-Uw.roa (raw, json)
Hash identifier: h4+nGIdmh/ezZPQjCBnhCrfcGAAAhMSkN/1z4swCJxQ=
Subject key identifier: E3:F3:5B:32:6C:84:16:E4:13:5B:28:80:F6:B2:00:5B:A5:26:F9:4C
Certificate issuer: /CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Certificate serial: 0181F46A8C29BEC3EFD482F89CFEAC2DF589
Authority key identifier: F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/4_NbMmyEFuQTWyiA9rIAW6Um-Uw.roa
Signing time: Tue 12 Jul 2022 21:57:12 +0000
ROA not before: Tue 12 Jul 2022 21:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 194.69.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:6a:8c:29:be:c3:ef:d4:82:f8:9c:fe:ac:2d:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Validity
Not Before: Jul 12 21:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3f35b326c8416e4135b2880f6b2005ba526f94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:66:b9:85:9f:9e:ef:9e:71:b2:6e:e1:43:
8d:21:09:40:e4:97:7a:fb:f4:a0:e3:6e:86:35:a6:
77:d4:ab:19:fc:c6:98:b3:58:84:f5:83:86:c9:71:
e8:1f:22:1c:32:2b:c6:b8:c0:bb:9e:e5:82:0a:c6:
12:a8:21:24:2a:ad:b2:ed:fc:74:9b:89:4d:30:2b:
8d:4b:92:1b:43:2e:74:42:17:58:df:eb:55:03:cf:
9a:57:6e:44:51:a8:70:4b:c5:42:7f:ca:ef:d1:66:
39:ab:e1:99:ec:5f:77:c0:b8:05:0f:56:e8:21:03:
7d:0b:92:b8:a7:70:5c:8e:a2:41:c1:8a:29:01:a9:
46:fe:dd:49:48:1e:20:9b:bd:04:47:88:d2:6f:8d:
91:d4:fd:0f:f9:51:25:86:99:c9:a2:92:71:7f:d6:
92:d1:ff:59:95:d6:1e:4d:92:08:5a:18:64:c6:71:
7f:cb:eb:13:19:b2:9d:e8:d6:9e:e9:1e:59:2a:90:
e7:c5:f1:94:25:a4:46:65:aa:08:52:56:cd:fa:ed:
14:5f:e7:76:e3:69:45:28:18:db:7e:68:07:88:e7:
8f:33:b8:c2:b1:67:55:c1:d3:08:2d:5e:35:fd:78:
ba:c4:e4:1d:89:82:4a:74:f8:86:f7:69:66:8b:60:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F3:5B:32:6C:84:16:E4:13:5B:28:80:F6:B2:00:5B:A5:26:F9:4C
X509v3 Authority Key Identifier:
keyid:F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/4_NbMmyEFuQTWyiA9rIAW6Um-Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.164.0/24
Signature Algorithm: sha256WithRSAEncryption
20:27:1c:22:4d:70:48:e2:1a:45:a4:65:0b:06:4d:0d:f0:1c:
32:fc:b0:9a:c4:ad:95:18:7d:eb:88:df:2e:8d:d6:7f:44:2c:
34:dc:db:b0:85:da:ff:e6:b2:ac:c1:25:89:f8:18:4c:0b:ca:
14:3d:ce:d1:c8:5b:89:2c:3a:82:7b:98:66:78:1f:1b:9f:15:
51:9a:4f:f0:04:3b:fb:b2:58:25:9c:e3:03:d8:ca:4e:6a:fc:
c2:a0:b5:80:0a:cf:69:0f:f0:ee:89:1f:3c:4a:77:0e:02:2d:
0a:f4:d8:67:f7:42:7d:ac:95:dc:a4:04:5f:06:b3:c1:6b:5a:
f9:a9:db:0a:c2:0d:3b:7e:63:d1:60:a3:a0:23:fd:fa:fd:21:
55:bf:b2:13:32:b6:ca:e6:a5:a4:10:e8:56:5a:55:cc:c7:58:
14:40:3b:87:12:af:de:23:c8:0b:86:67:30:8d:a0:f9:5f:21:
01:b6:7c:7b:53:9a:ff:d0:da:11:a1:ee:f5:5f:14:37:ce:eb:
0a:a6:00:2d:e5:20:86:01:3e:5e:d5:e5:c4:fd:1b:f5:29:3c:
48:df:94:76:aa:b4:5a:72:a0:3d:27:3c:bb:77:57:c7:d9:d7:
9d:15:8e:55:4f:3c:6c:c7:a0:49:82:9e:34:1b:39:86:91:6f:
f3:9f:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:53 2023 by rpki-client on console-fra.rpki-client.org