Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/NKeMLdfS3AcYK22SCxFt0loyI4c.roa
File: NKeMLdfS3AcYK22SCxFt0loyI4c.roa (raw, json)
Hash identifier: 6EZmODHGQFkIGNGfi2aGLCvm2E92r3jIwPsLIKjZQcU=
Subject key identifier: 34:A7:8C:2D:D7:D2:DC:07:18:2B:6D:92:0B:11:6D:D2:5A:32:23:87
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 03E7D4B6
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/NKeMLdfS3AcYK22SCxFt0loyI4c.roa
Signing time: Sat 01 Jan 2022 06:03:57 +0000
ROA not before: Sat 01 Jan 2022 06:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207784
IP address blocks: 195.144.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65524918 (0x3e7d4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Jan 1 06:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34a78c2dd7d2dc07182b6d920b116dd25a322387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:42:2c:aa:6c:a6:e1:d3:ee:bd:b7:b2:7f:
4a:1f:63:f5:e6:af:bc:6a:3b:d3:1d:f3:cb:36:06:
19:6e:df:a4:f8:3c:a5:9c:3a:be:42:1b:6e:ee:cd:
ed:bf:ed:7b:1b:c0:a3:b9:f5:df:e6:2d:8e:4f:a9:
5c:be:7c:da:2a:12:c5:40:df:be:14:9e:ff:4f:6c:
26:c4:1c:af:11:ec:5f:dd:2b:81:74:6e:73:72:2e:
38:24:60:5a:90:62:c1:68:6a:22:dc:38:e6:c3:84:
14:10:6f:ec:a7:e0:43:cc:13:fa:08:dc:17:e4:d9:
2a:99:bc:1b:91:f4:c0:d1:f1:0c:77:10:00:5e:d4:
64:ae:02:7e:17:af:49:6b:c7:7a:0d:02:56:8e:30:
a3:0a:70:10:79:98:6a:83:7d:b0:41:81:05:26:8c:
27:f2:ab:f1:34:e1:28:a6:aa:40:c5:a3:ac:61:61:
25:f1:d9:ab:a4:43:3a:74:c3:14:86:68:5f:00:30:
f2:6f:0b:f1:e0:e3:b9:d1:62:3d:2b:41:03:b3:27:
cd:a4:87:fe:c3:c2:fc:cf:58:d1:c1:66:e3:4c:d3:
c9:17:e7:67:02:2f:fe:09:ef:ec:3b:b9:82:2b:56:
c7:11:49:67:29:48:ee:1a:36:ba:67:66:3e:f4:d2:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A7:8C:2D:D7:D2:DC:07:18:2B:6D:92:0B:11:6D:D2:5A:32:23:87
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/NKeMLdfS3AcYK22SCxFt0loyI4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.27.0/24
Signature Algorithm: sha256WithRSAEncryption
24:14:29:55:5e:3f:ed:d4:63:ac:db:35:63:a0:93:a9:ca:26:
ed:7f:b1:97:e3:95:5e:e1:bc:23:e8:aa:3b:69:78:f0:57:3c:
43:ed:12:55:f7:35:03:06:bf:29:b1:43:73:37:e5:39:d1:2f:
75:3f:2b:f9:a3:28:d9:27:39:a5:30:e4:33:ed:68:f1:e7:e0:
6a:51:2e:3e:25:5d:b6:5a:21:16:a1:17:5e:b7:f7:bf:5f:ff:
ce:0b:e6:85:03:69:e5:50:6f:c9:87:da:67:53:f1:b6:51:03:
e9:e8:5f:b5:16:63:5b:08:16:98:ac:ee:42:e1:cf:25:10:69:
b2:37:42:fe:a0:22:4b:83:ef:38:11:5c:48:8d:ba:88:5f:60:
3e:09:ea:ef:5f:72:54:bf:2c:18:0e:4c:e7:bd:41:5c:89:33:
24:2d:56:59:e5:dc:bc:90:d2:95:e9:c7:ef:a0:a8:71:0d:ff:
95:3c:b5:19:7a:b9:e1:46:11:de:bb:dc:1c:0a:c3:06:a7:a2:
bf:64:a6:61:90:4f:9a:ec:30:ab:98:9b:ee:83:1a:59:2e:d7:
a6:1f:df:dc:4d:eb:94:12:7f:17:de:3c:f3:d0:21:cf:b1:4a:
5c:a0:88:ad:d1:28:52:72:e1:55:89:d8:a4:06:8d:5b:c9:64:
72:5c:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-ams.rpki-client.org