Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/ncV6CBkAf4yTAFN7QV7313lcPHo.roa
File: ncV6CBkAf4yTAFN7QV7313lcPHo.roa (raw, json)
Hash identifier: bF69VgCc5/Y8oTpx7SgzDvM/x6f72Djawrc6s8kZLY0=
Subject key identifier: 9D:C5:7A:08:19:00:7F:8C:93:00:53:7B:41:5E:F7:D7:79:5C:3C:7A
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 04FC7C6B
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/ncV6CBkAf4yTAFN7QV7313lcPHo.roa
Signing time: Sat 01 Jan 2022 00:50:54 +0000
ROA not before: Sat 01 Jan 2022 00:50:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213123
IP address blocks: 94.231.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83655787 (0x4fc7c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Jan 1 00:50:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dc57a0819007f8c9300537b415ef7d7795c3c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:08:b5:2f:b4:41:37:b2:5c:32:6e:53:62:
bb:37:6f:7f:8c:0e:4b:e0:7d:cb:40:45:ee:52:fd:
41:69:26:ab:5e:f2:12:bb:a8:5a:28:d7:77:c5:d8:
07:bc:e4:43:dd:6c:ef:28:aa:6d:84:92:4f:21:70:
4a:f9:b9:aa:a6:0c:12:38:36:7d:67:bd:b1:9f:a1:
2b:27:ff:ed:a5:b6:90:8d:2d:52:c4:9e:51:dd:5e:
4e:df:a1:a9:6f:36:7d:fb:3b:12:b0:48:9e:98:f7:
3b:d5:6f:ef:67:10:89:6d:44:bb:39:f5:70:62:c9:
b0:91:e3:1e:7c:fd:a5:da:94:66:bb:8b:56:f4:34:
5d:01:b0:d1:02:c8:5e:ff:94:97:d9:6c:4f:c3:70:
94:98:75:96:cd:de:8b:b5:b5:86:7e:3c:87:db:38:
5f:7b:46:2d:46:67:f3:90:45:6c:80:d9:d8:4f:54:
86:15:68:4b:36:13:e5:c1:41:98:56:a9:ff:98:4a:
e0:05:73:a0:6e:e4:4d:f0:8a:b6:da:d0:c4:33:2b:
bb:b1:d9:ed:7c:12:7e:59:ae:c1:8d:e2:32:2e:5c:
46:6d:51:20:4f:7b:39:72:9f:0e:f5:2f:0b:ce:d9:
ae:b0:73:fe:fc:26:cb:af:a7:52:53:df:bb:3b:c1:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C5:7A:08:19:00:7F:8C:93:00:53:7B:41:5E:F7:D7:79:5C:3C:7A
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/ncV6CBkAf4yTAFN7QV7313lcPHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.197.0/24
Signature Algorithm: sha256WithRSAEncryption
10:84:61:f5:45:f6:5a:7b:ab:2a:78:98:50:00:a6:e2:a2:24:
4d:e3:d9:0b:5a:fd:27:58:ec:58:be:1d:cf:0b:26:ac:20:fe:
79:de:14:cd:b1:4a:ca:3a:2b:7f:1e:b7:cc:99:83:04:cc:b1:
97:3e:db:53:63:01:aa:e7:4b:76:1c:67:fd:14:9d:b1:7b:4f:
73:40:29:73:8b:c2:9e:4a:a4:54:8f:9b:1d:34:69:fc:83:1e:
df:d7:97:e3:97:3f:b0:7c:89:de:70:c2:b9:8e:16:12:2e:75:
dd:8d:16:76:37:4d:43:0e:a2:a8:4e:48:fe:07:c8:86:71:24:
f8:29:ff:35:0e:44:97:b9:eb:85:57:89:77:78:63:59:3e:30:
13:34:09:a9:ea:d3:f4:c4:55:ef:08:f6:40:e5:4d:47:ba:c8:
21:0c:3d:3e:06:ed:88:19:4a:02:03:3b:1d:f5:c1:ec:c9:e5:
8f:1f:c6:b6:88:cd:38:06:70:b2:6b:29:ef:d2:9a:f9:a6:00:
f4:07:04:61:bd:4a:16:c9:10:34:9d:03:39:c4:82:2d:e1:c7:
50:a4:76:22:f5:42:5d:aa:bd:07:ff:41:1e:d5:69:a2:b2:ab:
2d:28:fd:8c:9e:47:c8:02:ad:66:8a:49:ad:4b:54:cc:69:f5:
e3:20:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:59 2023 by rpki-client on console-fra.rpki-client.org