Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NblG-2fJmUk8SYIPA4tVrfCgn4E.roa
File: NblG-2fJmUk8SYIPA4tVrfCgn4E.roa (raw, json)
Hash identifier: Cqerz6m8rNTP6A0Xe2uyqQerjz7R/+YDenaCEcfqMYg=
Subject key identifier: 35:B9:46:FB:67:C9:99:49:3C:49:82:0F:03:8B:55:AD:F0:A0:9F:81
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018340B487C5FAC1E0450A60B9224BC747E6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NblG-2fJmUk8SYIPA4tVrfCgn4E.roa
Signing time: Thu 15 Sep 2022 10:31:56 +0000
ROA not before: Thu 15 Sep 2022 10:31:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135375
IP address blocks: 88.209.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:b4:87:c5:fa:c1:e0:45:0a:60:b9:22:4b:c7:47:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 15 10:31:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35b946fb67c999493c49820f038b55adf0a09f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:33:9e:b6:68:40:20:35:70:7d:65:59:bc:
cb:85:d3:9f:56:a9:16:4b:66:b1:79:08:63:bf:4a:
66:01:45:e7:7c:47:e1:61:8f:0c:a4:0a:5a:93:3b:
2d:f8:a4:d0:b5:4c:ca:84:95:16:b6:35:a2:59:f1:
0b:40:25:6d:56:e8:03:51:b1:05:dd:68:0c:00:45:
20:4e:6b:ed:7b:a9:70:32:74:47:f1:b5:86:fc:50:
7b:35:c3:db:d0:20:ea:5f:6d:c3:16:24:76:94:fb:
14:bb:fd:b3:3c:34:11:f0:1a:94:cc:5e:0a:91:b1:
df:86:0e:49:03:07:56:d6:91:71:d7:c8:7d:97:38:
45:0f:79:65:64:05:31:65:04:3a:4e:22:ae:08:e0:
02:aa:d0:8f:95:33:34:7e:bc:c7:aa:76:bb:ce:30:
b1:63:bd:60:d9:1f:4d:b5:04:8d:f4:f2:a0:00:03:
61:19:32:da:88:b5:fb:ae:79:88:0b:69:66:07:f3:
a6:dd:26:00:91:14:b6:ca:ee:c8:c0:7d:3d:cc:f0:
5e:59:24:07:c7:1f:6e:44:16:d2:1a:b4:32:b2:09:
d5:a5:a7:f7:f8:fe:96:73:12:e7:c4:bb:45:f3:65:
e2:2a:ff:77:97:20:a1:5e:60:25:b6:bd:09:fd:0a:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:46:FB:67:C9:99:49:3C:49:82:0F:03:8B:55:AD:F0:A0:9F:81
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NblG-2fJmUk8SYIPA4tVrfCgn4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a0:22:b7:76:17:85:06:7c:7b:95:ff:d7:03:6f:ae:58:4d:
75:5c:89:f9:9f:f8:fe:3b:b4:d0:84:f9:e9:a7:87:9e:68:50:
10:a1:b9:f8:98:f4:82:60:76:5f:f8:b7:4c:f9:6a:43:01:6a:
5f:0f:86:b6:dd:74:65:13:e3:6f:7a:02:94:b3:e2:32:20:22:
76:2a:c9:6c:98:9d:93:d8:f1:99:23:c4:b1:94:30:b2:73:cb:
a4:40:7e:97:3f:be:ea:ee:06:4f:00:52:dd:75:5a:44:98:35:
78:89:c6:7a:9b:74:cf:24:56:8f:38:7d:d3:0c:d8:5e:34:93:
e9:64:02:b0:06:08:9d:93:e9:b1:da:44:04:b9:63:72:f1:06:
93:c1:7a:66:52:f8:fd:d0:48:ec:7a:64:6f:a9:33:67:fd:40:
b3:1e:aa:f3:8a:c3:6e:80:3f:96:39:f3:f1:35:f4:20:9b:f4:
a5:6c:c5:48:e6:d7:35:d5:6f:96:d5:a4:e9:ba:af:98:a6:d3:
57:2c:f9:ba:a8:5a:f0:ec:77:51:b8:02:9e:a2:40:03:93:04:
1c:f8:cf:6f:4f:1c:b1:15:ac:25:19:d8:df:17:1c:eb:3f:06:
ce:d2:d8:da:b4:ff:94:b4:2c:22:13:28:39:cd:62:9e:86:4d:
c4:d7:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org