Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/NsRpl57KUvdZQR3VR0rFtbjEEAc.roa
File: NsRpl57KUvdZQR3VR0rFtbjEEAc.roa (raw, json)
Hash identifier: BLpDUn4a7wmmw4Qvy4TjVUXSteLSFl/MvZdtO6WOv58=
Subject key identifier: 36:C4:69:97:9E:CA:52:F7:59:41:1D:D5:47:4A:C5:B5:B8:C4:10:07
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 02674EB4
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/NsRpl57KUvdZQR3VR0rFtbjEEAc.roa
Signing time: Sat 01 Jan 2022 15:03:51 +0000
ROA not before: Sat 01 Jan 2022 15:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43959
IP address blocks: 45.95.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40324788 (0x2674eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 15:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36c469979eca52f759411dd5474ac5b5b8c41007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:3a:71:49:9e:f2:86:99:7c:c6:20:09:1b:
8d:8b:18:98:07:78:d4:67:44:cd:b4:44:a1:41:92:
34:6d:78:95:39:8b:70:f2:2f:26:ea:ad:45:a9:a7:
37:71:1c:df:19:fc:1b:0c:3e:a6:5b:f8:2c:69:54:
50:cf:7c:dc:02:6d:71:d1:56:d2:54:2b:36:1d:b5:
7b:d7:c2:d7:89:3c:78:f2:ff:06:9a:bf:9e:c9:b4:
bb:83:90:f9:0a:db:75:dd:a1:11:6a:f0:8e:83:98:
49:89:45:fe:7a:0c:65:51:27:ae:d0:00:5b:55:0b:
a1:a6:54:d5:72:1c:41:9c:da:e6:78:0f:de:88:d0:
62:9c:c4:02:cf:23:20:d4:6e:19:4a:af:c6:5b:89:
ec:30:5c:e7:b6:4e:e1:f1:ba:42:72:aa:b0:dc:8e:
22:dd:60:a9:35:04:b9:8d:6a:46:f5:0c:dc:2e:22:
9e:74:d3:67:c8:40:3a:0c:a2:bb:35:6e:ed:25:b6:
b6:b2:6b:dd:1d:74:66:e5:86:ce:78:b2:c8:4a:88:
69:dc:95:39:78:97:d1:83:63:a6:71:96:5f:54:39:
89:84:53:d2:ba:58:0b:04:d4:03:f8:2e:1d:fe:9b:
f4:d6:ef:29:cb:f4:61:1b:ed:8f:05:23:aa:79:da:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:69:97:9E:CA:52:F7:59:41:1D:D5:47:4A:C5:B5:B8:C4:10:07
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/NsRpl57KUvdZQR3VR0rFtbjEEAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.224.0/24
Signature Algorithm: sha256WithRSAEncryption
90:05:ea:e1:a2:7f:f4:a3:93:d2:4f:d6:e0:4e:63:fd:df:36:
ca:80:e0:67:ea:c7:55:c3:1c:7a:e0:34:4b:35:ee:01:df:27:
61:18:1f:5b:60:52:9e:3b:dc:04:5b:8f:a3:d9:bb:ec:61:fd:
30:e5:9d:78:a5:37:5a:96:99:1b:39:5d:c5:f3:e0:4d:0c:dd:
8c:71:d5:73:d2:e8:7d:a4:05:56:05:0a:e8:56:af:09:c8:d1:
7a:bf:42:04:f9:47:24:5c:63:71:a8:48:94:79:6d:b2:8a:66:
6d:33:37:3b:97:4d:3d:dd:04:c4:67:15:5d:fd:45:fb:ad:53:
fa:0c:6a:c4:59:29:80:f2:1a:06:fe:a2:f9:a8:a8:c5:89:80:
86:ee:03:f5:5c:74:77:e4:f7:0f:e3:6a:34:b0:aa:e9:73:4a:
fb:58:86:b7:33:9b:df:1c:95:e6:d4:86:e8:2c:cd:d0:bb:5a:
ca:9f:26:98:33:41:92:b0:f9:d4:52:bc:fd:ed:0a:54:2f:b6:
ce:65:96:1b:7c:e5:0d:a6:e8:39:a4:e2:94:b3:5a:31:67:11:
d5:37:9f:31:8e:66:36:38:87:21:f7:c2:a9:79:f6:2b:e3:2c:
3a:9c:09:e6:11:d2:c1:15:53:d3:86:8f:19:c4:78:b2:46:95:
0b:f8:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org