Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/NIvem_a2FOv2bhUsjBjFHRaUSoI.roa
File: NIvem_a2FOv2bhUsjBjFHRaUSoI.roa (raw, json)
Hash identifier: FJ+nXoIiyXx5cYvvc+QkCIRqA9EPgkJgeMMTdjFEOII=
Subject key identifier: 34:8B:DE:9B:F6:B6:14:EB:F6:6E:15:2C:8C:18:C5:1D:16:94:4A:82
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 01F738E3
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/NIvem_a2FOv2bhUsjBjFHRaUSoI.roa
Signing time: Sat 01 Jan 2022 04:04:11 +0000
ROA not before: Sat 01 Jan 2022 04:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29479
IP address blocks: 194.126.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32979171 (0x1f738e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Jan 1 04:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=348bde9bf6b614ebf66e152c8c18c51d16944a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:46:b7:cf:bc:67:49:2e:a0:ed:5e:2d:a4:
c6:83:7b:1e:04:51:66:bf:11:3a:c6:9e:76:3f:25:
d2:6b:dd:04:59:43:01:04:30:62:a7:90:97:75:eb:
d0:bc:46:f5:df:4e:27:10:0c:1e:8c:5e:7c:d3:3b:
c1:c0:b5:10:b3:1c:19:a5:4d:81:a7:f5:80:af:96:
44:56:f0:d6:5c:45:64:12:ff:c6:3e:c4:cd:a2:c3:
9a:50:ea:09:e2:e6:53:d2:2b:a3:e0:c4:ec:cf:cb:
e2:88:cd:14:28:bb:c2:1d:77:9e:fd:04:15:ff:32:
5d:81:2c:b8:c5:05:d6:c0:08:b7:c3:a0:c8:6c:80:
3e:66:98:28:93:db:02:09:36:22:70:d5:57:46:af:
fc:cb:fd:53:db:b6:23:92:74:83:16:79:16:68:ca:
ea:0a:41:b8:9b:55:c9:6c:3f:7e:9e:b2:e8:dd:76:
97:38:b9:5e:75:46:80:cd:cd:58:e0:7c:77:41:0d:
2f:06:d7:a8:bd:fe:b4:fc:4b:47:8c:d2:59:cb:7c:
9b:e1:78:62:d5:ac:0a:5a:55:5c:44:e0:b7:07:04:
60:f1:6a:6f:40:b1:00:1d:81:00:07:02:74:22:29:
05:4c:9f:4c:e2:02:75:3a:15:4b:7b:f6:2f:41:6f:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:DE:9B:F6:B6:14:EB:F6:6E:15:2C:8C:18:C5:1D:16:94:4A:82
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/NIvem_a2FOv2bhUsjBjFHRaUSoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.211.0/24
Signature Algorithm: sha256WithRSAEncryption
12:13:63:2c:eb:e7:bf:8d:91:2f:fe:33:1e:b2:0a:aa:1e:52:
8d:12:2d:2f:d2:65:3d:88:6d:ee:a7:e8:74:ba:4c:bc:0d:f5:
6a:14:e4:d6:4a:58:29:7b:23:d4:6f:67:d5:f4:24:8a:45:68:
eb:b2:b1:9f:4b:3c:72:69:33:95:6f:7e:db:8b:f3:65:54:67:
03:6c:76:d7:8f:03:72:49:a2:ab:15:9e:58:2f:2e:00:4d:96:
37:1f:18:28:3b:05:e0:1b:1c:c5:c0:5f:15:cc:b7:7e:e8:ef:
1d:e7:a4:d8:9b:66:e5:d9:e3:66:b1:1b:06:f7:7f:71:32:75:
e8:47:79:bf:c0:07:97:c1:d5:33:3c:90:fc:be:6f:f0:db:83:
ec:87:68:66:d2:61:ef:27:08:87:f4:a0:71:31:b4:54:78:a8:
bf:27:b4:76:b9:26:f4:c0:55:fc:cf:70:0e:9c:6a:10:4b:05:
74:6f:3b:c0:74:f7:ac:fa:5c:17:22:36:26:ff:8a:70:8c:26:
6f:dc:ca:e1:8b:a2:5e:ad:67:d0:41:d8:de:55:cb:14:8c:a6:
0b:34:8c:4b:3c:fb:a5:44:bb:07:40:b3:ae:fa:34:cd:d5:9f:
71:42:bf:05:c3:fb:de:86:3c:f1:7c:2e:13:b4:e1:a4:4d:9d:
e9:c7:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:11 2024 by rpki-client on console-fra.rpki-client.org