Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/NlQkSXaFexw1r5ngY9a7vkc7xk0.roa
File: NlQkSXaFexw1r5ngY9a7vkc7xk0.roa (raw, json)
Hash identifier: Us6sTU6p1j9SWvRuQqf2SI5un854RXZBHethlmngAj8=
Subject key identifier: 36:54:24:49:76:85:7B:1C:35:AF:99:E0:63:D6:BB:BE:47:3B:C6:4D
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0167EDBC
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/NlQkSXaFexw1r5ngY9a7vkc7xk0.roa
Signing time: Sat 01 Jan 2022 12:04:19 +0000
ROA not before: Sat 01 Jan 2022 12:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 195.69.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23588284 (0x167edbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jan 1 12:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3654244976857b1c35af99e063d6bbbe473bc64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:7a:9a:c4:0d:63:2f:95:50:ef:45:5c:80:
7f:6e:70:40:78:5e:11:07:16:ac:f7:46:5b:bb:51:
ef:4c:3b:74:fa:3e:0e:b3:ea:11:a4:7a:df:ef:d2:
ed:2c:fb:e3:85:6b:36:43:09:01:50:06:b4:d8:4a:
c8:4e:7c:31:f1:db:07:1a:b2:0d:ea:59:09:20:f3:
fe:f2:44:b6:ef:90:04:c1:3d:9c:a1:d2:b6:f1:ed:
45:8b:ca:0d:c8:37:d6:11:5a:e7:72:93:04:75:56:
72:7a:d6:be:78:f8:48:6f:1e:1a:53:b7:f6:fd:7b:
f8:af:b5:91:c1:7f:9e:a3:ec:45:d9:bc:61:7e:ae:
04:89:71:e6:6e:d0:f4:61:60:05:65:46:52:e5:94:
78:80:0b:1a:5f:c3:7c:bd:36:5b:d2:c7:7c:f3:45:
56:95:d7:73:db:61:55:67:8a:ee:58:f7:9e:51:f4:
a8:51:f2:a2:f2:e5:fb:c3:6d:ab:f4:94:bc:56:38:
b7:0b:86:68:8f:2b:24:b2:ad:6e:e0:4e:ed:a3:30:
a4:a7:5b:36:22:23:bd:4c:6c:d1:be:63:a5:8b:ee:
48:83:82:1c:78:e1:f6:9c:53:74:18:36:80:c3:80:
7d:dd:86:05:2b:46:9c:85:06:ac:d1:b4:c7:b6:14:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:54:24:49:76:85:7B:1C:35:AF:99:E0:63:D6:BB:BE:47:3B:C6:4D
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/NlQkSXaFexw1r5ngY9a7vkc7xk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.148.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e1:84:0a:7b:9d:0d:4f:48:30:20:f8:13:ff:bd:23:09:88:
ad:b6:e5:aa:4a:b1:cd:42:1c:8c:bb:34:3d:35:60:00:e2:07:
2b:e0:99:d8:a4:cd:41:16:35:0c:fd:c0:dd:76:27:c6:e3:03:
a1:58:2a:ff:8b:c7:9b:51:ee:2b:dd:66:66:13:4c:9a:64:42:
04:76:07:5f:7d:82:41:14:15:0b:c8:43:fa:37:37:1e:d5:5f:
a1:43:11:9c:97:1f:87:a8:6f:f1:8d:a4:02:73:31:5c:11:43:
94:fb:d1:65:43:bf:36:f5:bb:87:08:3f:64:d0:1d:4d:f1:2b:
d9:82:95:b5:17:f6:d5:e9:11:f8:ae:ac:60:d4:a4:78:ba:33:
28:10:71:63:01:7f:ee:70:64:4e:57:ab:79:e3:7d:08:c9:26:
cb:d7:16:c1:54:58:11:0a:a7:a6:6f:03:c8:f7:fc:75:60:f9:
7d:0c:ea:09:a6:bb:11:23:92:b3:4f:60:e8:5e:28:64:bf:6c:
a3:9f:a4:96:86:db:1b:06:f4:38:26:ff:52:81:ad:09:81:f7:
e9:9d:c3:a9:1e:d5:1a:3a:c9:24:43:a1:32:b3:63:8a:7b:97:
f2:5a:54:b1:29:b7:89:9d:dc:09:95:5b:d8:a4:ef:73:d6:42:
6a:7a:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:03 2023 by rpki-client on console-ams.rpki-client.org