Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/nlb14QHsjcI1ciisaReBcXhRwto.roa
File: nlb14QHsjcI1ciisaReBcXhRwto.roa (raw, json)
Hash identifier: jeF4lhawLDk85inyQOGiyunEVCTX27GCP5pFqjvNqO8=
Subject key identifier: 9E:56:F5:E1:01:EC:8D:C2:35:72:28:AC:69:17:81:71:78:51:C2:DA
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 028089FA
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/nlb14QHsjcI1ciisaReBcXhRwto.roa
Signing time: Thu 05 May 2022 13:27:39 +0000
ROA not before: Thu 05 May 2022 13:27:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 194.32.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41978362 (0x28089fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: May 5 13:27:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e56f5e101ec8dc2357228ac691781717851c2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:5f:f9:c5:c8:cd:e7:33:90:0c:4a:73:c9:
15:8d:cd:dc:fa:6e:e2:a1:5e:db:2d:38:75:c8:31:
b5:ed:2b:b9:57:3f:7f:e9:fa:52:4d:de:48:6f:50:
f8:dd:3e:99:40:cf:45:38:8a:5f:59:47:27:32:3d:
0e:10:ac:86:17:e6:04:15:2a:55:1c:11:d6:ee:1c:
bc:a7:3d:ce:15:3d:d5:94:0b:21:97:af:84:22:00:
c9:a7:ec:13:16:27:41:4c:3e:ec:c8:c2:52:af:9f:
23:a5:12:3b:d7:02:c9:f0:de:8c:ae:48:fb:70:4f:
23:16:ef:7a:e6:23:3c:e2:a7:e1:59:1d:6c:2d:a4:
c2:77:3c:0a:af:b9:0c:58:48:09:25:da:25:ee:e2:
89:a1:5e:3a:ba:57:8f:d1:45:a4:ee:14:0e:c5:56:
0e:d7:94:fc:a8:b1:3f:4e:89:c3:95:9c:43:de:cf:
78:12:5a:99:64:9f:18:5e:59:bf:50:7c:2e:a4:f8:
6a:95:7b:6a:0c:91:c6:68:ea:e9:ae:ca:3f:68:7b:
f4:f3:d6:7b:e0:e0:0f:2e:d9:60:2b:25:8b:56:9b:
69:5d:92:df:d4:10:ce:d5:97:48:92:eb:96:16:43:
8b:87:c1:29:cd:e9:87:52:61:7e:cc:24:c8:87:a0:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:F5:E1:01:EC:8D:C2:35:72:28:AC:69:17:81:71:78:51:C2:DA
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/nlb14QHsjcI1ciisaReBcXhRwto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fe:e5:07:8f:11:3f:09:0c:f1:4b:35:32:64:36:c3:a3:17:
d4:0a:de:44:3f:16:21:8c:c1:f6:05:04:19:b6:ef:34:7d:94:
13:cc:a5:26:6d:2b:ab:c1:45:d3:6e:9a:a2:df:e1:4f:49:b9:
1e:38:8e:f7:fd:bb:85:5c:ae:b7:3d:f8:9a:75:64:0f:a1:ac:
07:db:83:b5:d9:4d:14:1c:84:33:f1:06:3c:9c:3e:d0:04:6f:
9d:80:21:2f:e5:35:21:13:6e:cc:d0:b3:c7:c3:28:e7:20:77:
d8:b9:ff:a0:f8:87:3e:70:bd:12:34:11:91:ab:da:00:8d:00:
00:51:84:2e:a5:76:30:25:da:63:09:92:f6:2b:02:4d:5c:47:
0f:da:d1:80:c2:65:ec:5d:93:e9:ce:6b:b9:ce:57:62:ac:66:
32:65:d1:dc:c3:c0:ac:c1:17:93:ee:dd:d1:64:8a:43:be:93:
ae:be:02:25:87:7b:07:62:6e:cc:25:ba:f7:93:0e:25:23:61:
17:85:cf:3f:0c:4f:a3:ea:b2:b8:52:c0:c8:43:2e:48:01:6c:
eb:0c:08:5b:cb:b6:f5:2a:b5:c4:d1:e8:5b:98:58:77:12:46:
77:d4:c2:02:8a:2a:75:84:63:bc:41:86:c4:11:4c:35:8d:ee:
3f:91:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org