Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/nOnFEst_eUfjQeK2A60GILnE0PU.roa
File: nOnFEst_eUfjQeK2A60GILnE0PU.roa (raw, json)
Hash identifier: 8nOG7AxOlTtUM39oH53PzrChOILdKYQtUuE530vqP2o=
Subject key identifier: 9C:E9:C5:12:CB:7F:79:47:E3:41:E2:B6:03:AD:06:20:B9:C4:D0:F5
Certificate issuer: /CN=b7ae676ffc66234f33db5238798ab979f986c82d
Certificate serial: 03F209C2
Authority key identifier: B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/nOnFEst_eUfjQeK2A60GILnE0PU.roa
Signing time: Sat 01 Jan 2022 00:55:20 +0000
ROA not before: Sat 01 Jan 2022 00:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202765
IP address blocks: 141.98.28.0/24 maxlen: 24
141.98.28.0/22 maxlen: 22
141.98.31.0/24 maxlen: 24
141.98.30.0/24 maxlen: 24
141.98.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66193858 (0x3f209c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae676ffc66234f33db5238798ab979f986c82d
Validity
Not Before: Jan 1 00:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce9c512cb7f7947e341e2b603ad0620b9c4d0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:2f:4c:55:4a:77:93:df:25:e3:c6:07:d8:
8e:2c:65:67:f5:67:99:0e:e9:01:73:b9:73:13:c5:
be:ed:60:57:57:1b:c6:9c:3d:86:38:cd:0a:5a:d3:
75:c2:a8:8e:7c:08:8e:8e:20:2a:dc:b6:37:3e:97:
65:3a:88:6f:3e:1b:92:9f:8f:3f:bd:16:2a:cc:18:
c8:e1:97:ce:82:d9:6b:0b:3a:00:e5:41:c4:3b:53:
8d:98:b2:c9:8f:3d:df:8e:9b:7b:6b:e3:ae:e0:d7:
27:00:37:00:ec:46:4a:c2:08:79:b4:e9:ac:58:4e:
48:d9:58:89:d5:03:03:5b:e2:0c:f7:3d:5f:2c:ab:
e3:08:dd:38:3d:c7:c6:ff:6f:19:af:ac:0f:5c:78:
2b:f0:f0:07:b7:0d:b3:48:ef:e9:09:37:3c:74:0b:
43:e9:73:01:c3:d3:f3:84:53:32:89:94:b0:de:be:
3b:69:e2:af:29:e7:77:0b:cf:e0:77:43:46:22:21:
d4:43:f1:0e:b2:a6:5d:61:99:d4:4c:f4:9e:df:bb:
df:13:98:45:d3:ee:5a:e1:69:60:5b:7d:ff:1e:a1:
73:a0:d3:a7:e2:d6:a3:cf:96:20:35:f6:46:c6:a4:
8d:32:61:e2:ac:5b:62:86:1f:fb:bd:41:90:4f:b0:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:C5:12:CB:7F:79:47:E3:41:E2:B6:03:AD:06:20:B9:C4:D0:F5
X509v3 Authority Key Identifier:
keyid:B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/nOnFEst_eUfjQeK2A60GILnE0PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/t65nb_xmI08z21I4eYq5efmGyC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:55:b2:d2:0c:5d:da:16:0a:b2:f5:ec:6c:21:37:f7:da:96:
f6:00:e3:fd:56:bb:23:36:40:9e:5b:fa:2a:a7:24:92:17:c3:
1e:44:d4:9d:bf:40:4f:7d:d9:2b:d1:19:05:88:13:48:88:a1:
ca:36:2a:e7:0f:13:58:2e:3e:36:08:58:79:0f:a4:75:3c:93:
d1:a7:48:a4:82:53:fe:a4:c4:30:a2:c2:84:94:08:5b:cc:0a:
e1:9e:df:c8:44:fa:07:47:18:01:e6:ad:ec:7b:33:e9:1c:fd:
1f:f6:21:db:d0:a7:09:37:3f:d2:48:0a:e5:49:92:dd:c8:f1:
b6:29:c9:92:b8:58:62:a4:42:32:7b:bf:95:c7:97:c8:8a:8d:
2a:05:b6:35:ef:42:49:e7:3b:9c:a3:ad:6d:ec:ff:b8:b2:24:
3b:ce:64:da:11:a3:63:1c:51:8a:e8:23:54:ad:48:3d:d2:d0:
35:30:77:00:9d:5b:bd:be:0d:da:ff:61:85:ab:be:d8:56:59:
41:85:32:ee:cb:fb:1a:c0:d2:76:1e:69:62:2c:cc:c9:24:d8:
2c:49:4f:f7:3e:24:8c:02:45:67:8c:1e:de:8e:d6:75:01:40:
e2:97:d0:db:ea:31:0a:cc:08:b9:31:bc:8b:91:c4:1b:b7:af:
19:c3:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:24 2024 by rpki-client on console-fra.rpki-client.org