Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/NsIZo0JV9DODqIb-yZjiiPAJmnw.roa
File: NsIZo0JV9DODqIb-yZjiiPAJmnw.roa (raw, json)
Hash identifier: ONGp0bDxA57OlOW8kcs+3C5J67LpDQkCeuB5DbsQn2o=
Subject key identifier: 36:C2:19:A3:42:55:F4:33:83:A8:86:FE:C9:98:E2:88:F0:09:9A:7C
Certificate issuer: /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Certificate serial: 042B4066
Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/NsIZo0JV9DODqIb-yZjiiPAJmnw.roa
Signing time: Sat 01 Jan 2022 12:58:34 +0000
ROA not before: Sat 01 Jan 2022 12:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202377
IP address blocks: 185.255.140.0/22 maxlen: 22
2a0c:6540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69943398 (0x42b4066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Validity
Not Before: Jan 1 12:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36c219a34255f43383a886fec998e288f0099a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:87:12:5e:93:42:51:9c:6a:e6:a3:3d:c7:
c4:f2:35:a5:b0:7f:c6:d3:44:d2:51:3c:84:be:12:
c5:81:74:38:ca:ad:6f:1e:2d:74:db:2a:d6:0c:a2:
ac:3f:f7:8b:f5:b3:4d:78:2b:3e:92:24:f7:35:b7:
a1:34:dc:33:95:cf:74:60:f0:e2:fd:88:35:9d:76:
97:3c:b3:88:ed:60:02:72:a7:b0:25:d8:74:30:ff:
c9:21:53:1b:f9:b6:b4:55:a6:c0:b1:27:8c:3d:c7:
98:f0:b8:50:50:22:fc:82:4e:7a:05:c9:05:2d:0e:
8b:c1:55:ce:a5:e6:71:d8:4c:38:bc:b3:83:12:8b:
60:84:99:af:99:d7:f9:68:8e:3a:de:4a:b8:0a:b4:
cb:5c:56:b5:b5:04:75:c1:cc:d1:da:10:8e:12:6a:
af:6e:2e:44:f8:82:8b:92:90:aa:4c:6e:c7:14:5c:
82:4c:7c:b1:af:cb:01:b5:f4:19:15:8b:49:db:83:
c5:a7:f7:a9:da:73:5a:68:cb:5d:6f:7f:90:21:e8:
19:1b:5b:c8:04:7e:3e:72:39:b1:1e:14:a8:97:ea:
51:34:1f:b6:27:0b:4f:5e:ad:62:85:3c:26:cf:62:
4c:e4:ad:ed:3a:91:0c:d2:55:50:f8:72:3c:ad:b2:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C2:19:A3:42:55:F4:33:83:A8:86:FE:C9:98:E2:88:F0:09:9A:7C
X509v3 Authority Key Identifier:
keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/NsIZo0JV9DODqIb-yZjiiPAJmnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.140.0/22
IPv6:
2a0c:6540::/32
Signature Algorithm: sha256WithRSAEncryption
b2:dd:02:18:05:1b:40:08:27:cc:11:56:e0:db:4e:5f:1c:ee:
a9:5a:c1:de:68:d9:48:a2:ca:df:53:02:17:b2:12:96:f4:f5:
fe:3c:b9:ba:d8:fc:f1:67:85:10:e2:cf:57:e8:ba:59:24:15:
7e:28:1b:13:52:e6:c6:8c:9a:32:5e:e9:d4:74:d5:25:67:75:
df:60:15:65:80:a4:12:93:e7:47:06:6e:72:bb:d4:60:24:83:
00:ec:8a:16:57:62:39:50:f1:22:96:20:25:9f:ff:ef:48:43:
84:30:06:a5:5a:a9:bc:8b:fc:fb:82:26:4c:24:b2:a0:b0:4e:
b5:46:8f:a8:81:be:43:97:53:c2:fd:4d:b9:db:90:71:6f:e9:
d3:88:c1:7c:98:ab:86:07:a0:4f:39:50:02:e2:36:16:5b:7e:
3f:5f:a3:4e:f6:33:ef:15:1e:3d:95:a9:94:e1:f1:94:81:85:
84:b3:8e:0b:69:70:1a:6c:87:a5:29:30:1f:35:ca:53:7f:90:
4f:9c:3b:17:58:dc:14:fa:3b:6d:07:41:5d:7b:af:12:ae:db:
58:5e:bf:92:9d:48:f3:e5:05:13:f9:94:96:4a:3e:a0:70:9a:
1f:a0:5a:e8:f3:dc:cd:d6:b0:3a:e9:27:93:44:28:0e:b8:63:
9d:2c:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:27 2025 by rpki-client