Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/NmT48gzCTtWjedAVNkoaFwsEfyc.roa
File: NmT48gzCTtWjedAVNkoaFwsEfyc.roa (raw, json)
Hash identifier: zZMcSLUMqIWRLzLP82rNHGw9uPq7Mnjg8nMOF1NEL10=
Subject key identifier: 36:64:F8:F2:0C:C2:4E:D5:A3:79:D0:15:36:4A:1A:17:0B:04:7F:27
Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial: 5668E6
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/NmT48gzCTtWjedAVNkoaFwsEfyc.roa
Signing time: Sat 01 Jan 2022 01:55:02 +0000
ROA not before: Sat 01 Jan 2022 01:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39190
IP address blocks: 194.147.125.0/24 maxlen: 24
194.147.124.0/24 maxlen: 24
194.147.127.0/24 maxlen: 24
194.147.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5662950 (0x5668e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Validity
Not Before: Jan 1 01:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3664f8f20cc24ed5a379d015364a1a170b047f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:be:36:32:79:db:39:04:50:ed:65:68:54:
a0:ef:6b:ec:a3:14:98:ca:d3:d2:fa:9c:08:f6:0a:
0f:bf:2b:aa:2d:8d:04:65:1e:5f:4b:4f:88:10:92:
ad:17:00:4c:06:b8:62:43:a3:b8:38:9c:a2:b8:e6:
6a:fa:48:28:02:89:3a:99:b6:3a:a7:1e:98:6a:41:
96:9f:7a:af:db:89:e0:89:b6:45:42:0f:e0:4c:c5:
71:90:40:f9:55:90:6f:e9:5c:8f:d6:45:c9:4b:ac:
78:e7:b4:02:27:b8:2e:7e:25:43:36:ca:80:a0:ae:
cf:7a:29:11:9d:19:96:55:46:69:68:4c:f4:4d:55:
69:1f:f0:58:7d:7d:23:01:6b:84:e2:12:c3:90:54:
1c:7b:6f:d1:6d:66:a1:e2:bd:a4:b8:6c:04:48:ca:
bc:67:2d:2d:1a:97:db:0e:90:a4:4a:04:31:64:5b:
97:1e:c0:4a:c7:e7:cd:31:22:4a:c6:09:f5:ba:01:
9f:62:ff:3e:df:05:79:b6:b1:83:7e:85:02:5b:cf:
83:32:e9:67:e2:9b:4e:f5:82:77:8a:c2:ef:37:c6:
2b:16:6e:d9:5a:ca:ef:8d:4b:cb:f6:72:99:b2:b9:
26:5c:a8:e8:68:a0:be:a4:5d:96:a5:f0:4e:b3:4c:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:64:F8:F2:0C:C2:4E:D5:A3:79:D0:15:36:4A:1A:17:0B:04:7F:27
X509v3 Authority Key Identifier:
keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/NmT48gzCTtWjedAVNkoaFwsEfyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:69:48:48:f3:7e:51:21:bc:83:4b:7b:9a:79:8f:d0:6a:2e:
89:dd:f3:dd:d3:25:8b:bc:0b:b8:73:ce:dc:b2:b1:1c:d9:a0:
66:ea:54:5d:52:10:4e:e5:66:d9:e4:f8:f0:0e:7c:55:fe:4c:
e6:b8:a9:69:31:0e:69:ca:67:50:41:05:68:72:d6:7d:d6:0d:
83:16:d8:a0:35:e8:6a:c9:c7:a6:7b:18:42:fe:31:4b:c7:bf:
c0:dc:11:16:f3:89:33:9e:5e:2e:46:2d:d9:10:7e:87:35:af:
23:7f:61:a0:37:33:ef:e7:85:e0:89:f5:39:b8:1d:e0:fd:d6:
c5:c5:6d:bb:12:14:75:98:b4:be:e9:bc:f5:d8:0e:b9:d2:35:
23:2c:19:1e:35:01:eb:a4:a8:8e:3f:f2:e6:2b:b6:1d:6f:da:
48:fd:be:6b:12:7a:1b:64:56:68:2a:f1:97:10:6a:38:82:e3:
92:1f:8b:b4:f3:90:cf:b6:32:5b:44:f1:67:9d:33:2f:d8:3b:
66:b6:8c:64:44:50:76:b5:b6:76:45:bd:dd:2a:ad:c7:b3:30:
26:a8:21:b8:10:1b:90:7e:b0:13:72:0c:80:fe:30:9e:62:a9:
d2:6e:10:8e:12:4e:b3:d6:85:b4:c6:c5:0b:ce:fb:e5:19:fb:
36:6c:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:08 2024 by rpki-client on console-fra.rpki-client.org