Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/nMVQEElzk0Vwm-7GdXTHybnRKCs.roa
File: nMVQEElzk0Vwm-7GdXTHybnRKCs.roa (raw, json)
Hash identifier: wioKWHcMnDU6C7FH8haumaUwnTwS2otjIbzg2X79SGc=
Subject key identifier: 9C:C5:50:10:49:73:93:45:70:9B:EE:C6:75:74:C7:C9:B9:D1:28:2B
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01856B532A6B1AB9E85062C59A89D5E6B95F
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/nMVQEElzk0Vwm-7GdXTHybnRKCs.roa
Signing time: Sun 01 Jan 2023 03:14:50 +0000
ROA not before: Sun 01 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62174
IP address blocks: 87.246.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:2a:6b:1a:b9:e8:50:62:c5:9a:89:d5:e6:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc5501049739345709beec67574c7c9b9d1282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:38:e1:72:ca:d9:b7:8e:40:f6:da:02:24:
16:68:a1:2c:eb:c6:4a:79:c1:e9:1b:61:61:21:86:
14:8c:89:ab:86:3b:be:5f:87:8c:a7:b8:3f:fa:83:
ce:f9:32:4c:94:0e:e7:16:9f:ab:04:51:48:4c:cd:
31:44:21:dd:b2:82:76:ae:9d:bc:f3:6a:c1:0e:c9:
b6:f8:60:02:bb:fa:2f:3f:03:7a:58:f5:4c:62:b0:
f9:5f:24:c9:99:45:92:10:e0:09:5e:da:34:f3:aa:
35:2a:aa:8f:40:f9:7a:5d:e7:75:27:3d:2b:56:b9:
b0:36:4a:cb:26:e9:d1:f9:55:6a:c9:c3:1a:53:0a:
76:4e:63:d8:57:04:53:22:73:e7:08:33:8b:1b:a6:
2d:55:1b:1a:a5:71:49:75:a0:fe:ec:0f:72:23:e1:
ec:c5:64:7a:eb:e1:8a:fb:07:b8:86:f4:b6:6d:a2:
64:6f:c8:89:79:86:89:36:19:78:78:84:47:bd:23:
e0:78:3e:65:9a:43:1c:1f:be:95:1f:0a:73:61:99:
fb:9e:36:96:2b:84:11:a4:1b:30:ed:61:0a:1a:3d:
92:d5:e2:2c:e4:a7:60:9f:1a:a3:1e:e6:cd:08:f5:
61:98:dc:f8:32:2e:7b:35:98:7e:6b:a7:b5:eb:24:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:50:10:49:73:93:45:70:9B:EE:C6:75:74:C7:C9:B9:D1:28:2B
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/nMVQEElzk0Vwm-7GdXTHybnRKCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8b:09:d7:cd:1c:09:91:4e:fd:72:55:e8:d8:fc:1b:05:e9:
3e:e7:c3:d6:35:7b:1d:3a:8f:df:97:7c:ab:c4:9a:87:9a:6d:
a5:ca:38:97:e6:e1:8f:98:16:30:ef:80:c5:5d:fc:40:c7:bb:
c7:27:86:d9:eb:d7:36:84:8a:9d:4c:aa:4d:25:bc:08:f9:25:
ce:05:2c:e6:58:55:05:31:b9:53:a1:08:ff:42:30:ab:1a:3d:
db:cb:d3:e3:53:14:01:c0:b2:c7:03:4c:5e:4e:28:04:2d:b1:
92:6a:fa:f7:b7:4a:49:19:8c:01:6d:5e:b3:64:01:b8:75:98:
ce:fc:3b:d2:42:d8:85:64:5a:9f:bc:7f:2b:17:e0:af:4a:2d:
dc:06:44:0e:cc:0c:6f:18:4f:b3:8c:d0:fc:b1:58:eb:84:3e:
c8:5c:55:ab:83:85:ec:9b:f4:0d:c4:62:ba:1b:c8:66:88:93:
e9:cc:ca:d9:30:5d:08:39:f2:19:64:a2:ae:1e:c2:fe:29:1d:
f0:d4:d3:4a:cb:99:0e:11:e7:0e:bf:e6:57:f6:e7:b8:e8:0b:
95:44:3f:cb:5f:42:66:65:38:d6:ee:d1:91:6c:98:4f:e5:2f:
1c:97:7b:80:86:6d:2a:8f:04:1a:c7:6a:bb:86:13:bb:51:c4:
86:eb:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:36 2025 by rpki-client