Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/9NMR3ZxildYU0gavA4XnrUEiLYo.roa
File: 9NMR3ZxildYU0gavA4XnrUEiLYo.roa (raw, json)
Hash identifier: Oc9ygPtz7RuQMKZUQ+WYte88ErXm5Fx1A9plN+v3GrY=
Subject key identifier: F4:D3:11:DD:9C:62:95:D6:14:D2:06:AF:03:85:E7:AD:41:22:2D:8A
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 02CBD7
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/9NMR3ZxildYU0gavA4XnrUEiLYo.roa
Signing time: Mon 31 Jan 2022 13:22:55 +0000
ROA not before: Mon 31 Jan 2022 13:22:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 195.88.246.0/24 maxlen: 24
195.88.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183255 (0x2cbd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jan 31 13:22:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4d311dd9c6295d614d206af0385e7ad41222d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:11:de:ac:d0:f1:5f:d3:04:e1:e5:5d:f5:
9c:96:37:71:47:78:b5:68:8e:8b:a0:f8:63:5e:3e:
c8:4c:87:3e:46:07:c8:c6:85:27:e5:51:3f:07:14:
26:71:5c:d7:b8:94:c8:bb:dc:e7:81:35:cc:16:f3:
c9:7c:21:1b:07:00:ad:31:e5:32:85:8b:6c:ed:85:
3a:6b:7e:0a:73:ef:ee:67:79:0f:4c:08:5d:b3:3f:
e5:29:84:a6:0e:be:41:e8:03:7b:95:5e:bc:19:f6:
b1:2e:da:18:f9:8b:8c:66:39:a2:ed:33:15:5d:fd:
b0:7b:f7:6c:e0:56:a3:42:d9:4b:15:c1:21:17:4b:
b6:95:ee:a4:8b:da:fa:7e:5d:3e:ea:87:96:b3:2e:
eb:79:1f:0c:6a:5a:98:d8:32:3d:80:1f:fd:47:dc:
80:8d:73:a8:00:02:cb:12:7a:60:cb:41:99:0a:30:
1f:0b:ca:3a:90:53:8e:e6:eb:f6:e9:9d:01:2a:fc:
aa:f3:db:ca:4c:91:29:e0:1f:1c:13:8b:36:89:d9:
b3:de:f5:ee:48:f9:34:e2:29:11:31:8d:1e:7a:0f:
8d:c1:60:b5:4d:09:b1:1b:84:51:ab:56:1c:da:1b:
c7:0b:d3:af:f7:12:e9:d2:04:28:6f:53:e7:d1:ec:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:11:DD:9C:62:95:D6:14:D2:06:AF:03:85:E7:AD:41:22:2D:8A
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/9NMR3ZxildYU0gavA4XnrUEiLYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.246.0/23
Signature Algorithm: sha256WithRSAEncryption
64:1c:a1:90:ff:48:85:5a:f0:13:13:26:b9:33:9b:47:9f:92:
dd:a9:e6:a8:e6:0c:9e:f9:43:96:bc:e6:2d:2e:dd:b7:30:d6:
6b:1e:54:30:a0:1d:c2:ed:ed:31:5e:28:58:9c:12:a0:f7:81:
6f:fe:be:95:0a:a4:74:2f:18:97:f9:6d:f5:ca:e6:b3:6c:4c:
c4:db:98:2b:a6:c0:35:41:4c:fc:c9:cc:09:2d:c7:eb:e8:45:
fa:66:e5:ca:b0:38:3b:11:27:14:53:ff:47:d1:05:0c:5e:d3:
9e:a8:19:66:97:1c:c1:5e:78:1a:a5:5b:f1:02:c3:c0:d9:10:
2a:7a:11:b3:1b:db:55:76:65:56:b5:f7:64:61:4d:6d:58:b1:
ff:43:95:18:b3:e4:5a:fc:0d:a1:a3:24:2a:0b:92:3f:69:af:
a6:11:81:56:14:a6:d2:02:20:b1:38:59:5e:a7:d2:12:d4:ff:
c9:fe:6f:b0:87:52:4c:34:db:54:13:ca:9d:e9:16:7b:cb:65:
fb:76:72:30:d0:0d:da:85:21:ec:ba:c3:01:d7:29:32:04:67:
e3:02:d8:8b:1e:47:74:74:04:e3:da:95:c6:56:a4:e5:3f:14:
5a:74:ba:6f:6f:cb:c9:3a:1c:d4:c1:3d:53:b3:a8:2a:9c:de:
04:3a:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-fra.rpki-client.org