Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/NMD3uXC1jBNJyvw68g8wWGDl3ko.roa
File: NMD3uXC1jBNJyvw68g8wWGDl3ko.roa (raw, json)
Hash identifier: bO0lpQxcP5bjKpUmvW8ghFbq4/j7yz8wrPXTRx8+EnE=
Subject key identifier: 34:C0:F7:B9:70:B5:8C:13:49:CA:FC:3A:F2:0F:30:58:60:E5:DE:4A
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 153ADA99
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/NMD3uXC1jBNJyvw68g8wWGDl3ko.roa
Signing time: Sat 01 Jan 2022 03:53:56 +0000
ROA not before: Sat 01 Jan 2022 03:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356178585 (0x153ada99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Jan 1 03:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34c0f7b970b58c1349cafc3af20f305860e5de4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:a7:90:63:f0:f2:42:76:41:a8:e6:4f:77:
b3:74:bd:2a:fc:a0:9e:7d:7e:a5:91:e5:1c:46:bc:
1c:d2:cf:78:17:5f:d1:a4:5b:da:99:17:cf:0d:7a:
1d:80:ff:be:64:d6:63:f7:c8:1d:06:4f:30:87:38:
3d:50:5b:5f:cb:6c:e5:16:27:cd:c6:c0:97:11:48:
c7:93:3c:7a:33:cd:15:98:4e:31:0f:f9:03:db:65:
be:b3:86:2e:d5:1a:58:56:da:71:87:82:db:4a:78:
c9:f8:88:77:73:d1:c1:57:6f:7c:f4:b4:ea:5a:0b:
87:53:1d:d1:86:ee:d3:8f:4a:97:55:58:f4:34:45:
a6:d1:65:9b:64:f3:f6:a6:d7:a4:07:ee:14:95:6b:
88:62:e8:c9:1a:ad:1b:9c:a0:7e:84:12:78:49:c5:
0b:25:88:fe:be:b2:85:06:c3:f2:16:bd:24:40:09:
32:46:f5:14:b7:c8:8a:2f:b9:a2:f6:60:82:f7:dc:
9e:2a:17:5a:18:89:81:32:1c:1e:71:53:75:bb:ac:
24:59:b8:f3:88:fb:d8:38:fa:95:5c:de:52:56:73:
d5:ce:0e:42:16:c0:42:0f:0e:36:c8:24:13:f1:7c:
83:55:40:c1:3b:5c:e3:da:6f:ea:a4:a5:57:6a:72:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C0:F7:B9:70:B5:8C:13:49:CA:FC:3A:F2:0F:30:58:60:E5:DE:4A
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/NMD3uXC1jBNJyvw68g8wWGDl3ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.149.0/24
Signature Algorithm: sha256WithRSAEncryption
18:95:b3:f0:a7:49:f4:17:0b:fe:d5:9d:2e:28:a4:26:3a:9d:
8e:3b:74:f7:72:34:7b:94:99:1a:5a:45:09:e3:69:37:63:78:
43:56:86:7f:7b:ab:3d:05:a9:ae:4b:60:92:4c:3c:23:19:4d:
95:2f:e9:8c:05:ec:bc:44:cc:c6:fa:12:77:79:94:27:d1:9b:
82:9e:bb:10:00:c1:e3:72:2a:ca:bf:37:c3:ef:28:79:87:fd:
e3:b3:63:aa:8d:e8:a7:01:22:8f:87:4b:8d:52:90:a5:1b:8c:
ab:dd:0e:43:95:a0:be:f2:c8:ce:53:f8:e4:79:a7:20:1a:d0:
84:b1:de:e0:cf:46:ec:5b:d1:16:53:45:f5:fc:d9:92:67:07:
cf:9b:e2:4f:88:51:9e:72:2b:66:a4:89:37:26:47:e7:7e:da:
7c:4a:a8:3f:ae:f1:ae:93:01:0e:4a:0b:c4:40:e5:0e:36:34:
c1:cd:72:42:ab:18:71:a7:2f:32:39:ba:5f:c0:2d:b6:45:69:
0f:40:82:aa:47:6d:7b:1b:bb:e3:2c:b1:f0:46:9d:0d:14:3f:
60:f8:d6:3f:6d:2e:0a:3d:5b:ee:dc:00:b2:e0:d7:74:aa:64:
44:52:01:5a:d8:79:e2:f8:94:5b:b2:dd:67:0e:86:26:60:89:
e6:27:4c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net