Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/n2-sfNFSBQPL8UID_b7LxmsDP8o.roa
File: n2-sfNFSBQPL8UID_b7LxmsDP8o.roa (raw, json)
Hash identifier: WQV9K3sGtjF+Arw5SMDzE10JFqod0lM3aREXHRLX/dE=
Subject key identifier: 9F:6F:AC:7C:D1:52:05:03:CB:F1:42:03:FD:BE:CB:C6:6B:03:3F:CA
Certificate issuer: /CN=864abd435f899d570a8e5fb83bdad1153455dee0
Certificate serial: 3402A5E1
Authority key identifier: 86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/n2-sfNFSBQPL8UID_b7LxmsDP8o.roa
Signing time: Sat 01 Jan 2022 14:57:17 +0000
ROA not before: Sat 01 Jan 2022 14:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211265
IP address blocks: 95.87.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872588769 (0x3402a5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864abd435f899d570a8e5fb83bdad1153455dee0
Validity
Not Before: Jan 1 14:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f6fac7cd1520503cbf14203fdbecbc66b033fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:8a:ba:76:24:31:a3:e0:11:4a:24:f5:53:
e3:d6:13:d7:1f:87:2b:8b:cb:5d:4c:8f:78:c2:ee:
e6:8b:e1:ab:f9:e9:11:8a:7d:f4:d4:4d:ea:6d:9f:
a2:88:23:24:0d:f0:f8:39:8c:1a:aa:f5:1a:9e:ee:
9e:d3:45:ac:fe:e8:36:03:ed:02:70:18:bc:38:cd:
20:5d:35:88:08:5a:e7:04:02:9e:ac:ce:50:bc:32:
16:1d:5e:41:bb:98:b7:65:20:52:64:37:bf:56:de:
55:89:c3:29:64:4e:22:5b:31:ab:e0:9d:d0:84:51:
41:72:c9:16:85:5c:db:9d:ac:d5:ee:ad:aa:f8:11:
ea:df:5b:cf:03:f4:b1:dc:d3:5a:bb:22:0c:01:21:
e9:29:d7:d6:a6:ce:b4:8f:b7:66:e7:bc:5e:ee:75:
89:b8:cf:96:5d:2d:ff:21:af:ed:7a:b7:94:46:b8:
8b:b9:8d:f0:e0:4d:bf:02:a6:84:e9:50:fb:b5:36:
3a:39:2c:cc:01:59:a2:43:a1:72:1b:b7:8a:e2:0d:
09:e0:18:8f:a3:b4:db:22:2a:7a:49:f0:57:8f:b3:
e0:8d:ee:ef:b1:4f:c4:b8:5d:95:a7:62:42:57:a3:
7c:a4:06:38:e1:e2:ad:52:f8:c0:8b:a8:e5:b5:7e:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:AC:7C:D1:52:05:03:CB:F1:42:03:FD:BE:CB:C6:6B:03:3F:CA
X509v3 Authority Key Identifier:
keyid:86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/n2-sfNFSBQPL8UID_b7LxmsDP8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.87.58.0/23
Signature Algorithm: sha256WithRSAEncryption
04:c3:75:e1:47:d1:31:f4:90:96:b4:e6:15:a5:ed:df:02:c8:
53:f4:21:13:81:5d:23:0d:f3:c5:33:c1:24:e9:74:30:d3:41:
2a:7c:33:b1:83:5e:4b:f4:91:49:24:5e:38:51:2e:f1:c6:ba:
c7:4e:b6:d1:b9:71:1e:17:b7:89:b3:7f:04:56:84:e2:b4:3c:
39:39:19:c1:33:4c:98:7a:f0:0c:83:f3:d5:50:c4:be:8d:a3:
d9:c1:83:72:ed:b7:45:62:64:20:ff:f6:6f:7f:38:3f:85:e8:
0f:50:03:5f:22:b8:67:e6:a8:3f:65:2a:3b:9f:b1:f7:01:1d:
55:99:12:f0:6b:ad:5a:b2:3d:fe:da:11:fb:c4:0e:e4:4e:11:
99:eb:ce:04:53:a4:da:06:f5:dd:15:e6:e4:bf:9f:ac:be:8f:
09:ac:f5:c9:a6:24:6e:3e:0a:71:54:44:63:5c:0d:3c:a6:71:
1a:ec:6c:fc:5c:13:a3:a9:59:9d:a7:25:e8:6e:e8:f4:38:c2:
ee:88:0d:f0:89:eb:e7:b5:85:73:e4:a0:7b:d5:8b:77:6c:f5:
e8:f6:d0:35:a6:2f:81:95:c4:c6:ec:4a:21:c1:df:1b:ae:2e:
73:21:29:ba:19:77:f6:c7:81:0a:cb:27:dd:9f:e3:a8:4f:ff:
d0:89:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net