Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/NKkjlA97hqBiDO6e65GWFqV9muk.roa
File: NKkjlA97hqBiDO6e65GWFqV9muk.roa (raw, json)
Hash identifier: 1ZaGjDsXi/7g2laqH7VSTr/VcxW/n8+Cedkqwj99McM=
Subject key identifier: 34:A9:23:94:0F:7B:86:A0:62:0C:EE:9E:EB:91:96:16:A5:7D:9A:E9
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0770E5AA
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/NKkjlA97hqBiDO6e65GWFqV9muk.roa
Signing time: Wed 02 Feb 2022 22:58:29 +0000
ROA not before: Wed 02 Feb 2022 22:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 185.144.56.0/22 maxlen: 24
45.95.40.0/22 maxlen: 22
188.191.48.0/22 maxlen: 22
5.22.204.0/22 maxlen: 22
193.57.94.0/23 maxlen: 23
45.130.100.0/22 maxlen: 22
95.178.107.0/24 maxlen: 24
185.90.220.0/22 maxlen: 24
45.10.16.0/22 maxlen: 22
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124839338 (0x770e5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Feb 2 22:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34a923940f7b86a0620cee9eeb919616a57d9ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:82:78:35:af:43:f6:05:3f:35:1f:6b:3c:
5a:e4:a8:7c:40:d7:c1:a8:14:bb:76:f3:06:f1:37:
78:80:11:05:2e:8d:87:77:29:a2:1c:a0:fb:ed:3b:
71:54:52:08:fa:21:0f:bf:dc:77:6d:0f:dc:77:a5:
fd:af:07:e0:72:17:64:d0:d0:97:1d:8a:84:79:e3:
ac:7f:5d:68:2d:7b:12:92:0e:be:9e:18:bc:90:51:
d9:7a:a5:57:f4:8e:91:f9:3c:6e:6d:fb:79:e6:d3:
0a:36:81:e3:44:20:cc:13:52:0d:9a:f1:84:c4:72:
6f:4e:7a:de:b4:59:6f:58:3d:24:b6:f7:3d:c8:e6:
19:09:5a:74:5c:85:cc:1d:b7:c2:70:41:74:21:bd:
c4:ca:dd:dd:59:3f:29:3d:39:ae:1d:fa:b9:de:4d:
c3:5f:0a:3b:8e:fd:a6:57:27:23:4b:84:38:50:78:
2c:4f:6c:90:0a:0c:e5:e9:e1:85:63:e0:af:79:ca:
f8:69:5f:f8:5c:87:52:35:8c:1b:85:65:f7:82:b6:
48:a1:f5:b6:b1:50:04:0a:96:c8:fa:c3:73:f5:4c:
b7:15:05:37:a5:18:55:d4:a7:45:ca:a0:cf:5b:f8:
a3:e8:23:da:6b:02:28:70:ae:fa:d3:53:02:ab:d4:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:23:94:0F:7B:86:A0:62:0C:EE:9E:EB:91:96:16:A5:7D:9A:E9
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/NKkjlA97hqBiDO6e65GWFqV9muk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0/22
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
95.178.107.0/24
185.90.220.0/22
185.144.56.0/22
188.191.48.0/22
193.57.94.0/23
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:08:b5:9f:cd:ad:8b:b1:e0:7f:de:41:6f:e8:85:1d:2c:9a:
a9:ad:7c:89:87:33:a7:80:14:f5:18:d9:75:16:f9:de:98:a6:
1e:d7:68:6f:49:0e:c5:ca:1d:96:34:32:13:4f:85:c4:7c:7b:
e1:f6:eb:31:44:ae:a3:d1:5b:19:1d:53:1b:f4:d2:6e:dd:a6:
2d:39:60:19:87:c0:b5:bd:dc:1d:37:2b:9e:80:5f:80:31:cc:
d0:f8:e9:c3:ac:50:43:65:01:93:f0:e3:92:77:31:d2:36:97:
0a:b6:19:9e:8e:a5:77:b6:fc:31:1f:60:75:e6:29:a9:ad:22:
e1:37:b3:46:cd:6d:a9:8f:50:2f:9b:d3:f8:bc:9b:95:a8:25:
28:3f:81:bc:46:90:75:2f:4c:65:3a:f5:20:86:42:f0:6a:d1:
a9:66:28:fd:08:81:e8:99:70:ba:c0:42:4e:26:78:0a:e5:f7:
f9:91:54:e8:23:6c:7d:fa:a8:b6:d2:a9:39:34:6c:6e:89:c2:
84:75:a4:38:de:67:85:b6:87:f4:f6:a3:f5:7a:2d:28:60:69:
d5:fd:08:a2:91:9c:8a:d2:e4:e7:db:e4:b3:fd:fb:51:2d:ad:
66:a0:8f:28:28:36:1e:68:16:62:05:2b:f3:25:e3:1d:f0:bb:
6e:1b:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org