Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/Nq2d_5cluShIi6a9HP9wUqDKNwU.roa
File: Nq2d_5cluShIi6a9HP9wUqDKNwU.roa (raw, json)
Hash identifier: la1V99/Onrx5AT3VklDTwVxjFZS3FGXz1Xmuk63d2FQ=
Subject key identifier: 36:AD:9D:FF:97:25:B9:28:48:8B:A6:BD:1C:FF:70:52:A0:CA:37:05
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 04CFF00B
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/Nq2d_5cluShIi6a9HP9wUqDKNwU.roa
Signing time: Wed 13 Apr 2022 22:49:50 +0000
ROA not before: Wed 13 Apr 2022 22:49:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41535
IP address blocks: 89.253.192.0/21 maxlen: 21
89.253.200.0/21 maxlen: 21
89.253.203.0/24 maxlen: 24
89.253.202.0/24 maxlen: 24
193.32.198.0/23 maxlen: 23
89.253.208.0/21 maxlen: 21
89.253.216.0/21 maxlen: 21
89.253.224.0/21 maxlen: 21
89.253.232.0/21 maxlen: 21
89.253.240.0/21 maxlen: 21
89.253.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80736267 (0x4cff00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Apr 13 22:49:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36ad9dff9725b928488ba6bd1cff7052a0ca3705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:81:7c:5d:a8:08:ce:51:e5:4b:ab:31:3f:
d9:12:fc:3d:30:57:4c:c3:48:53:65:5c:5e:02:d3:
43:66:e1:2f:6e:05:9b:ef:2f:a0:63:3e:d0:96:79:
02:b8:43:a6:dd:15:29:20:65:c5:0d:8f:16:87:88:
d7:a1:ac:1b:52:8e:1b:78:36:64:d9:7c:02:9a:7a:
ec:08:0a:cc:9b:59:ff:dc:6b:93:28:aa:3e:2d:45:
5a:37:e9:fd:88:08:67:78:79:53:5b:ff:55:20:76:
89:c7:0f:37:b9:af:cf:e7:01:d7:e1:9a:0e:65:53:
7b:0d:d6:d1:a7:48:5b:04:02:6f:09:0e:89:67:de:
f8:42:33:22:c4:31:99:d9:dd:bb:83:53:f0:c2:71:
3b:db:da:c4:67:0c:5f:bd:a5:05:e4:ec:8c:75:19:
39:bf:e4:1b:fd:08:73:2e:32:d9:ef:8e:71:b8:7e:
20:73:c3:c7:de:6b:ed:11:82:41:f4:03:ec:13:ca:
66:f9:50:be:46:e4:92:18:83:9c:c5:a0:17:0c:f0:
ab:b0:9c:69:2c:f8:c7:38:40:cf:2d:b1:9c:c0:3d:
ae:a2:d2:f7:c6:a5:17:e0:d3:e8:87:f0:57:37:22:
3c:5e:8c:78:29:39:99:74:b0:f5:42:22:0e:83:2d:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AD:9D:FF:97:25:B9:28:48:8B:A6:BD:1C:FF:70:52:A0:CA:37:05
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/Nq2d_5cluShIi6a9HP9wUqDKNwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.253.192.0/18
193.32.198.0/23
Signature Algorithm: sha256WithRSAEncryption
99:52:54:39:19:e6:b6:e0:ae:a5:a5:ed:f4:0b:53:a4:db:33:
be:e9:48:40:2e:40:fb:d0:1c:d1:73:ea:39:eb:b5:6d:ec:a6:
7e:8e:2a:d2:5e:aa:32:e7:6f:06:c8:04:ca:58:43:5b:71:3d:
b2:44:e2:ae:a1:bf:12:9a:99:08:48:67:2d:ad:26:9b:00:7f:
73:26:f9:21:46:2a:9c:40:29:24:18:63:f6:44:55:0b:c1:1b:
01:93:5b:3b:1c:cd:23:b5:a7:e2:01:2a:aa:80:37:b4:10:ac:
8a:17:3a:44:1d:a5:13:d5:bf:2d:36:ce:c3:67:4c:cf:6c:78:
83:50:2a:ce:68:fa:80:81:5e:c8:fb:86:7d:6d:dd:e1:b7:f2:
68:ba:c8:46:df:b0:39:5c:d4:d9:91:4d:8a:52:e2:53:57:64:
0e:e4:fa:96:98:c1:a1:7c:78:08:99:18:d9:43:ab:5e:bf:81:
45:f2:ce:9e:6e:ba:fc:70:23:fd:f3:fb:78:9a:d5:3e:be:df:
e0:ae:f6:e1:b5:bb:fb:53:b4:03:f2:8a:b6:9f:ee:ec:13:f6:
09:b5:05:5f:83:ce:5a:a6:1f:ab:27:b5:2a:f0:ea:dd:00:d9:
56:ad:a3:9a:14:a4:b9:63:b5:c0:14:44:57:32:71:96:cc:0d:
39:33:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org