Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/nbEbkfk_GAhka7si-GLjd7zLLFs.roa
File: nbEbkfk_GAhka7si-GLjd7zLLFs.roa (raw, json)
Hash identifier: /m3yXYnp2H/PXEXEV/JgDPS2dA0uuGOb5HaEVB/Mcek=
Subject key identifier: 9D:B1:1B:91:F9:3F:18:08:64:6B:BB:22:F8:62:E3:77:BC:CB:2C:5B
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 08CB8986
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/nbEbkfk_GAhka7si-GLjd7zLLFs.roa
Signing time: Sat 01 Jan 2022 10:02:20 +0000
ROA not before: Sat 01 Jan 2022 10:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206483
IP address blocks: 185.185.78.0/24 maxlen: 24
185.185.76.0/24 maxlen: 24
185.185.77.0/24 maxlen: 24
5.180.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147556742 (0x8cb8986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 1 10:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9db11b91f93f1808646bbb22f862e377bccb2c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:6d:6a:0d:11:8d:70:29:b6:32:b0:58:f7:
2b:c6:cc:68:93:ba:45:58:6d:79:ef:e2:be:bb:d9:
52:01:fc:e1:33:ec:6d:74:24:28:92:e6:da:8e:f6:
6c:03:32:b8:cd:d6:f0:22:09:34:cb:dc:3e:0f:e6:
8d:da:ea:7f:54:d4:ac:aa:32:97:06:4e:64:74:1a:
a1:4e:0f:bf:bc:d2:57:25:72:66:69:3b:a7:8d:0f:
03:fc:b8:ae:79:c7:84:c4:66:07:4b:cf:1f:c7:40:
0a:06:19:4a:5d:9a:c9:10:8f:ad:a3:25:36:68:b0:
21:d6:b1:5d:de:a1:ca:f8:13:9d:68:e9:56:f1:45:
36:76:d5:3a:45:87:28:34:66:af:5e:6e:92:1e:c5:
3a:85:79:e3:60:25:0d:9f:60:81:84:72:56:e2:2b:
81:1e:a0:83:30:49:78:3d:88:0d:fb:34:de:5f:f5:
b2:e0:6a:7c:d4:f1:0b:bb:03:4e:4d:72:6a:6c:db:
3b:fc:1d:22:e4:e6:e3:d2:a3:ff:d8:b9:e4:7d:8a:
63:b9:14:de:64:fe:54:e3:d5:ae:8d:90:46:2d:b7:
ac:e7:36:da:7e:0b:69:e3:c9:85:b6:16:44:b7:8b:
c5:86:16:77:b5:86:ed:6f:df:c2:df:4c:e3:c0:9c:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:1B:91:F9:3F:18:08:64:6B:BB:22:F8:62:E3:77:BC:CB:2C:5B
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/nbEbkfk_GAhka7si-GLjd7zLLFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.76.0-185.185.78.255
Signature Algorithm: sha256WithRSAEncryption
03:0b:5a:43:bf:c1:25:4b:e4:08:9c:ab:1c:9f:38:be:19:1d:
7f:6a:bb:4e:ba:ff:ea:97:31:a1:70:56:53:0b:6a:1c:d9:54:
20:b1:3e:59:15:96:ac:a5:73:32:f7:2d:a1:c0:33:18:f7:9a:
19:c4:4e:ad:09:1c:80:11:a2:94:41:87:82:fb:63:69:4a:35:
4e:88:9a:fb:02:bc:5d:3f:b9:af:5a:a2:fb:56:d3:97:f6:09:
f9:4f:7e:80:13:ce:20:99:b6:45:dc:e1:bb:a7:d1:9c:bb:97:
d6:15:5c:01:3a:51:29:33:6f:b3:c5:39:b9:54:ef:98:44:16:
56:10:27:89:7e:b5:1d:1e:22:a8:0c:ff:93:0a:03:06:38:cf:
9c:56:0c:21:47:a6:aa:a3:40:27:32:6c:35:46:3d:61:b4:78:
aa:2d:e2:26:37:72:74:f5:f3:4b:42:19:57:8e:cc:41:ee:f8:
5d:4c:3a:cf:3d:a7:8d:c3:9e:55:c9:10:c1:4d:50:62:56:a5:
d2:86:88:b5:a1:2c:85:cb:b2:69:b7:d3:8f:21:c8:b6:a4:43:
47:43:b6:ce:ca:fa:21:16:4f:20:a4:bf:72:76:64:e0:ce:16:
7f:fa:ed:7f:2b:4d:46:ca:56:74:6b:47:47:0e:38:6d:51:6d:
72:54:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:44 2024 by rpki-client on console-fra.rpki-client.org