Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nKLMEOwE8TW2_n3_PE8Bke16_9Q.roa
File: nKLMEOwE8TW2_n3_PE8Bke16_9Q.roa (raw, json)
Hash identifier: BsL9IcgYnnLQcNY4trHPJWiytUdJITpRyVby3aA4e/Q=
Subject key identifier: 9C:A2:CC:10:EC:04:F1:35:B6:FE:7D:FF:3C:4F:01:91:ED:7A:FF:D4
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 0183CBCCBE70E47827F59F8BA1545221B021
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nKLMEOwE8TW2_n3_PE8Bke16_9Q.roa
Signing time: Wed 12 Oct 2022 10:45:36 +0000
ROA not before: Wed 12 Oct 2022 10:45:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 810
IP address blocks: 212.68.164.0/22 maxlen: 22
212.68.172.0/22 maxlen: 22
212.68.168.0/22 maxlen: 22
212.68.184.0/22 maxlen: 22
212.68.180.0/22 maxlen: 22
212.68.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:cc:be:70:e4:78:27:f5:9f:8b:a1:54:52:21:b0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Oct 12 10:45:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ca2cc10ec04f135b6fe7dff3c4f0191ed7affd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:6d:5d:5a:a2:20:f4:16:ca:ae:da:af:9e:
eb:ef:10:58:64:0d:00:26:b7:b4:81:82:6b:9b:19:
fe:aa:91:0a:29:f2:69:ed:15:a3:21:dc:48:59:d2:
12:8c:a5:96:cc:49:40:04:ca:ca:77:56:cd:28:6d:
d5:b7:5b:3f:e6:c5:c8:eb:4c:eb:c7:c8:19:58:e1:
67:fd:ee:62:f3:b4:50:85:03:e7:f8:db:2e:99:83:
ca:80:cf:11:ce:37:50:4b:73:cf:29:d9:d0:b5:18:
7d:46:91:45:a9:7d:80:5d:50:f3:0e:88:22:12:bb:
97:b1:59:d7:48:f2:bc:e8:10:19:2a:e6:48:1b:ca:
00:a2:80:a6:33:a4:17:76:89:1f:e7:f8:3e:84:fd:
87:69:6a:17:d6:f2:38:4e:41:1e:ee:6f:97:a9:ea:
a1:49:44:11:4c:cd:92:9c:d7:21:b0:b7:f0:5d:25:
0e:66:4b:e7:98:67:d0:f7:af:76:30:2d:3f:c3:6c:
89:89:6c:18:23:8d:64:af:73:24:73:4e:ce:c2:3f:
41:0a:de:ab:9e:0d:08:ed:3c:2c:bc:a1:46:de:51:
d5:e5:87:86:be:d4:cb:41:8d:f4:67:b9:e8:03:b3:
25:77:2c:67:9b:a6:1c:a1:6b:7c:5b:57:d9:3b:cc:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:CC:10:EC:04:F1:35:B6:FE:7D:FF:3C:4F:01:91:ED:7A:FF:D4
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/nKLMEOwE8TW2_n3_PE8Bke16_9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.164.0-212.68.175.255
212.68.180.0-212.68.191.255
Signature Algorithm: sha256WithRSAEncryption
07:5f:29:1c:7b:7e:b4:cd:61:64:3f:f1:cf:64:72:03:cd:84:
96:1a:62:54:89:85:82:8c:5e:2f:6a:4a:4b:4f:09:84:c7:30:
31:ba:49:45:47:00:70:0d:2d:38:af:0a:bf:71:a9:16:f6:8f:
46:a7:ab:ec:d3:fc:d4:9d:1d:7c:44:f6:52:cd:64:2d:10:f1:
b6:1a:2d:c3:2d:3a:8a:ea:7c:ae:f4:87:49:96:8f:cb:02:e2:
67:b5:a0:3a:f6:50:57:5f:1e:30:ba:75:6a:ae:5f:55:20:b6:
8c:71:b7:5b:ec:26:63:87:a2:bc:50:96:cd:35:09:ca:7b:03:
cf:ed:3a:88:5c:24:5f:cc:d8:c7:8a:27:cc:88:52:cd:bc:84:
c0:a3:68:55:25:52:60:ba:77:31:0f:98:54:95:28:9e:4a:c7:
00:dd:fb:cb:ed:c8:ff:fd:df:2c:45:58:8e:8e:f4:94:60:c2:
0f:d9:9e:25:2b:14:1d:37:39:82:55:0c:c3:a3:57:c0:f6:79:
f3:19:5a:20:1b:67:07:86:cf:b9:29:28:33:47:6b:8f:88:19:
27:64:3f:39:a3:f3:ba:79:76:25:ed:7b:e5:16:0c:2e:b6:33:
e3:e0:be:d6:3b:cc:a0:98:fa:d5:30:57:84:b9:4b:1d:c8:6e:
b1:11:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:15 2024 by rpki-client on console-ams.rpki-client.org