Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/nCEFheYpmsxRKlb03tWKPHKcySs.roa
File: nCEFheYpmsxRKlb03tWKPHKcySs.roa (raw, json)
Hash identifier: ymfcbeJPOBVSOrMDfOusIkRMJm3GYr3pQq22JlnIBK8=
Subject key identifier: 9C:21:05:85:E6:29:9A:CC:51:2A:56:F4:DE:D5:8A:3C:72:9C:C9:2B
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 09C78556
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/nCEFheYpmsxRKlb03tWKPHKcySs.roa
Signing time: Sat 01 Jan 2022 04:02:14 +0000
ROA not before: Sat 01 Jan 2022 04:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 176.103.219.0/24 maxlen: 24
88.218.4.0/22 maxlen: 22
185.39.44.0/22 maxlen: 22
94.177.105.0/24 maxlen: 24
2a04:7c00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164070742 (0x9c78556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Jan 1 04:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c210585e6299acc512a56f4ded58a3c729cc92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:99:2e:6d:3c:71:e7:06:7b:20:a7:4b:23:
87:e9:37:14:a4:37:e1:0a:7e:ff:8c:c0:e6:19:2f:
83:80:1d:40:db:31:16:b6:18:57:50:51:c1:8c:5e:
65:73:1d:40:bd:98:e3:6e:2d:46:ec:fb:7d:98:34:
0d:1b:33:b0:5d:09:93:ef:39:43:22:c1:a4:cb:3e:
b5:39:82:e1:78:28:4f:c4:98:c3:67:07:13:60:55:
4c:5f:63:ee:49:88:6e:d0:da:9f:e5:0c:5a:01:f4:
47:33:8c:af:5f:b8:58:1c:36:b2:0b:1b:51:23:94:
9b:a6:79:26:40:16:ce:be:64:17:66:e7:1d:bb:db:
ca:9d:cd:65:78:4d:2d:c1:80:f5:b7:c6:a2:d3:6a:
f1:0b:86:2d:24:69:93:54:14:37:20:8d:84:c4:a5:
9e:fb:ec:fb:ee:b3:76:a6:ec:8b:65:e3:00:40:87:
78:6e:ce:51:9a:d7:f5:55:d0:57:06:01:3b:1e:17:
25:92:82:49:95:cc:6c:b7:91:5e:9a:40:16:38:c6:
0d:e6:79:9b:fb:0a:41:fe:fc:95:5c:e6:01:97:74:
f7:2a:6b:d8:d0:c9:29:10:98:3d:04:8b:ba:4e:40:
5a:6b:a9:d3:21:75:b8:c4:94:79:52:54:43:48:b9:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:21:05:85:E6:29:9A:CC:51:2A:56:F4:DE:D5:8A:3C:72:9C:C9:2B
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/nCEFheYpmsxRKlb03tWKPHKcySs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.4.0/22
94.177.105.0/24
176.103.219.0/24
185.39.44.0/22
IPv6:
2a04:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
e1:3c:e6:c0:70:12:1e:83:06:80:f3:11:0c:b9:56:a2:93:ce:
a3:cd:66:8d:75:48:20:2d:c5:89:a8:ac:77:0f:07:fe:f0:e3:
07:d4:af:64:3b:76:1c:86:e3:fe:f0:c1:79:3d:35:6f:ed:22:
e0:22:0b:c6:9b:45:91:2d:d2:f4:28:b1:b0:eb:b1:88:97:5a:
89:a4:38:7f:a2:b8:cf:e1:4c:d4:e3:8d:2a:1c:27:05:85:65:
b4:88:e4:83:b8:ad:37:f8:1e:15:a8:14:03:09:cc:4f:06:f1:
f1:42:50:82:35:7d:e3:85:14:7f:ed:fd:0e:e0:14:94:f4:89:
4c:60:0e:c3:bb:f8:f5:49:50:6c:85:72:0b:75:2d:40:f6:8f:
5f:28:cd:d1:75:29:55:58:2c:91:13:eb:26:8c:09:41:89:b1:
ab:ea:d7:5a:6b:98:37:92:e0:42:ab:23:1e:8e:f9:e3:7d:da:
10:2e:d5:09:63:a5:77:24:2c:74:a4:62:df:f7:ac:4b:e9:1f:
8d:28:49:93:4a:ce:bb:fd:b7:4e:2f:31:04:0e:fc:d1:75:1e:
d3:53:71:72:a0:99:c6:d0:4c:b6:2f:7a:52:f5:e6:86:0a:aa:
43:5b:55:c8:ea:38:fc:cb:f2:7a:22:31:98:14:ce:e9:ba:b8:
15:37:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:53 2024 by rpki-client on console-ams.rpki-client.org