Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/NJ9GAo2H2B5G0IvVWeouzq2tSHs.roa
File: NJ9GAo2H2B5G0IvVWeouzq2tSHs.roa (raw, json)
Hash identifier: OxmNGzAjKRdCkGFAU5VGrR3wBoYh/6T6Xv4HeiPZ3MY=
Subject key identifier: 34:9F:46:02:8D:87:D8:1E:46:D0:8B:D5:59:EA:2E:CE:AD:AD:48:7B
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 03E1557A
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/NJ9GAo2H2B5G0IvVWeouzq2tSHs.roa
Signing time: Sat 01 Jan 2022 04:56:47 +0000
ROA not before: Sat 01 Jan 2022 04:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204720
IP address blocks: 185.31.113.0/24 maxlen: 24
91.231.238.0/24 maxlen: 24
91.238.111.0/24 maxlen: 24
151.236.110.0/24 maxlen: 24
151.236.108.0/24 maxlen: 24
151.236.112.0/24 maxlen: 24
151.236.118.0/24 maxlen: 24
151.236.117.0/24 maxlen: 24
151.236.116.0/24 maxlen: 24
151.236.115.0/24 maxlen: 24
151.236.114.0/24 maxlen: 24
151.236.124.0/24 maxlen: 24
151.236.121.0/24 maxlen: 24
151.236.120.0/24 maxlen: 24
151.236.119.0/24 maxlen: 24
151.236.127.0/24 maxlen: 24
151.236.126.0/24 maxlen: 24
151.236.71.0/24 maxlen: 24
151.236.70.0/24 maxlen: 24
151.236.66.0/24 maxlen: 24
151.236.82.0/24 maxlen: 24
151.236.98.0/24 maxlen: 24
151.236.92.0/24 maxlen: 24
151.236.105.0/24 maxlen: 24
151.236.103.0/24 maxlen: 24
151.236.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65099130 (0x3e1557a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 1 04:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=349f46028d87d81e46d08bd559ea2eceadad487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:b5:ed:27:82:8a:57:f0:27:ab:8c:cf:d9:
52:58:03:ff:d4:9d:a3:46:97:63:c9:36:fd:ea:d6:
d2:41:1d:0c:a4:58:c0:fe:fd:1b:c5:8d:b4:a5:62:
98:ff:12:89:5e:ef:32:bd:e2:48:d1:54:4f:4f:12:
9f:4d:4b:a0:78:4b:f1:bf:84:ca:c7:d3:bd:02:fa:
0e:d4:1e:00:d6:3f:56:ba:4e:23:a2:b2:1e:7b:9b:
75:56:11:04:87:21:27:08:34:52:78:16:4c:04:cb:
40:71:35:e4:21:14:32:a6:39:8b:e5:e6:15:55:0e:
e6:4e:ed:19:95:04:0b:2e:54:c2:8c:9e:3a:d9:58:
21:d0:d2:28:88:d6:d4:f4:c3:5b:21:95:0e:2d:d7:
5b:10:b9:fa:0d:a7:ec:9e:88:a7:8b:21:7e:55:39:
40:f1:a1:f2:9b:f6:d1:1e:3b:0c:45:d0:30:60:38:
9a:f5:40:e7:32:40:66:d7:1c:cc:06:0e:ee:4e:1c:
50:61:59:c4:e4:ef:56:0f:e3:8a:f9:38:1b:cb:6a:
fb:68:5f:33:07:e4:ac:ff:ff:4b:39:aa:b8:68:70:
11:2d:25:7b:b4:89:4e:54:13:ed:23:9e:6c:11:a2:
3b:78:dd:c0:3d:6c:66:c3:1a:b1:88:6e:b5:96:36:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:46:02:8D:87:D8:1E:46:D0:8B:D5:59:EA:2E:CE:AD:AD:48:7B
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/NJ9GAo2H2B5G0IvVWeouzq2tSHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.238.0/24
91.238.111.0/24
151.236.66.0/24
151.236.70.0/23
151.236.82.0/24
151.236.92.0/24
151.236.98.0/24
151.236.101.0/24
151.236.103.0/24
151.236.105.0/24
151.236.108.0/24
151.236.110.0/24
151.236.112.0/24
151.236.114.0-151.236.121.255
151.236.124.0/24
151.236.126.0/23
185.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:03:70:c2:fc:8f:2d:7f:69:b7:53:7f:fa:d3:1f:ba:5b:82:
66:58:1f:ce:f2:42:d6:43:de:e3:db:40:36:f6:ad:c0:85:d5:
d8:78:0d:3a:5f:74:5a:52:0a:c9:ed:70:bc:99:fd:28:4d:9c:
38:12:c2:3c:08:ff:43:64:0f:52:6b:b4:d4:e2:91:4a:bb:aa:
29:2b:75:7f:d2:33:62:bd:a7:ad:a4:f6:66:e6:21:39:5e:df:
df:4d:2e:ad:32:5c:ee:4a:f4:70:19:ea:ef:26:44:e0:d1:1b:
a7:ee:11:7e:3a:e4:c4:af:5f:0c:e9:a6:7f:ff:c0:cf:93:70:
cd:e5:e7:10:6c:bc:16:2d:ee:b2:c7:ee:d8:c7:fe:5b:8d:42:
d6:28:db:22:8b:56:94:f7:1d:e3:70:35:fc:d2:8b:0c:9e:84:
a3:07:01:5f:4f:fa:7c:aa:0a:3c:f0:09:42:e5:13:48:56:7d:
bc:1a:56:28:06:5f:d5:c6:6c:55:3f:a6:92:b7:84:d1:b4:94:
15:b7:b2:a1:c8:a6:e4:d2:31:41:ac:13:63:8b:4a:be:db:a4:
cd:da:84:93:65:26:93:1a:57:d2:ff:d8:55:c0:f4:d5:c9:0b:
10:99:0a:e8:71:d1:46:70:ac:d8:3a:3e:22:a3:9a:37:39:bc:
95:aa:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org