Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/NziYQj1ORef9QWLqQ-nKACTN_Fk.roa
File: NziYQj1ORef9QWLqQ-nKACTN_Fk.roa (raw, json)
Hash identifier: zHlnoiPfKcx3Ujh6njEFPuE6Rc2btk9jG9IDhmxyu+o=
Subject key identifier: 37:38:98:42:3D:4E:45:E7:FD:41:62:EA:43:E9:CA:00:24:CD:FC:59
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 04870000
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/NziYQj1ORef9QWLqQ-nKACTN_Fk.roa
Signing time: Sat 01 Jan 2022 15:05:25 +0000
ROA not before: Sat 01 Jan 2022 15:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204903
IP address blocks: 185.236.106.0/24 maxlen: 24
185.236.107.0/24 maxlen: 24
185.236.105.0/24 maxlen: 24
185.236.104.0/24 maxlen: 24
185.236.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75956224 (0x4870000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Jan 1 15:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=373898423d4e45e7fd4162ea43e9ca0024cdfc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:60:bf:39:43:fd:cd:6f:d1:21:90:94:ca:
76:9f:78:ca:1c:33:ad:a4:bb:49:44:99:18:cc:8e:
56:43:db:f4:f4:b3:7a:8f:ce:45:07:d8:ad:e2:1e:
74:55:d8:d4:7c:f9:c4:48:36:71:8f:b0:47:bb:f9:
6e:d6:6e:b2:42:cf:05:08:d0:d5:ef:2b:80:e2:84:
97:f9:7f:20:85:35:71:e0:30:03:01:54:de:73:65:
bb:1d:c2:4c:74:5b:a1:b4:f2:2d:3c:53:8d:df:d4:
95:03:4f:65:73:f0:cd:0e:6f:3a:a2:28:32:cb:91:
15:ce:ae:62:91:bb:49:c8:c3:54:6e:11:ca:32:93:
a0:35:a8:31:0e:36:ad:1f:e2:ab:47:c2:e9:c4:b8:
17:08:74:94:0f:39:a4:6d:dd:66:f9:6a:48:77:dd:
8f:42:dc:9c:0b:83:a8:d3:97:d2:77:74:dc:2d:9e:
9b:43:a4:62:32:1b:5a:e5:71:62:bc:0b:65:72:b2:
8b:8a:01:2f:f7:38:22:c2:a7:bb:de:17:8b:83:34:
5e:c5:4f:00:8f:83:0d:91:b7:47:a8:98:ac:9f:ea:
86:c8:c1:72:15:05:3c:cc:62:6c:82:32:a6:9d:e0:
60:79:83:79:e2:d9:a0:bf:00:ee:92:6c:88:73:70:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:38:98:42:3D:4E:45:E7:FD:41:62:EA:43:E9:CA:00:24:CD:FC:59
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/NziYQj1ORef9QWLqQ-nKACTN_Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.104.0/22
Signature Algorithm: sha256WithRSAEncryption
88:56:e3:cb:7e:eb:79:d1:9d:62:1d:66:f3:f0:28:d1:c1:33:
46:f1:84:84:f0:e4:1a:97:85:6c:66:6b:4b:34:af:b7:e6:f7:
ee:1a:7f:d7:5c:e3:ba:19:7c:78:6f:8a:82:9b:34:b2:1b:d8:
38:e2:e4:23:94:de:78:9b:aa:0c:92:ed:a6:4c:bd:ef:55:b5:
db:2b:78:dd:a4:da:96:41:2d:1f:e9:28:e1:67:b1:de:6e:b9:
e0:52:39:10:49:3d:0d:91:52:51:a9:8c:c2:92:7c:a7:6b:ff:
b4:2d:ef:c9:76:f4:db:67:0b:c2:95:77:6e:b9:76:f5:a4:d2:
6b:85:8c:2a:d1:67:b5:4b:29:98:7e:da:11:06:35:f9:59:13:
83:45:74:0b:31:32:79:34:69:5d:be:9d:ec:46:6d:30:12:d3:
7d:6d:a3:0a:9e:c5:61:44:c8:e6:98:b0:0e:f1:81:a7:fb:96:
26:f0:19:11:1a:3f:ac:b7:0d:cf:66:f4:ec:71:dd:63:7b:14:
a0:4e:d9:5d:57:52:ad:6b:b6:c5:55:7d:50:c7:c3:af:f1:b9:
29:07:88:94:ef:24:fd:4a:2b:92:a0:96:26:74:45:52:ea:31:
1d:86:7c:a8:84:e9:4b:0f:6f:42:73:1b:c5:77:16:d7:4a:ad:
ff:2f:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:58 2024 by rpki-client on console-fra.rpki-client.org