Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nEEMly75ywJTXIJPIIb-YLqhfWE.roa
File: nEEMly75ywJTXIJPIIb-YLqhfWE.roa (raw, json)
Hash identifier: T0cTpCGdNsE2cT2ndU9/tnpzj3R33AaDU3oJVbAhkMA=
Subject key identifier: 9C:41:0C:97:2E:F9:CB:02:53:5C:82:4F:20:86:FE:60:BA:A1:7D:61
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01852F6CEEDD3779614A8BBEC437F5269C25
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nEEMly75ywJTXIJPIIb-YLqhfWE.roa
Signing time: Tue 20 Dec 2022 12:05:46 +0000
ROA not before: Tue 20 Dec 2022 12:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4826
IP address blocks: 109.206.250.0/23 maxlen: 23
46.161.212.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
2a0e:eb44::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:6c:ee:dd:37:79:61:4a:8b:be:c4:37:f5:26:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 20 12:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c410c972ef9cb02535c824f2086fe60baa17d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:87:a9:f6:84:51:48:39:c4:27:50:12:af:
69:c5:d6:2c:9f:1f:f2:d9:47:fd:01:44:aa:d4:b5:
af:1e:97:49:81:78:68:9c:45:35:a5:93:9a:02:53:
99:7e:97:c5:f4:9d:b4:b8:ae:b6:df:fe:ca:5b:ac:
e1:11:fa:81:c1:d6:75:64:74:fd:79:cf:f0:7b:4d:
39:87:d1:c4:4c:a2:6c:49:04:d5:cb:e8:4d:c2:d8:
d6:92:e1:86:d1:c7:8c:f7:d3:df:ce:6b:78:09:04:
0e:45:36:dc:6f:82:c9:e1:65:bf:8a:94:64:e0:39:
5b:14:ef:2b:02:b0:37:55:d5:2e:09:6e:bf:00:7d:
f1:39:6f:19:33:77:6b:5a:b6:d6:5c:67:17:5d:2e:
3d:ac:ae:e6:4a:7d:f6:21:e2:e0:80:46:46:74:86:
32:f6:5c:40:af:64:9d:3e:bb:09:37:3d:52:29:d0:
e8:dc:fc:9b:0a:64:2b:6c:96:b9:e6:fa:05:7c:e3:
e9:7f:35:3a:91:6f:40:4d:9f:ce:e7:54:75:d3:08:
af:b8:c5:31:0b:2a:66:a9:eb:3f:07:30:06:20:85:
87:66:68:92:06:2d:03:1e:5c:ee:b9:2d:59:c3:4e:
67:7f:f1:81:49:ad:7a:25:55:f0:47:b3:dd:52:39:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:0C:97:2E:F9:CB:02:53:5C:82:4F:20:86:FE:60:BA:A1:7D:61
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/nEEMly75ywJTXIJPIIb-YLqhfWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.212.0/24
46.161.217.0/24
109.206.250.0/23
IPv6:
2a0e:eb44::/32
Signature Algorithm: sha256WithRSAEncryption
49:eb:cc:ba:92:4d:16:c3:a7:f9:18:41:9b:85:07:5e:39:38:
c1:b1:3f:b2:23:df:59:98:e7:df:59:40:79:ed:0b:70:11:55:
fb:3c:72:24:42:cb:34:3e:83:15:a1:a9:27:5d:b2:6e:77:1f:
88:b5:6b:b5:69:90:71:6d:fe:7d:ac:71:3b:7a:50:80:b3:71:
ec:71:1b:ca:54:2c:33:79:50:5c:34:64:b7:be:40:2d:43:2e:
13:7d:95:57:23:0d:5f:40:fb:06:0b:5e:2f:42:52:00:34:15:
23:f1:f7:b1:59:b2:5a:bd:cf:5f:1f:10:42:9c:f7:80:3f:44:
e0:d9:56:6b:7d:36:2d:38:99:8a:4e:b7:52:1b:83:12:ab:06:
23:76:6a:a1:98:f8:50:24:67:ee:b6:d6:71:2b:40:0c:81:ea:
70:65:91:86:57:cf:11:9c:e5:ac:41:b8:af:09:0f:ae:53:a9:
97:26:2b:3a:e5:89:c5:9e:a9:be:c9:ab:87:c3:48:e8:f1:17:
12:92:3c:71:a7:48:08:c4:30:e8:b9:7a:33:3e:c0:30:ae:79:
03:d1:20:52:c1:91:8b:5d:e4:8b:c0:10:0a:84:56:6e:bd:6a:
11:64:17:ef:e8:9a:b7:b0:0a:e7:1a:3d:b9:20:31:ca:a5:22:
ee:c0:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org