Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/Nm8GZQH8XR51s1iw2jJxnChU8ZU.roa
File: Nm8GZQH8XR51s1iw2jJxnChU8ZU.roa (raw, json)
Hash identifier: eTb9pEGXKvHiInIK1AcVfDL60u/1RJ1W2TYahzp/iy0=
Subject key identifier: 36:6F:06:65:01:FC:5D:1E:75:B3:58:B0:DA:32:71:9C:28:54:F1:95
Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial: 0F9408FA
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/Nm8GZQH8XR51s1iw2jJxnChU8ZU.roa
Signing time: Sat 01 Jan 2022 13:54:39 +0000
ROA not before: Sat 01 Jan 2022 13:54:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206819
IP address blocks: 185.175.100.0/22 maxlen: 32
2a0b:e500::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261359866 (0xf9408fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Validity
Not Before: Jan 1 13:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=366f066501fc5d1e75b358b0da32719c2854f195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:17:ac:72:75:54:c3:90:42:1f:18:22:31:
a1:5d:5e:b8:86:0f:a9:09:72:20:c1:76:ce:b2:20:
13:e5:49:bd:f6:7c:2c:91:72:56:0d:81:8b:90:2e:
bd:27:25:a4:73:69:25:7d:38:79:5a:88:ec:78:e9:
b2:fb:a2:e3:fa:ca:ae:5d:c7:8c:bb:70:ea:57:54:
b8:2f:5f:17:41:05:00:70:59:64:1b:95:2d:c5:5a:
b3:3e:68:f9:c8:96:15:38:28:32:f1:c2:f2:e6:e6:
45:42:ce:32:28:9e:03:49:a6:d3:8d:c0:42:fe:d1:
87:29:4e:75:32:34:4f:8c:a2:b5:cb:68:05:a8:f2:
ca:91:e8:35:b0:b6:c8:3d:c2:9b:67:76:9e:98:03:
12:99:86:72:a4:29:8e:8b:ab:84:4f:db:eb:44:62:
29:e8:c6:20:6d:e2:f8:5f:3b:18:7a:0e:59:01:d5:
2a:47:b3:c6:8a:e0:d2:63:81:ea:c9:43:84:1d:f3:
8e:5e:65:ce:b1:8f:f8:7e:5c:ba:b9:cc:6e:1a:38:
40:56:04:8b:d1:0d:7a:2c:84:3b:9a:35:48:9a:d0:
32:55:d5:be:72:a9:57:9b:d2:3e:68:8f:cb:de:67:
15:86:98:65:74:56:53:d1:98:c0:97:97:cf:65:06:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:06:65:01:FC:5D:1E:75:B3:58:B0:DA:32:71:9C:28:54:F1:95
X509v3 Authority Key Identifier:
keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/Nm8GZQH8XR51s1iw2jJxnChU8ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.100.0/22
IPv6:
2a0b:e500::/31
Signature Algorithm: sha256WithRSAEncryption
04:e8:fe:06:75:d9:79:a0:99:29:88:2e:17:a6:cd:56:41:63:
37:69:9d:dc:50:eb:34:c7:b7:30:f6:3e:b1:53:25:61:09:3e:
a4:be:34:25:ee:ca:bf:94:05:6f:f7:a8:d4:e6:1d:a9:87:04:
37:9d:5b:a4:f2:f6:83:95:7c:26:86:0c:4f:97:f5:01:2c:4d:
11:58:35:7f:7c:13:b6:a1:55:4a:74:05:ed:7b:f6:14:36:88:
00:ab:60:95:e2:4f:1e:29:3f:a5:1f:d5:bc:f9:db:35:a6:ab:
3d:92:72:ff:82:9e:ae:1f:a1:d2:ac:87:bf:3f:e4:0e:8a:33:
8a:5e:cd:51:73:1b:b1:d4:de:ae:85:a8:6a:59:e7:6a:44:2c:
2f:15:40:94:af:81:e4:37:93:b3:fe:46:c0:f4:88:ff:cc:e6:
50:4d:5b:c1:82:9e:dd:d3:a0:06:6c:8e:d1:cd:e8:33:38:5d:
c3:d2:b1:4d:bb:6c:50:9d:94:c3:b4:16:90:7c:c2:d7:7c:b5:
22:df:2d:d8:b8:74:46:90:31:d5:1f:0c:7b:b8:6b:4a:a7:6c:
c4:ac:9e:9a:0f:05:ac:e2:e8:1c:8e:76:ad:93:78:43:61:0e:
b0:bd:8f:83:1a:3a:bf:01:fa:e1:6e:43:18:f7:47:6d:a9:da:
e3:7a:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:19 2024 by rpki-client on console-ams.rpki-client.org