Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/ndbj804e0HV1_gxr9MaGUKk8YOA.roa
File: ndbj804e0HV1_gxr9MaGUKk8YOA.roa (raw, json)
Hash identifier: UIWAHGyMHRASi9y7j7HNnNi3C56GlOsiVrY9Db0uR0A=
Subject key identifier: 9D:D6:E3:F3:4E:1E:D0:75:75:FE:0C:6B:F4:C6:86:50:A9:3C:60:E0
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 07B284A7
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/ndbj804e0HV1_gxr9MaGUKk8YOA.roa
Signing time: Sat 01 Jan 2022 08:59:44 +0000
ROA not before: Sat 01 Jan 2022 08:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15525
IP address blocks: 176.221.32.0/21 maxlen: 24
185.99.233.0/24 maxlen: 24
185.99.234.0/23 maxlen: 24
2a03:9c80::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129139879 (0x7b284a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Jan 1 08:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dd6e3f34e1ed07575fe0c6bf4c68650a93c60e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:01:c3:a1:17:f4:3e:ef:7a:3b:c7:a3:8c:
65:f3:6d:93:09:08:be:63:1e:0e:ac:23:9c:ea:56:
40:1e:e6:f4:2d:bf:44:45:64:33:a8:45:9a:f0:12:
a2:4b:c2:3a:e2:9b:25:75:47:41:f3:02:6d:2e:45:
07:91:6b:1e:21:b0:91:72:57:83:cf:7e:43:be:bc:
94:ee:f5:01:a5:59:72:db:21:57:97:40:3a:5c:7b:
23:3e:59:e6:47:f3:dd:dd:03:12:9a:04:53:99:dd:
7e:a7:e1:ba:7d:b1:a8:2b:71:bc:9b:56:36:e4:1c:
65:07:af:1f:ec:a1:65:24:3a:f6:ba:63:f9:36:a0:
35:58:75:44:e1:83:13:cd:10:8b:92:57:82:11:b5:
18:b9:8f:30:41:43:57:36:dc:7d:c0:ce:3f:6c:f3:
0a:91:9b:12:79:6d:27:84:88:c4:fe:83:90:29:0d:
5d:ee:45:43:8c:cf:aa:1a:5a:07:71:a0:ab:76:21:
3c:c8:d7:94:ec:bf:d5:40:cf:61:da:28:0c:82:fa:
0d:c2:7b:a0:ac:00:cf:2e:43:7e:0c:cf:de:1e:f6:
89:c6:33:ca:5f:83:20:99:dd:9d:24:13:4f:93:f4:
f1:d6:b6:9f:c6:eb:87:eb:5d:47:d1:85:cc:40:e6:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:E3:F3:4E:1E:D0:75:75:FE:0C:6B:F4:C6:86:50:A9:3C:60:E0
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/ndbj804e0HV1_gxr9MaGUKk8YOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.32.0/21
185.99.233.0-185.99.235.255
IPv6:
2a03:9c80::/34
Signature Algorithm: sha256WithRSAEncryption
18:6d:25:ee:47:ec:f2:7f:13:a2:e5:a3:01:8a:bd:fb:9c:c5:
78:a4:49:46:08:af:cd:26:b9:e4:2e:56:41:53:c8:70:73:de:
5c:1f:42:83:57:73:da:5f:2a:04:d9:84:46:cd:58:e9:76:33:
d6:67:be:56:ca:a6:2e:9f:c1:32:5b:be:4c:cf:c8:71:e0:6b:
bb:de:a4:7d:dc:a2:8d:5c:d3:f0:ed:7a:b0:17:39:e2:f9:3e:
2f:ce:d8:d7:55:b4:29:67:57:0e:29:87:7c:b2:54:4a:8b:4d:
68:99:28:80:94:9b:6c:aa:85:7d:fd:10:3a:8a:2b:1f:9c:e5:
cd:80:83:37:77:8e:f7:01:17:e1:d0:64:fb:a3:6a:59:37:49:
f8:2f:eb:78:1d:cb:e9:cd:ff:75:61:b1:df:26:3f:5e:3e:de:
47:54:8d:95:30:08:5e:6e:41:28:3a:6b:e8:7b:be:fe:20:9d:
25:b8:2d:d8:22:3e:99:1a:a2:e6:5c:a7:70:52:c4:f3:ed:14:
bb:9a:1d:f7:ef:fb:e3:1f:f2:58:a6:46:1a:34:4a:60:1e:67:
98:56:41:cb:4a:82:e8:8a:e4:d1:48:28:b7:6c:8e:7f:79:4b:
07:de:78:01:e2:fb:cc:ab:ac:cd:83:9c:22:b8:f8:ee:58:35:
7c:51:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org