Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/NwHqtmppU0rRJPLdS9hHRFoYmww.roa
File: NwHqtmppU0rRJPLdS9hHRFoYmww.roa (raw, json)
Hash identifier: AHQyjy2cImNIGeZ7P56YuEQAl/6F96rDVeE1PGZgXSk=
Subject key identifier: 37:01:EA:B6:6A:69:53:4A:D1:24:F2:DD:4B:D8:47:44:5A:18:9B:0C
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 11B62FB0
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/NwHqtmppU0rRJPLdS9hHRFoYmww.roa
Signing time: Sat 01 Jan 2022 01:58:30 +0000
ROA not before: Sat 01 Jan 2022 01:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25482
IP address blocks: 193.151.240.0/22 maxlen: 22
193.151.240.0/24 maxlen: 24
193.151.240.0/23 maxlen: 23
193.151.241.0/24 maxlen: 24
193.151.242.0/23 maxlen: 23
193.151.242.0/24 maxlen: 24
193.151.243.0/24 maxlen: 24
2001:678:2d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297152432 (0x11b62fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Jan 1 01:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3701eab66a69534ad124f2dd4bd847445a189b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:86:98:cc:41:18:88:13:1a:5b:c6:37:ca:
e9:24:d2:de:50:91:f0:8e:76:ed:09:d1:8b:f1:91:
74:b9:ca:5d:65:2f:a7:10:5d:83:9f:86:ed:91:81:
e1:35:f6:8b:9b:df:d4:15:df:26:08:54:83:63:e6:
68:2f:3b:51:ab:33:fb:5e:8c:65:9d:1c:b9:f3:89:
01:ce:63:52:09:6e:05:36:91:fe:ab:ec:c4:17:a4:
0b:7e:69:56:3a:3d:2e:2e:a9:1a:5d:f2:2b:c6:9f:
c6:fd:c9:5c:9d:0b:89:98:dd:cf:f0:a2:e5:ba:e6:
07:ad:39:af:30:33:fb:3d:8b:ee:3b:2a:5d:b3:ba:
9b:bc:bb:60:26:b4:9d:bb:80:79:9e:66:73:f6:3d:
cc:ba:dc:52:75:04:4d:17:c1:e5:c3:1d:b1:01:37:
d4:5f:93:46:3a:2a:8e:cb:72:39:50:b3:5a:3d:dd:
6c:fa:42:9d:2b:dd:be:26:56:40:59:2a:50:0f:ac:
cf:99:96:cd:29:22:ca:b1:8d:3f:4b:6c:11:29:73:
7e:b9:47:25:d9:08:c2:0c:c8:a8:dc:60:3c:1f:bc:
d0:e9:fc:c7:44:11:84:24:d4:59:27:c9:6d:e9:a1:
ee:d5:6a:69:42:f8:09:bd:a4:59:2d:42:d8:71:55:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:EA:B6:6A:69:53:4A:D1:24:F2:DD:4B:D8:47:44:5A:18:9B:0C
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/NwHqtmppU0rRJPLdS9hHRFoYmww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.240.0/22
IPv6:
2001:678:2d0::/48
Signature Algorithm: sha256WithRSAEncryption
55:89:d2:84:a2:c8:82:8d:97:1a:d3:eb:9f:ea:6c:49:da:0d:
2d:35:3f:25:ae:a6:33:cd:bf:12:a7:cf:12:5f:d9:79:90:e7:
68:43:eb:af:ca:fc:10:1f:46:88:50:49:ab:9b:ee:5f:dc:d5:
b3:92:18:c8:17:f9:3e:e1:6b:fd:22:23:fd:65:78:7f:e3:ae:
7a:59:52:bc:dc:06:9b:86:05:2f:98:b0:99:7c:12:7e:36:ef:
2e:76:74:a8:39:60:c4:d0:c3:f9:c3:ed:66:90:bc:6e:52:df:
ef:0d:18:4a:eb:f4:a7:ac:c8:92:74:24:3c:37:28:ae:37:71:
49:2b:ae:da:3b:31:01:88:a8:aa:4a:da:ca:4e:84:c1:e8:4d:
43:33:f9:1a:1f:2e:62:2d:ec:86:c6:ef:7b:0e:c0:e4:e8:59:
25:22:00:a0:02:a3:e3:8a:44:f4:8f:6e:2d:a2:99:c0:a4:7b:
f1:d9:95:d8:d7:00:d4:9f:25:d3:77:bf:fa:4e:be:2c:17:c8:
ec:78:a9:f3:59:f9:32:89:04:e1:c3:81:0d:b8:7f:c9:5b:fa:
bc:1d:87:f2:c0:82:09:f8:2c:7e:70:cd:20:bb:41:2e:3a:5f:
1c:fa:f6:a0:62:40:46:54:34:11:4e:e3:cb:0f:f1:4f:62:8b:
78:69:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:18 2023 by rpki-client on console-fra.rpki-client.org