Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NqZHq_jT2AQIdgIJp4qIUqnlU6A.roa
File: NqZHq_jT2AQIdgIJp4qIUqnlU6A.roa (raw, json)
Hash identifier: u/4v2tK2JT6Pmq8EsSAyg2B2nzYi0YVV+zlgzOUtYag=
Subject key identifier: 36:A6:47:AB:F8:D3:D8:04:08:76:02:09:A7:8A:88:52:A9:E5:53:A0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07665525
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NqZHq_jT2AQIdgIJp4qIUqnlU6A.roa
Signing time: Wed 02 Feb 2022 15:49:45 +0000
ROA not before: Wed 02 Feb 2022 15:49:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124146981 (0x7665525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 2 15:49:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36a647abf8d3d80408760209a78a8852a9e553a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:59:6f:9d:a5:f4:50:07:0d:f2:ce:c3:99:
85:6d:84:77:5e:e0:a6:0d:32:f9:74:dc:be:37:83:
b5:a7:4d:13:50:ec:1f:9b:6b:1c:3e:41:5f:91:0a:
4e:01:d2:2e:6c:37:29:00:e5:2a:76:7e:0f:39:99:
a3:c0:b1:90:fc:6b:98:d3:45:5d:d9:a8:43:72:b8:
23:78:38:14:36:0a:20:51:56:33:9f:22:84:3a:0b:
6f:5a:72:ab:dc:5a:31:57:19:af:a3:37:75:49:7a:
b3:af:f3:e0:fd:92:4b:c4:2d:df:9e:d1:be:f7:97:
ca:40:be:85:bb:cc:db:b5:ab:21:0b:2f:d2:bb:83:
6a:89:39:bf:df:d9:3d:0c:77:6f:77:31:f7:f1:a2:
1d:20:20:b8:9b:a5:58:f2:5c:25:b4:52:1a:64:91:
16:41:00:54:ff:d4:90:e4:ea:49:24:05:1d:bb:17:
94:2d:e6:6c:5d:05:29:d4:2d:33:83:de:27:7d:7e:
01:42:fd:c1:77:87:90:4a:57:15:78:42:41:08:7e:
7e:dc:bb:66:a2:12:5e:d6:43:76:55:bd:0b:5d:46:
f3:fd:4a:4d:e4:3b:43:53:9a:e7:26:a5:fa:11:f9:
b9:a6:f9:34:4b:b0:54:72:54:e9:44:6f:be:0f:f2:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A6:47:AB:F8:D3:D8:04:08:76:02:09:A7:8A:88:52:A9:E5:53:A0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NqZHq_jT2AQIdgIJp4qIUqnlU6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.88.137.0/24
45.88.139.0/24
45.144.212.0/23
77.83.37.0/24
85.209.120.0/24
85.209.122.0/23
185.43.248.0/23
185.43.251.0/24
185.200.62.0/24
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.93.0/24
195.177.95.0/24
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
0e:8f:24:c5:d3:44:6c:e5:af:93:80:e7:6d:ae:29:fa:42:b1:
a8:e6:75:07:e6:65:65:c0:7c:3b:f6:7a:6e:89:63:59:f8:85:
04:ea:25:1b:fd:7e:9e:f0:e1:ca:1b:e7:53:19:39:36:9b:8e:
1f:87:db:16:8b:ee:01:3f:d4:57:5a:79:04:9a:08:d4:e7:cb:
cd:73:c7:eb:36:d1:35:4c:39:cf:ad:f4:b2:08:4f:79:e8:7f:
d5:2b:de:fc:84:ab:27:c9:04:e2:79:76:35:33:3e:df:ad:14:
95:dc:9e:6e:52:c7:de:91:e0:db:34:bb:c3:4e:b0:eb:85:97:
dc:2d:da:b4:27:ca:04:9c:ad:e1:9c:b6:ba:6a:79:f3:a0:25:
07:e3:fc:ba:21:2a:d6:99:a6:6c:e4:23:8f:e5:29:40:86:f7:
bc:16:89:04:65:67:ad:b0:5a:b4:8c:c3:a6:58:bf:34:4f:db:
94:ae:76:42:de:16:53:4f:c7:49:ac:b3:8a:7f:ad:1c:10:6c:
2c:e2:8d:87:37:69:55:b0:ad:f6:23:a7:60:c2:87:8c:97:65:
77:76:16:de:d5:d1:15:cf:af:dd:c0:d9:a9:e5:da:6e:ab:f2:
e7:5d:c1:27:96:7a:55:8a:94:65:56:4e:13:6a:af:f9:62:78:
ed:54:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org