Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/NNg513-wNG52a-8rlTPzoCa2xy8.roa
File: NNg513-wNG52a-8rlTPzoCa2xy8.roa (raw, json)
Hash identifier: Kl8Hn4WQlPlFE2lRugp54H9tky/U5MiQmYBxxAcPXdg=
Subject key identifier: 34:D8:39:D7:7F:B0:34:6E:76:6B:EF:2B:95:33:F3:A0:26:B6:C7:2F
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 186A0478
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/NNg513-wNG52a-8rlTPzoCa2xy8.roa
Signing time: Sat 01 Jan 2022 15:57:38 +0000
ROA not before: Sat 01 Jan 2022 15:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62137
IP address blocks: 185.44.36.0/24 maxlen: 24
185.44.37.0/24 maxlen: 24
185.44.38.0/24 maxlen: 24
185.44.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409601144 (0x186a0478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Jan 1 15:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34d839d77fb0346e766bef2b9533f3a026b6c72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:5f:ca:62:f6:a9:3e:f9:3d:48:13:85:95:
9c:8b:e5:d8:f2:f3:84:61:d8:8e:de:67:64:51:8b:
0d:46:c4:46:43:bd:4d:a2:c0:bd:8c:0c:07:cb:f5:
20:36:16:a0:64:21:fb:df:ed:11:16:e6:86:d5:fa:
b7:86:f8:01:d7:f6:29:ce:62:14:50:2d:a1:f6:fe:
eb:23:bd:0d:91:e0:68:f1:d1:b2:e1:50:7b:df:24:
fb:28:07:32:7e:24:fe:54:47:d5:1e:11:c1:bf:3a:
12:ca:9e:34:dc:59:ba:61:bc:1f:4a:30:5b:e4:dc:
d8:dc:cf:f9:22:f6:af:9e:3d:0f:a9:e1:44:aa:3a:
b3:07:4e:a1:5b:7a:5e:a1:35:b7:0e:5c:87:e7:e9:
7f:8e:b4:7a:13:a9:46:af:ea:21:ad:1a:e5:5b:2c:
cf:f5:f7:a8:f4:ff:ed:c8:cb:23:f6:56:de:9c:da:
70:4d:77:f5:fa:fa:8c:00:77:b9:f0:e7:4c:3a:e7:
89:f7:62:25:2c:ac:58:89:59:d0:9f:e3:fb:34:7d:
98:00:7a:5e:45:12:e4:73:85:83:a5:60:f0:ac:aa:
22:ba:e6:d2:b9:95:53:75:23:ed:e2:3c:cc:01:0b:
ad:57:01:ba:fe:85:76:2c:1f:16:e2:09:0c:51:fa:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D8:39:D7:7F:B0:34:6E:76:6B:EF:2B:95:33:F3:A0:26:B6:C7:2F
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/NNg513-wNG52a-8rlTPzoCa2xy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.36.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:dc:83:4e:2c:df:3e:b1:56:d2:28:80:5c:25:95:5f:e8:f4:
0e:84:27:f5:6a:9f:bd:a5:72:c2:d6:27:10:dc:36:81:a1:cc:
04:d0:ad:6f:98:59:93:f2:a4:c3:e4:39:4a:55:43:68:fd:58:
b8:57:cf:71:25:1c:91:e9:d0:ff:e6:3e:69:c3:15:b5:db:be:
45:b1:92:62:fe:2c:39:a8:ab:42:b2:2a:68:16:cd:76:f8:59:
07:ff:f8:46:d7:37:f7:a9:0e:c1:bf:dd:33:b7:42:d0:6f:1a:
65:a5:1b:a1:9e:6d:fd:73:0d:79:50:43:1d:31:1e:53:4d:d9:
0a:d8:11:c9:c1:f9:6f:06:bf:2f:cb:d4:05:aa:a0:b2:42:e9:
2e:d8:d4:d2:28:2f:8b:5a:42:36:13:f6:26:90:da:63:d7:eb:
5a:57:a1:2d:e3:9b:40:19:14:fa:5b:64:89:a3:b4:82:7f:56:
bf:e4:3b:f8:b3:e8:eb:8a:40:fb:8b:6c:d8:aa:ff:76:19:4a:
a4:05:b2:36:74:c3:be:2b:9a:64:26:09:f4:a8:e7:f7:68:71:
d4:e0:8c:06:c5:c9:d1:85:16:8a:87:43:f9:84:51:a7:43:47:
0f:65:e2:53:84:05:6e:db:aa:d8:df:6a:2d:d4:16:56:d4:49:
3f:66:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org