Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Nnqqe8RVEghdcnNWpr9qDpGQwz8.roa
File: Nnqqe8RVEghdcnNWpr9qDpGQwz8.roa (raw, json)
Hash identifier: 3gPwFhCxUCr0EhxndmLWJlEiNULzJT3sOdVb21BNVYQ=
Subject key identifier: 36:7A:AA:7B:C4:55:12:08:5D:72:73:56:A6:BF:6A:0E:91:90:C3:3F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018221CDAC6B79D1B067AD0F93B93B3F561B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Nnqqe8RVEghdcnNWpr9qDpGQwz8.roa
Signing time: Thu 21 Jul 2022 17:28:23 +0000
ROA not before: Thu 21 Jul 2022 17:28:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41171
IP address blocks: 193.37.200.0/22 maxlen: 22
212.90.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:cd:ac:6b:79:d1:b0:67:ad:0f:93:b9:3b:3f:56:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 21 17:28:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=367aaa7bc45512085d727356a6bf6a0e9190c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:d6:0d:6b:59:48:ca:bc:08:ec:ed:47:4f:
f0:d2:be:0c:13:47:9d:cb:d0:01:a0:4d:41:b2:6f:
44:e4:3c:36:0d:9f:1a:b3:c0:18:7f:33:d1:59:79:
86:c5:04:7a:b6:24:50:c3:c5:9e:37:1f:59:cb:a6:
e8:ad:12:bf:1d:d6:8b:84:c0:08:c0:ee:bc:a3:5d:
2b:4a:4b:a3:85:73:91:52:a7:c5:cd:7e:1c:71:0f:
4a:3f:e8:eb:1f:41:92:2e:f7:b8:ee:4e:eb:39:e7:
86:e6:90:fc:f9:aa:ec:6c:05:b3:d7:29:b5:b3:ad:
10:3e:6d:63:62:7d:72:d5:43:75:b4:2e:27:0f:10:
22:7d:da:c0:68:52:3b:ae:55:2f:de:f8:c9:e1:a1:
1a:de:35:54:8e:25:93:21:8e:51:29:95:35:6d:79:
ff:65:27:70:1c:0d:9e:f9:56:2d:63:65:f9:55:63:
a7:b6:18:02:d2:e4:ee:e5:63:1d:45:8b:e0:e6:3d:
dc:cc:7f:d0:b2:e4:50:4c:94:f5:63:84:59:16:8b:
73:6c:34:1a:ed:a9:da:d3:41:a5:43:44:ac:d2:a2:
85:f1:6a:84:a2:e1:cf:d9:fc:cc:f9:31:a7:02:fa:
f5:37:62:b9:3b:a5:33:02:21:4b:5e:ae:b8:04:9d:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7A:AA:7B:C4:55:12:08:5D:72:73:56:A6:BF:6A:0E:91:90:C3:3F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Nnqqe8RVEghdcnNWpr9qDpGQwz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.200.0/22
212.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
89:59:e7:87:b3:74:34:06:7a:46:14:2e:9e:4c:ae:7a:2f:21:
8a:a3:23:7f:4a:5d:4c:17:16:df:da:e0:c1:d6:a6:0a:91:5f:
17:c7:b7:bd:b3:d6:d3:13:f3:40:3f:4a:e2:da:ac:6f:a0:d5:
49:a4:bd:50:16:31:15:16:d1:3d:23:2f:94:e2:dd:13:f4:91:
9b:b1:ff:59:bd:0f:52:25:d3:c5:45:77:9e:b5:2c:b7:3e:3d:
2e:a8:8a:66:d1:08:ca:9e:01:31:ad:ff:3b:bb:87:0d:8b:a5:
f0:52:97:9b:c7:d7:fe:ac:dd:28:07:d6:6e:ae:f0:f6:3f:6f:
44:d6:4e:3e:b5:9d:85:fc:09:01:3d:c3:d4:dd:a8:06:74:0c:
3f:8d:fe:be:13:93:19:73:86:51:6e:4a:07:c1:ca:c3:07:da:
b3:0a:52:8b:61:38:34:00:23:90:e5:a1:5f:d8:a8:42:ce:00:
f3:c6:c4:3c:f7:db:fe:fb:0c:1c:b4:6b:00:3d:cb:87:ca:48:
78:ff:41:7a:db:5c:32:b0:7f:24:4c:5b:51:fe:9a:3c:b0:63:
4b:18:5a:05:33:bb:f9:6e:c8:12:15:b0:fd:b3:fc:e0:79:d4:
1a:d7:da:fe:5f:f0:ef:20:b6:4f:a0:a2:74:97:05:97:72:45:
32:94:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org