Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cnrfo0o8PhYRnsmgVxpQrIS6Gy8.roa
File: cnrfo0o8PhYRnsmgVxpQrIS6Gy8.roa (raw, json)
Hash identifier: XHdI3Kg2IsaOBTnVKbQzVLUSt4bgnilXHK1b1R736Fs=
Subject key identifier: 72:7A:DF:A3:4A:3C:3E:16:11:9E:C9:A0:57:1A:50:AC:84:BA:1B:2F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1D6AA353
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cnrfo0o8PhYRnsmgVxpQrIS6Gy8.roa
Signing time: Wed 25 May 2022 16:27:51 +0000
ROA not before: Wed 25 May 2022 16:27:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3561
IP address blocks: 77.36.112.0/21 maxlen: 24
93.120.96.0/22 maxlen: 22
46.151.36.0/22 maxlen: 24
188.191.252.0/22 maxlen: 24
77.36.68.0/22 maxlen: 24
93.120.24.0/23 maxlen: 24
91.237.44.0/22 maxlen: 24
194.33.102.0/23 maxlen: 24
194.33.100.0/22 maxlen: 24
194.33.100.0/23 maxlen: 24
91.224.40.0/24 maxlen: 24
81.161.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493527891 (0x1d6aa353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 25 16:27:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=727adfa34a3c3e16119ec9a0571a50ac84ba1b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:99:55:02:a8:24:82:76:ce:ef:4c:31:19:
f9:ea:eb:9e:2c:60:5a:08:a2:b2:9e:68:90:f9:f4:
fb:25:2a:b1:ca:99:05:42:3b:27:20:10:5a:04:0e:
19:51:89:33:fb:c0:57:d5:6f:52:09:27:ec:82:7c:
64:3a:a5:ef:c5:29:0a:b7:94:cb:b1:ab:17:86:08:
89:41:94:df:18:9e:dd:b8:95:24:86:47:fd:bf:58:
88:f5:c2:1a:cc:24:9f:ac:6c:57:75:9c:ad:3a:b8:
c2:2c:e0:ae:61:b9:61:a6:4e:38:e6:c8:77:95:c1:
4f:35:09:35:49:5c:c1:92:16:c6:03:55:c8:e4:b7:
45:a4:3b:6b:3a:fc:6f:6b:43:3f:0c:b8:4c:1e:58:
39:f4:ec:eb:65:db:e8:da:27:6a:cb:ad:35:64:96:
71:8f:67:eb:2f:50:83:b5:ca:b2:ab:0e:9d:e6:c4:
b8:c2:56:5d:4a:10:16:3d:b9:32:0d:3f:31:a0:09:
a3:01:80:15:07:64:e0:d4:f3:81:1f:bf:b6:c4:47:
87:39:d2:e0:c4:95:c6:dd:e9:71:75:e8:63:4c:dd:
02:f1:d3:ae:d9:5a:9a:f4:3e:08:69:d1:8c:a9:4a:
e8:5e:7b:ec:4d:6f:8b:52:48:f9:43:5d:f4:d7:36:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7A:DF:A3:4A:3C:3E:16:11:9E:C9:A0:57:1A:50:AC:84:BA:1B:2F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/cnrfo0o8PhYRnsmgVxpQrIS6Gy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.36.0/22
77.36.68.0/22
77.36.112.0/21
81.161.4.0/22
91.224.40.0/24
91.237.44.0/22
93.120.24.0/23
93.120.96.0/22
188.191.252.0/22
194.33.100.0/22
Signature Algorithm: sha256WithRSAEncryption
27:1a:14:3b:1d:14:7d:b1:53:90:e2:b7:20:d6:38:cf:68:cc:
e6:66:26:e2:96:57:cf:8f:79:96:24:4f:a8:74:f2:25:d5:55:
bb:c9:17:ec:6e:a0:07:16:95:a3:48:bd:33:b3:06:c1:22:a6:
27:a4:18:3d:e0:46:03:b3:13:62:7b:cc:52:71:13:d9:c9:d5:
a2:25:d4:fa:09:54:80:46:93:fe:bf:02:38:97:a7:ff:df:e3:
dd:bc:0c:21:7a:7f:c5:74:61:8d:3e:d4:e4:95:aa:a0:a6:58:
72:92:26:cb:8d:ee:37:d6:26:6d:f1:e4:58:b7:46:2e:5e:75:
f1:56:ff:42:71:d0:81:dd:ca:20:42:6d:b9:e0:30:23:cb:40:
41:92:41:fb:3d:64:d5:16:0d:ad:f4:f0:52:0a:a9:c7:f4:59:
87:bc:7f:2a:6e:af:95:fb:85:0e:1e:aa:ab:40:6b:45:6b:a9:
69:73:ae:53:fd:ae:ed:47:ed:00:0f:00:98:9c:f6:64:18:cc:
54:1a:e4:6b:40:df:2c:bc:95:c8:49:c2:49:f7:4e:f0:b6:51:
01:36:f0:b1:70:e4:fa:ea:25:f3:34:17:3a:52:c4:c7:ff:1f:
04:d7:86:35:4c:ab:d9:c0:0f:a6:97:e3:01:e8:b7:be:c3:23:
88:63:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org