Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/NbuVK4QTkO4wvXq0-TIGbtsbQXw.roa
File: NbuVK4QTkO4wvXq0-TIGbtsbQXw.roa (raw, json)
Hash identifier: sdI82WGA0b3Fe8D0oZqhxJO7TwmnJaumb0xFRomqyDo=
Subject key identifier: 35:BB:95:2B:84:13:90:EE:30:BD:7A:B4:F9:32:06:6E:DB:1B:41:7C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 12B25935
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/NbuVK4QTkO4wvXq0-TIGbtsbQXw.roa
Signing time: Sat 01 Jan 2022 08:59:24 +0000
ROA not before: Sat 01 Jan 2022 08:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48579
IP address blocks: 185.141.30.0/23 maxlen: 24
217.61.244.0/22 maxlen: 24
185.24.132.0/22 maxlen: 24
212.237.144.0/22 maxlen: 24
91.197.40.0/22 maxlen: 24
212.237.148.0/22 maxlen: 24
2a07:2180::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313678133 (0x12b25935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jan 1 08:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35bb952b841390ee30bd7ab4f932066edb1b417c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:64:5f:df:79:88:de:a5:69:ac:73:9d:e1:
94:92:9f:ae:ae:d2:b5:c7:57:7d:40:3d:09:5e:4a:
31:a3:1d:5a:39:d2:ec:0e:48:46:77:e2:c6:bc:1b:
cc:52:2f:52:d2:13:5c:64:98:ec:be:56:28:09:8b:
a9:7c:12:40:c2:c6:38:a2:29:cb:e9:1c:f5:5e:c3:
cd:a9:70:26:a1:55:bb:ed:65:ee:20:0f:6f:21:a2:
4a:c1:c5:91:0a:ad:d2:91:01:da:6f:d8:4b:45:db:
e4:bc:26:5c:aa:c5:54:a5:29:25:a5:01:ab:3f:64:
82:fa:3d:5e:92:a0:a7:ba:42:67:b0:e5:c5:92:97:
1a:96:4b:6f:bc:9b:82:58:cd:53:5b:67:ac:a0:1a:
01:20:27:cb:b4:13:23:eb:3f:2a:4e:6d:35:e7:e8:
00:8c:9e:c2:34:26:1b:77:a7:70:e9:31:9f:c0:dc:
7b:c6:48:41:f1:ef:62:8f:ac:f5:3a:86:ab:5b:e1:
4f:48:26:67:cf:65:21:3f:5d:08:24:1e:dd:6a:3f:
ec:1c:23:28:f7:f0:6a:5c:90:a5:b9:db:3a:44:7a:
31:ed:9f:ae:a9:b0:c1:1b:8e:d9:90:71:ea:fe:ef:
b8:4a:12:87:95:15:7a:9a:ef:38:d7:4f:3e:5c:97:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:95:2B:84:13:90:EE:30:BD:7A:B4:F9:32:06:6E:DB:1B:41:7C
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/NbuVK4QTkO4wvXq0-TIGbtsbQXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.40.0/22
185.24.132.0/22
185.141.30.0/23
212.237.144.0/21
217.61.244.0/22
IPv6:
2a07:2180::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f3:f7:84:6d:66:64:02:2e:69:1b:8b:b9:4a:9c:03:82:af:
28:b6:d9:38:fe:cf:60:13:bb:88:7d:2f:fc:a7:92:33:41:64:
06:26:40:91:8e:c0:e3:09:76:09:98:a4:e5:49:48:14:76:e7:
cb:53:fb:9c:4f:7a:86:39:9a:f1:42:bf:58:f6:73:e1:af:d3:
24:15:23:3f:66:bf:ff:c2:a2:53:89:3f:ca:43:9f:ee:87:ec:
4e:29:83:fe:aa:66:cf:d3:5b:3f:5a:4b:d1:91:ed:bf:c1:0d:
bf:e8:8d:90:cf:25:f2:68:c4:d0:7c:31:be:4c:ac:e7:f9:e2:
67:13:88:86:5c:60:f0:d4:3a:51:84:53:79:11:d0:55:13:e0:
b9:81:1c:70:4b:82:5b:9a:f7:bb:ad:64:71:14:ec:6a:6c:5e:
b2:44:cb:de:4d:cd:fe:f2:75:02:da:7d:61:1b:87:71:ef:17:
3f:59:5f:b1:87:05:fa:08:dc:92:84:33:69:ec:35:16:5f:71:
d2:55:28:6e:41:96:76:53:2e:8b:62:e9:e4:6f:77:0b:9d:66:
60:e5:9b:2e:a6:2e:cf:b6:e0:8f:f9:e9:24:bd:ca:7f:be:6a:
43:9e:9a:a0:4f:4e:80:7c:d6:e1:f5:6a:c1:aa:c1:6e:90:ae:
05:7e:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:54 2024 by rpki-client on console-ams.rpki-client.org