Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/NsM05SwPdHfmedx7qi9YnAMR9JY.roa
File: NsM05SwPdHfmedx7qi9YnAMR9JY.roa (raw, json)
Hash identifier: IekCfUVOTjV5PHWy4FVYM0tv2xaI3HlBUgNp4OoMF8E=
Subject key identifier: 36:C3:34:E5:2C:0F:74:77:E6:79:DC:7B:AA:2F:58:9C:03:11:F4:96
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 07C50ACC
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/NsM05SwPdHfmedx7qi9YnAMR9JY.roa
Signing time: Tue 17 May 2022 15:52:29 +0000
ROA not before: Tue 17 May 2022 15:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.15.96.0/22 maxlen: 24
188.209.128.0/20 maxlen: 24
188.209.136.0/22 maxlen: 24
45.11.190.0/23 maxlen: 24
185.83.200.0/22 maxlen: 24
45.154.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130353868 (0x7c50acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 17 15:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36c334e52c0f7477e679dc7baa2f589c0311f496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:a9:e6:04:10:6c:a7:6d:24:fd:93:11:8d:
86:ea:8a:79:12:57:5d:83:7a:33:dc:4a:29:ee:d5:
74:ea:7d:40:0d:ff:50:44:39:3c:a9:23:70:97:b1:
fa:5e:04:c0:e7:03:34:3b:af:7e:b0:6e:bd:da:ce:
ef:75:d8:80:e3:8e:81:17:e7:88:88:ac:c6:64:fe:
4a:88:29:e2:d3:28:9b:39:e3:8a:b8:b6:85:a5:df:
07:4a:ef:43:20:07:60:a2:27:c8:6c:d0:21:a9:35:
95:46:14:ed:9b:a8:ec:f2:ca:3f:08:0c:07:31:da:
b7:9a:36:42:2d:32:55:f0:f7:76:b3:e8:b5:56:22:
ca:6e:eb:35:39:2c:e6:aa:2d:87:69:b3:51:81:b8:
04:55:d0:b2:65:a1:17:4a:a0:89:4c:cc:f4:22:bd:
9d:22:1b:81:56:d6:c6:0a:64:93:49:8f:89:ea:59:
68:b5:22:10:37:fd:06:5a:b4:7a:08:84:8b:2c:c4:
15:34:d9:a0:24:9f:ae:f5:42:4b:5c:ca:7b:09:eb:
91:a3:2a:eb:44:97:b3:42:11:7f:be:a1:99:26:29:
e8:32:6d:42:b4:3d:88:3a:59:77:90:1f:80:84:97:
38:cb:0e:7a:bb:c3:14:56:2d:2e:8b:6f:3e:63:f2:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:34:E5:2C:0F:74:77:E6:79:DC:7B:AA:2F:58:9C:03:11:F4:96
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/NsM05SwPdHfmedx7qi9YnAMR9JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/23
45.154.156.0/22
185.83.200.0/22
188.209.128.0/20
194.15.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:85:5b:07:8e:f5:5d:7c:ac:59:ff:3b:d4:99:73:31:bc:5d:
a8:2f:0c:b2:79:5b:2d:80:a6:43:f9:31:1a:e7:ec:00:76:86:
92:72:c6:b4:91:ec:22:b1:e3:91:3e:10:52:3c:17:50:aa:8e:
3b:ef:24:52:1a:12:b1:6b:07:41:b2:15:76:81:db:c5:fa:80:
c2:e1:56:e7:1a:a3:7f:1d:c6:d1:de:55:49:80:60:d3:b5:4d:
31:65:67:0f:71:6b:6c:f4:65:41:b3:99:f1:51:e1:a0:d6:6b:
a2:6c:c2:8a:a6:c4:a4:c5:0a:0d:ff:76:af:53:74:82:9e:4e:
56:31:44:86:e9:93:7c:61:87:78:42:92:10:1e:89:ce:42:67:
34:71:c9:15:d5:d5:55:ee:fe:ec:55:55:4a:8f:e6:dd:ed:65:
a7:4d:68:a5:7f:16:39:46:21:29:5d:99:bf:b3:2e:7c:ba:31:
5c:6f:db:d8:0a:33:3e:9b:e4:bc:a0:88:b3:d1:0c:d3:d0:99:
5f:8a:11:95:a2:b6:c6:dd:e1:7c:d6:c1:28:41:bf:d5:f8:c4:
6b:6e:ca:3a:d2:89:06:e5:38:88:09:8d:da:58:75:b3:4c:46:
5e:8b:32:6e:ff:57:65:56:b4:12:e2:1b:30:d7:aa:54:f5:4d:
89:0f:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org