Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/NwzrIKfoDdz8IaivdSqexa3DknY.roa
File: NwzrIKfoDdz8IaivdSqexa3DknY.roa (raw, json)
Hash identifier: Qfm6Glk4J/ED53i50410nxQc1lKh3yg/mNckM1imkFU=
Subject key identifier: 37:0C:EB:20:A7:E8:0D:DC:FC:21:A8:AF:75:2A:9E:C5:AD:C3:92:76
Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial: 01827DCED2F34FAC2974A99D366EC566FA8C
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/NwzrIKfoDdz8IaivdSqexa3DknY.roa
Signing time: Mon 08 Aug 2022 14:14:42 +0000
ROA not before: Mon 08 Aug 2022 14:14:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51086
IP address blocks: 194.28.240.0/22 maxlen: 22
194.28.240.0/24 maxlen: 24
194.28.243.0/24 maxlen: 24
194.28.242.0/24 maxlen: 24
194.28.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:ce:d2:f3:4f:ac:29:74:a9:9d:36:6e:c5:66:fa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
Validity
Not Before: Aug 8 14:14:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=370ceb20a7e80ddcfc21a8af752a9ec5adc39276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:6b:3b:5b:30:3c:13:fe:5b:1f:aa:a8:81:
47:4f:f7:21:b8:4a:3d:44:fe:27:dc:ca:79:06:f7:
2a:92:1b:1d:95:b9:fc:71:dd:b9:21:ca:15:9b:20:
b3:b7:7e:28:d7:1f:b0:71:7e:17:df:aa:e0:68:93:
07:67:b7:64:48:7d:b9:51:eb:a2:50:ce:20:b8:57:
3e:5e:e3:42:51:b1:61:ba:28:75:22:57:aa:59:27:
5c:47:ea:a6:54:ab:da:82:84:62:04:59:5e:7c:29:
50:d0:e1:80:a3:69:6f:de:f2:bd:9b:6f:3a:58:e4:
79:f6:60:05:8e:bb:8b:4f:94:65:dc:68:2e:aa:a2:
22:e6:a9:7a:e5:90:5c:e2:b6:29:2f:1a:2b:ce:70:
6d:5e:67:19:0c:d1:b2:1f:0b:d7:f5:bc:51:10:9c:
98:90:db:0a:7f:18:6f:7f:b9:ea:59:74:a8:04:4a:
50:4b:02:10:03:b5:ac:cc:44:7a:4a:f1:a0:9e:13:
4d:b5:71:87:16:0a:fe:7a:ae:cc:52:7a:56:67:a7:
ab:91:42:01:ed:31:74:65:9e:d5:7c:54:61:e0:ba:
e2:b5:d7:1b:bf:8a:8a:f4:01:5d:3d:81:48:ce:d8:
70:fa:d6:79:da:93:6c:3e:eb:9f:13:d0:ff:d7:fa:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:EB:20:A7:E8:0D:DC:FC:21:A8:AF:75:2A:9E:C5:AD:C3:92:76
X509v3 Authority Key Identifier:
keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/NwzrIKfoDdz8IaivdSqexa3DknY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.240.0/22
Signature Algorithm: sha256WithRSAEncryption
72:4b:b6:71:0e:48:7c:bc:b8:06:7e:52:36:d6:ad:94:d5:ef:
02:5b:63:0b:1c:c7:0b:db:4d:e7:0a:db:f3:b4:87:70:33:47:
bd:41:bc:fb:e3:b6:cf:bb:87:d4:9a:a9:22:02:81:94:c3:d5:
13:8c:7f:ba:ab:12:f5:6b:89:c3:c5:f2:14:0e:d5:85:7d:f0:
eb:b5:25:90:32:60:ce:c0:a8:7b:15:c9:dc:98:62:84:9f:55:
68:a4:c1:94:33:0e:83:06:e6:a5:c9:07:6d:01:59:11:13:ce:
9b:86:4b:5c:27:0f:85:71:3f:0d:85:6b:d4:aa:c4:ca:87:02:
e1:be:2d:2e:46:16:b3:25:6f:ab:c3:89:b2:34:9f:e4:97:3a:
32:10:5e:46:2c:8a:91:ef:4e:48:90:0a:b2:aa:48:68:34:d1:
40:5d:2b:8c:e3:15:62:2e:a7:d8:60:3d:e5:0a:d5:93:32:b3:
07:25:2c:3a:b6:d7:a4:5b:3a:c3:f3:0a:f4:d0:57:8c:96:21:
49:07:b4:65:62:1c:dc:75:c9:1c:84:cf:21:95:0e:49:e3:a1:
41:fc:13:fe:e3:64:a6:d9:ed:40:50:0b:45:69:87:2d:c2:13:
21:db:ae:b9:e8:aa:d2:7b:1c:e5:45:75:fc:d7:d5:20:14:c9:
07:45:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:50 2025 by rpki-client