Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/N9P34eAFrmxZb4AKYftr_N68c6I.roa
File: N9P34eAFrmxZb4AKYftr_N68c6I.roa (raw, json)
Hash identifier: PlNeogEO6HOL80enozJdettI6GgxGSTgtNgwPPJjdUE=
Subject key identifier: 37:D3:F7:E1:E0:05:AE:6C:59:6F:80:0A:61:FB:6B:FC:DE:BC:73:A2
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 05EDEA93
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/N9P34eAFrmxZb4AKYftr_N68c6I.roa
Signing time: Sat 01 Jan 2022 03:56:57 +0000
ROA not before: Sat 01 Jan 2022 03:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207242
IP address blocks: 185.195.84.0/22 maxlen: 22
185.162.24.0/22 maxlen: 22
185.194.44.0/22 maxlen: 22
185.195.224.0/22 maxlen: 22
185.242.72.0/22 maxlen: 22
2a0a:5f40::/32 maxlen: 32
2a0c:c380::/32 maxlen: 32
2a07:ca40::/29 maxlen: 29
2a0a:5640::/32 maxlen: 32
2a0a:4440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99478163 (0x5edea93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Jan 1 03:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37d3f7e1e005ae6c596f800a61fb6bfcdebc73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:fe:89:6b:05:46:56:16:30:c6:68:4a:06:
a2:fa:46:bc:ac:40:a8:d1:60:ad:47:37:fa:2b:15:
94:a4:d6:6d:f4:a7:21:9e:ef:4b:e2:d0:40:f3:cc:
70:7a:2a:22:20:ac:b2:f6:f9:35:b8:71:4f:4d:eb:
9e:94:75:67:1d:2c:dd:34:b8:78:8e:46:47:e7:70:
bb:22:0f:22:22:01:b6:a1:0a:8b:3f:1c:e0:0b:db:
ed:f4:36:1d:95:d9:d4:37:40:d7:b2:c3:19:49:dd:
d1:8b:36:89:90:df:f6:39:77:ec:67:cf:57:3e:16:
29:a2:16:be:7c:e4:ee:7d:c9:5e:7f:8d:d9:cf:79:
8d:89:3f:63:ad:9b:ee:b0:99:c1:86:ca:3d:09:f8:
62:32:96:7f:e2:8a:28:ee:0d:b1:70:5e:37:c9:2f:
0f:4e:bc:46:83:01:ce:0e:e9:fd:03:54:4e:25:f1:
94:4d:b7:cb:6a:ae:ee:72:db:bf:ef:02:39:11:5a:
8d:fe:b2:d5:7d:a7:9f:9e:e5:08:b6:6d:ba:ed:d3:
22:4b:6f:1e:85:fa:10:a1:5d:c7:a6:8a:8a:8f:e9:
0f:14:94:33:9e:05:9e:14:1e:dd:50:98:05:51:0e:
91:0c:6d:a3:56:cd:9e:d5:e3:fc:d9:3c:1a:6e:bb:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:F7:E1:E0:05:AE:6C:59:6F:80:0A:61:FB:6B:FC:DE:BC:73:A2
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/N9P34eAFrmxZb4AKYftr_N68c6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.24.0/22
185.194.44.0/22
185.195.84.0/22
185.195.224.0/22
185.242.72.0/22
IPv6:
2a07:ca40::/29
2a0a:4440::/32
2a0a:5640::/32
2a0a:5f40::/32
2a0c:c380::/32
Signature Algorithm: sha256WithRSAEncryption
61:6b:14:1b:3b:0a:d0:bf:99:e6:b3:91:fe:af:93:85:05:f6:
0c:04:3a:1f:18:0a:0c:4b:f5:d2:10:e8:fc:73:4e:d7:db:06:
19:e1:d5:46:57:9b:1b:0a:b6:12:f6:5e:1c:cc:2b:09:30:47:
07:f2:23:e1:9d:28:3f:36:4c:4c:fb:67:74:07:8a:07:48:7c:
37:a0:f2:f4:0e:5f:a2:7c:05:48:89:75:24:28:65:4d:be:44:
b9:71:a2:93:3e:f2:c2:7a:44:71:5c:96:8b:8c:ea:bb:9e:ce:
ca:95:6f:03:24:a2:a4:36:63:cc:a2:a3:ed:44:a2:95:bd:98:
88:7b:6b:be:71:55:5d:e7:50:7e:d9:95:b5:68:4f:68:c1:07:
ee:14:02:d6:62:5a:84:02:18:ea:ab:70:e5:0b:18:8e:a5:12:
6e:7d:a3:6e:bb:d5:09:e5:f1:99:c8:0d:b1:50:f1:b5:5c:bb:
6d:eb:13:9c:b1:a1:9b:a2:eb:43:8e:9a:64:6a:e6:b9:0b:2b:
ee:29:ee:7a:09:42:be:a9:fc:fa:26:0d:b5:9a:2b:1f:8b:33:
d2:b0:7c:f1:a7:e4:6c:4f:d3:7e:38:a0:87:6f:6f:a7:1e:53:
b4:2c:e7:ff:3b:9c:75:52:9d:45:d7:e5:ab:07:f5:31:1d:91:
8a:cb:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org