Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/NoVPsbAEYStk00-B2uvJWmCjKbY.roa
File: NoVPsbAEYStk00-B2uvJWmCjKbY.roa (raw, json)
Hash identifier: NJ2RyDbJ0A7LU2b+dv6UQ89qzPWs37fMb3KKkKc5nco=
Subject key identifier: 36:85:4F:B1:B0:04:61:2B:64:D3:4F:81:DA:EB:C9:5A:60:A3:29:B6
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 03804DA6
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/NoVPsbAEYStk00-B2uvJWmCjKbY.roa
Signing time: Fri 11 Feb 2022 20:40:28 +0000
ROA not before: Fri 11 Feb 2022 20:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50214
IP address blocks: 185.12.125.0/24 maxlen: 24
185.12.124.0/24 maxlen: 24
185.12.126.0/24 maxlen: 24
185.12.127.0/24 maxlen: 24
95.181.152.0/24 maxlen: 24
95.181.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58740134 (0x3804da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Feb 11 20:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36854fb1b004612b64d34f81daebc95a60a329b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:cc:80:a1:59:b9:a8:da:de:83:6a:ca:9e:
c0:8c:98:60:9f:de:f7:c8:5a:f1:84:64:83:8f:6b:
2a:11:e0:65:1a:ff:78:5a:5d:8c:12:44:39:ee:a2:
aa:fa:e0:04:b0:36:94:7e:e3:11:14:58:b8:95:16:
e9:ed:7b:9f:1c:ec:20:37:15:58:8b:0b:e1:fa:40:
1e:59:d7:27:ea:f0:89:45:55:e6:63:40:67:68:95:
c9:9f:31:d7:95:cf:2b:00:63:43:d2:15:1e:8f:36:
9c:b3:9c:3a:3a:9c:43:e8:01:ba:0a:17:9e:89:76:
e2:3e:2a:53:80:a5:6a:5a:7c:ea:38:3c:44:55:48:
c5:af:0e:a1:10:c4:ad:19:dd:e0:08:b1:bd:35:4e:
dd:b7:3d:38:3e:e9:f1:bc:a9:c1:7c:71:83:e1:52:
0b:76:f3:d7:2d:c5:db:5b:f0:b6:a8:2f:66:10:5a:
47:f9:a2:a4:a7:0d:47:6f:d6:93:01:37:9b:11:55:
d4:38:26:45:92:4c:84:3d:bc:b3:f6:39:3b:8c:cf:
b1:ed:69:92:f7:b8:e3:c7:4e:b9:11:00:04:d9:03:
67:d4:2d:56:40:18:83:23:4e:d7:7d:d9:4c:cd:71:
c6:33:68:f9:5a:ae:79:6d:82:05:d9:bf:69:ec:f7:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:4F:B1:B0:04:61:2B:64:D3:4F:81:DA:EB:C9:5A:60:A3:29:B6
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/NoVPsbAEYStk00-B2uvJWmCjKbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.152.0/24
95.181.171.0/24
185.12.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:ea:14:f7:59:38:eb:12:12:61:39:e6:0c:9a:c7:dc:e7:fa:
2a:20:fa:10:99:51:b4:ea:e2:24:8b:00:ea:c1:3a:1f:be:88:
26:a7:21:7d:d0:67:e0:31:af:3a:d0:4a:bb:45:3b:a2:79:1e:
70:67:cc:56:8a:0b:fb:e1:bf:f5:e3:d7:3e:f9:a7:fb:3d:cf:
bb:43:5a:11:09:e0:be:16:03:68:eb:3a:f5:1f:2c:99:f2:b9:
9e:77:80:8d:07:91:a8:d9:1d:96:59:a4:6b:ea:02:ce:bb:97:
53:99:b2:44:f5:ac:9e:73:16:05:5b:21:f4:46:66:39:a7:6a:
64:73:da:f6:dc:e8:20:6e:91:57:23:1b:f3:b6:5a:ac:c7:6f:
d5:40:11:35:1a:b9:d1:77:e8:1b:c3:42:ea:b8:0c:ea:74:f9:
fe:6f:05:f5:63:34:eb:da:6a:81:b3:86:90:2d:be:50:55:1b:
96:3f:a5:4e:c0:0d:08:10:29:e4:aa:65:e8:06:a0:e9:18:24:
d2:00:af:c5:91:6b:5b:25:09:55:39:be:c8:44:68:45:cd:f1:
1d:17:91:2d:e6:ed:45:67:4d:8e:14:2c:93:92:98:ba:69:7b:
54:7d:90:e8:d2:f7:eb:db:23:e3:5a:56:04:6e:4b:12:df:06:
27:ba:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:35 2024 by rpki-client on console-ams.rpki-client.org