Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/NuFmnUEmPQFyhIuclY-DNPV_kQw.roa
File: NuFmnUEmPQFyhIuclY-DNPV_kQw.roa (raw, json)
Hash identifier: LIHPRsnVzMj1bgoxscLMJ2tOV2omhfr7nEIyCPCMaDg=
Subject key identifier: 36:E1:66:9D:41:26:3D:01:72:84:8B:9C:95:8F:83:34:F5:7F:91:0C
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 0B2CB581
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/NuFmnUEmPQFyhIuclY-DNPV_kQw.roa
Signing time: Sat 01 Jan 2022 15:59:51 +0000
ROA not before: Sat 01 Jan 2022 15:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207141
IP address blocks: 185.164.253.0/24 maxlen: 24
185.164.252.0/22 maxlen: 24
185.164.252.0/24 maxlen: 24
185.164.255.0/24 maxlen: 24
185.164.254.0/24 maxlen: 24
185.206.237.0/24 maxlen: 24
185.206.239.0/24 maxlen: 24
185.206.236.0/22 maxlen: 24
185.206.236.0/24 maxlen: 24
185.206.238.0/24 maxlen: 24
2a0b:1b40::/29 maxlen: 29
2a0b:b400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187479425 (0xb2cb581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jan 1 15:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36e1669d41263d0172848b9c958f8334f57f910c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:6e:67:78:9b:ea:73:96:ba:47:bb:97:77:
86:6e:6d:61:f6:9c:8c:9a:18:51:f5:5e:63:31:20:
71:bf:7b:c3:f9:7a:ba:57:6a:33:b8:87:6e:d6:58:
3b:b5:8e:c2:64:a7:9a:5f:1a:0e:15:47:fc:15:64:
e3:3e:0a:d0:c7:c8:c6:4d:d0:9b:56:13:a6:7b:9a:
ce:f0:3b:ab:72:cd:c1:54:58:1c:dd:32:c9:1b:56:
1e:bc:08:9d:c2:06:57:cd:95:0c:37:9f:ee:c6:f7:
0c:9e:02:2f:63:de:4a:63:0d:a4:00:f2:49:f3:1e:
a8:2d:6e:fb:5c:f1:5d:ec:99:ef:69:15:52:35:6a:
0a:0b:c5:d4:3c:29:a7:ab:a2:e2:55:bb:80:3f:38:
9c:79:d5:69:5f:6f:07:7b:b7:1e:f8:ac:98:c8:9c:
7b:4a:40:77:e6:59:16:9a:89:5b:5e:ab:ed:d0:fd:
6a:2e:ac:47:af:98:1c:44:62:11:c0:51:b4:01:29:
12:e4:33:fa:99:8f:32:03:77:c4:8d:be:07:6a:ee:
1f:30:24:e1:64:87:cc:87:d3:da:e1:9e:c5:0c:9c:
a1:aa:d2:7d:ec:9e:2f:69:f0:ce:2e:09:34:4b:ec:
51:de:04:11:98:cf:5e:96:d0:79:1c:1f:a6:bb:ca:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:66:9D:41:26:3D:01:72:84:8B:9C:95:8F:83:34:F5:7F:91:0C
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/NuFmnUEmPQFyhIuclY-DNPV_kQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.252.0/22
185.206.236.0/22
IPv6:
2a0b:1b40::/29
2a0b:b400::/29
Signature Algorithm: sha256WithRSAEncryption
9e:2c:33:a7:19:03:27:10:da:0a:ff:b4:84:42:df:67:8d:0d:
03:62:1e:b2:ce:d6:e4:b5:e3:c3:a7:24:89:19:13:33:b2:5f:
4b:d0:3d:68:07:6f:d3:81:72:68:73:b8:cc:37:ca:b3:c9:ad:
17:c6:d4:df:a2:d3:3d:a1:52:7b:e5:27:9a:e7:48:f3:82:ec:
a2:c4:26:07:d1:f0:78:a7:7a:a4:16:59:a3:12:86:32:e6:b1:
47:4e:eb:6f:bf:9c:f4:91:9e:19:3f:7f:5d:7e:dc:8c:e4:91:
65:bf:b8:6e:da:e5:30:3d:29:04:58:b9:a7:0d:a5:48:a6:8a:
03:e0:43:71:0b:04:6c:09:5b:fa:37:7d:c9:25:f3:99:61:3d:
cc:33:66:77:3d:fa:3f:5f:d4:fe:45:0b:ae:d6:58:0b:08:9a:
78:69:af:02:da:72:3b:cd:38:f2:bf:12:88:33:38:14:ad:02:
a4:c4:4e:12:58:3e:48:7c:7f:ab:83:cb:ef:47:db:99:b3:29:
76:5e:07:c9:3d:01:fd:e0:34:40:0d:f6:2e:a9:3a:41:62:49:
9b:6b:07:cc:5e:b3:f1:0c:d3:0a:87:45:92:1f:60:f9:1e:04:
49:14:7a:61:e9:e5:69:32:6e:d1:d7:3a:30:4d:fc:c6:19:af:
aa:9b:f9:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:15 2024 by rpki-client on console-ams.rpki-client.org