Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/NI70Ck389zvuJOc8iZtms4_byK0.roa
File: NI70Ck389zvuJOc8iZtms4_byK0.roa (raw, json)
Hash identifier: Z0qMt+LpBu9CbuDEO9PqqCizWcfd8I3Uy3WaKcFJi64=
Subject key identifier: 34:8E:F4:0A:4D:FC:F7:3B:EE:24:E7:3C:89:9B:66:B3:8F:DB:C8:AD
Certificate issuer: /CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Certificate serial: 37C6E235
Authority key identifier: 05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/NI70Ck389zvuJOc8iZtms4_byK0.roa
Signing time: Thu 17 Feb 2022 12:25:33 +0000
ROA not before: Thu 17 Feb 2022 12:25:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35625
IP address blocks: 195.74.80.0/24 maxlen: 24
45.138.192.0/22 maxlen: 22
185.161.44.0/22 maxlen: 22
185.252.156.0/22 maxlen: 22
37.235.88.0/21 maxlen: 21
46.29.120.0/21 maxlen: 21
194.213.30.0/24 maxlen: 24
185.75.140.0/22 maxlen: 22
2a02:21c8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935780917 (0x37c6e235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Validity
Not Before: Feb 17 12:25:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=348ef40a4dfcf73bee24e73c899b66b38fdbc8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:0c:81:3f:6f:a0:6d:52:cd:24:5a:29:c2:
b1:55:bb:d3:3d:f8:5b:c6:e3:ca:43:78:1d:c8:73:
91:06:28:ed:d9:cb:74:2e:e6:45:dc:f4:a1:92:2f:
3a:d0:10:b2:dd:7f:b5:13:b0:82:58:59:f6:f0:64:
cb:cc:ff:1c:60:32:45:91:e2:ce:5e:6f:34:4f:12:
4d:3a:0b:58:de:f7:37:01:3c:73:1c:63:96:27:84:
ca:b5:20:79:b4:61:b4:10:53:1f:f5:ee:f5:ed:3f:
75:47:42:16:d8:bb:12:04:f5:bc:ea:e9:38:ff:a6:
e2:3c:7a:4d:5c:7d:97:1d:f2:d7:9d:38:b6:db:b0:
b5:ca:8f:b7:31:da:ae:0d:8a:17:fe:8c:10:0e:85:
46:77:3e:08:9e:86:ca:dd:b4:2c:15:21:98:15:80:
bc:fe:23:e6:df:78:5d:18:ad:cb:a1:c1:a1:aa:ba:
05:ff:2a:f8:e2:83:2c:b7:26:21:04:30:35:78:79:
50:85:4e:80:ee:fb:60:16:37:b0:e2:04:a6:5f:8b:
89:24:2b:d3:ad:26:da:90:73:10:db:7e:7a:57:a2:
e1:ba:c7:09:d1:82:9d:8c:a5:c2:21:4a:e4:a6:49:
97:d9:a6:77:f7:fd:ad:59:b5:3e:09:bf:af:50:fc:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8E:F4:0A:4D:FC:F7:3B:EE:24:E7:3C:89:9B:66:B3:8F:DB:C8:AD
X509v3 Authority Key Identifier:
keyid:05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/NI70Ck389zvuJOc8iZtms4_byK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.88.0/21
45.138.192.0/22
46.29.120.0/21
185.75.140.0/22
185.161.44.0/22
185.252.156.0/22
194.213.30.0/24
195.74.80.0/24
IPv6:
2a02:21c8::/32
Signature Algorithm: sha256WithRSAEncryption
7c:bc:8b:8f:e5:a3:9e:08:bb:04:38:03:2f:72:a1:4c:5c:37:
91:25:74:65:48:97:5d:6c:97:a5:75:0f:5a:8a:ec:71:f7:7e:
48:c2:09:ad:a8:4d:41:25:a9:37:86:52:bf:06:ad:3d:de:b5:
15:7b:57:09:63:37:1f:a3:5c:1f:2a:1d:7a:cc:3f:f9:2d:a3:
e1:3c:94:7b:00:db:36:97:d2:a4:47:39:cb:50:5a:b4:a4:4b:
79:90:85:13:6c:f7:2a:f7:0d:7b:c0:42:af:c2:52:eb:1e:87:
4c:70:be:c5:c6:30:74:5e:d2:8b:09:81:68:90:c9:8a:17:e8:
27:7a:e2:f5:7c:57:01:43:cb:8e:09:8d:03:9b:60:21:18:a3:
4e:ef:50:79:29:8c:d0:9f:f4:6c:92:7f:ee:41:c7:db:ce:06:
21:05:96:fe:95:52:27:9a:ef:82:d2:43:41:4c:01:83:c7:1d:
6f:38:7d:a9:1d:3a:fe:85:84:c4:b8:88:e8:f0:8d:35:93:8b:
f9:7d:2a:9a:d2:04:15:bd:8a:f4:46:17:6e:23:69:27:1b:79:
50:43:74:73:8b:16:80:66:b3:a4:da:19:5a:a3:4b:4d:69:84:
ad:d7:6b:03:49:8e:00:f1:90:69:e2:82:39:8d:59:a3:09:19:
5f:93:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org