Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/nVGuM4KW8qqbHLCkq-Kc96sEDw8.roa
File: nVGuM4KW8qqbHLCkq-Kc96sEDw8.roa (raw, json)
Hash identifier: 2bzvAG55ihYAX9TgaVvMGdXQJvSZuBl75xLHr6aVJkk=
Subject key identifier: 9D:51:AE:33:82:96:F2:AA:9B:1C:B0:A4:AB:E2:9C:F7:AB:04:0F:0F
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01837A0FA31E98A1EAB58C9207E1D3D644BD
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/nVGuM4KW8qqbHLCkq-Kc96sEDw8.roa
Signing time: Mon 26 Sep 2022 13:49:48 +0000
ROA not before: Mon 26 Sep 2022 13:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 212.126.96.0/24 maxlen: 24
212.126.97.0/24 maxlen: 24
212.126.98.0/24 maxlen: 24
46.21.251.0/24 maxlen: 24
212.126.102.0/24 maxlen: 24
212.126.104.0/24 maxlen: 24
212.126.105.0/24 maxlen: 24
212.126.104.0/22 maxlen: 22
212.126.104.0/23 maxlen: 23
212.126.100.0/24 maxlen: 24
212.126.101.0/24 maxlen: 24
212.126.109.0/24 maxlen: 24
212.126.110.0/24 maxlen: 24
212.126.111.0/24 maxlen: 24
212.126.106.0/23 maxlen: 24
212.126.107.0/24 maxlen: 24
212.126.108.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
212.126.117.0/24 maxlen: 24
212.126.118.0/24 maxlen: 24
212.126.113.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
212.126.119.0/24 maxlen: 24
212.126.123.0/24 maxlen: 24
212.126.124.0/24 maxlen: 24
212.126.125.0/24 maxlen: 24
212.126.120.0/24 maxlen: 24
212.126.121.0/24 maxlen: 24
212.126.124.0/23 maxlen: 23
212.126.122.0/24 maxlen: 24
212.126.126.0/24 maxlen: 24
212.126.127.0/24 maxlen: 24
2a04:2dc0:4::/48 maxlen: 48
2a04:2dc0:e::/48 maxlen: 48
2a04:2dc0:17::/48 maxlen: 48
2a04:2dc0:d::/48 maxlen: 48
2a04:2dc0:6::/48 maxlen: 48
2a04:2dc0:1::/48 maxlen: 48
2a04:2dc0:f::/48 maxlen: 48
2a04:2dc0:a::/48 maxlen: 48
2a04:2dc0:8::/48 maxlen: 48
2a04:2dc0:3::/48 maxlen: 48
2a04:2dc0:19::/48 maxlen: 48
2a04:2dc0:7::/48 maxlen: 48
2a04:2dc0:2::/48 maxlen: 48
2a04:2dc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:0f:a3:1e:98:a1:ea:b5:8c:92:07:e1:d3:d6:44:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Sep 26 13:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d51ae338296f2aa9b1cb0a4abe29cf7ab040f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:1b:50:06:f7:3a:52:7f:61:ee:08:21:c2:
4d:c6:06:ca:06:b4:00:d6:c6:65:74:8e:3f:ac:82:
0d:11:47:2e:47:d6:60:bb:16:68:5f:d3:a3:66:4a:
3a:51:04:6f:48:89:d9:7d:1c:04:f9:2c:d6:51:b4:
00:b2:2c:7f:c2:e7:26:19:f1:4c:f5:1d:8e:7d:95:
07:6b:e0:66:b8:be:b3:cb:96:99:c4:60:37:96:8e:
46:8a:42:e6:11:65:fc:b3:f0:5f:81:8e:d5:b5:de:
30:28:dc:a4:20:95:be:b5:6f:f9:d8:a4:1b:c8:ae:
22:c9:0a:22:b2:8c:4d:4a:c5:f3:04:61:76:4f:47:
f2:cb:4f:94:b9:7d:87:21:58:02:62:cc:8b:6d:f1:
f5:17:9a:c5:26:e6:2d:11:70:38:b2:5c:24:97:56:
55:3a:c9:41:b9:05:35:c3:03:54:b4:43:01:bb:2e:
36:79:15:23:78:3f:0c:34:3a:b1:e2:0f:9d:22:a6:
cf:2e:4f:fa:d1:0a:1e:4b:ba:d6:c7:bb:e2:07:20:
c9:d4:e3:da:97:51:8e:90:3f:06:e0:ba:d8:94:21:
6e:fd:42:c1:66:99:a1:7a:23:49:59:22:ee:f7:00:
01:1d:5d:74:03:7a:15:db:dc:48:c6:1e:87:d7:65:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:AE:33:82:96:F2:AA:9B:1C:B0:A4:AB:E2:9C:F7:AB:04:0F:0F
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/nVGuM4KW8qqbHLCkq-Kc96sEDw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.96.0-212.126.98.255
212.126.100.0-212.126.102.255
212.126.104.0/21
212.126.113.0/24
212.126.115.0-212.126.127.255
IPv6:
2a04:2dc0::-2a04:2dc0:4:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:6::-2a04:2dc0:8:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:a::/48
2a04:2dc0:d::-2a04:2dc0:f:ffff:ffff:ffff:ffff:ffff
2a04:2dc0:17::/48
2a04:2dc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
a8:44:91:8f:8e:53:f0:69:37:cd:33:de:d1:b8:76:c1:4c:ae:
02:31:31:cf:5d:a4:7e:6d:a8:dc:42:e7:81:9a:7f:9a:70:bf:
82:be:93:60:59:37:20:06:4a:32:4d:7d:87:65:4c:94:18:51:
5d:c3:12:7d:93:f5:db:48:9d:5e:af:9a:de:51:02:66:ad:2b:
96:ad:55:ae:75:eb:c9:2c:62:14:03:97:36:1a:ef:4f:9a:a8:
86:51:56:e1:18:76:11:39:87:d6:cb:a6:5d:76:32:89:54:da:
c9:04:3f:a0:c6:61:fc:e0:2d:98:c7:3c:d2:7d:a5:40:48:e3:
ee:31:b7:38:c0:52:90:84:96:37:37:d0:1c:84:b3:77:ea:08:
95:b7:e8:ab:c4:9c:2d:a3:3d:0b:91:66:26:6e:67:20:49:ec:
fe:14:c2:6b:e1:a8:60:9a:82:bf:78:79:14:1b:ec:23:d0:fb:
dc:89:11:80:19:97:19:95:01:e3:f7:bf:ee:84:7d:0d:f1:82:
d6:d1:e0:a6:5e:58:77:4a:72:1f:eb:e0:a0:85:b6:cd:af:83:
58:6e:6c:64:43:cb:5d:21:ab:d6:c7:be:6a:51:0e:13:a1:8a:
c9:e1:da:dc:8a:3d:b9:49:d0:4b:fc:7c:d3:c2:ef:2b:04:5d:
6a:a2:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org