Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/nL_CXvKdXKM-atUYYYlu3qpLuPM.roa
File: nL_CXvKdXKM-atUYYYlu3qpLuPM.roa (raw, json)
Hash identifier: gjiYOukF1FkszJ0/wPAFxjUDFgOa7Vet5LB9nPOH3DU=
Subject key identifier: 9C:BF:C2:5E:F2:9D:5C:A3:3E:6A:D5:18:61:89:6E:DE:AA:4B:B8:F3
Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial: 119B86DD
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/nL_CXvKdXKM-atUYYYlu3qpLuPM.roa
Signing time: Sat 01 Jan 2022 08:05:56 +0000
ROA not before: Sat 01 Jan 2022 08:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30960
IP address blocks: 80.76.132.0/23 maxlen: 23
80.76.128.0/22 maxlen: 22
80.76.136.0/23 maxlen: 23
80.76.138.0/23 maxlen: 23
80.76.134.0/23 maxlen: 23
80.76.140.0/22 maxlen: 22
193.27.236.0/22 maxlen: 22
193.27.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295405277 (0x119b86dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Validity
Not Before: Jan 1 08:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cbfc25ef29d5ca33e6ad51861896edeaa4bb8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:27:aa:17:f2:cc:aa:20:90:9a:20:65:57:
f2:c3:1b:5d:70:06:0f:ae:1d:f7:75:07:d2:25:76:
cf:6d:0e:f2:2b:85:9c:29:0f:0a:97:1d:d9:87:0a:
90:b6:d5:98:ff:ce:83:f5:31:2e:e4:f1:b2:01:de:
5f:1c:2b:fb:70:34:8b:49:e4:74:8f:c7:73:9e:d1:
b8:14:c4:86:eb:7f:8b:5f:60:8e:59:c9:ba:ae:a3:
f3:ab:c9:c0:53:3b:1a:96:99:2f:c7:da:71:82:a6:
ae:68:39:6d:e7:a9:95:58:db:95:5d:aa:af:bd:05:
44:7b:df:09:74:47:4d:3b:19:0a:53:28:5b:61:ea:
e8:b1:26:0f:f0:1c:72:51:e9:69:9f:80:76:ff:86:
de:2b:75:0e:ac:05:08:a6:55:2d:df:6f:bf:e9:9e:
b4:86:d1:8b:69:5d:75:3c:d9:b3:ba:78:47:58:11:
ee:8c:8f:f1:1a:72:cb:9f:de:cc:42:35:cc:e8:28:
59:f8:c7:d3:de:5c:2e:19:7c:10:33:12:1b:8f:12:
d8:a0:10:9f:2f:b1:fa:c7:11:f9:85:89:75:81:2a:
21:6d:9b:fa:30:13:2d:97:23:88:75:60:74:d3:74:
2e:70:04:6b:11:bc:e5:cb:11:0e:e5:db:de:18:8a:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:C2:5E:F2:9D:5C:A3:3E:6A:D5:18:61:89:6E:DE:AA:4B:B8:F3
X509v3 Authority Key Identifier:
keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/nL_CXvKdXKM-atUYYYlu3qpLuPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.128.0/20
193.27.236.0-193.27.241.255
Signature Algorithm: sha256WithRSAEncryption
4d:ca:d4:78:0c:69:4c:f3:0d:9f:bd:25:af:9e:20:29:5b:bf:
30:3e:81:f4:6b:76:fa:e3:43:61:ce:ac:2e:17:d8:de:6e:d9:
56:ae:1d:a8:b6:ae:b6:5e:d5:8e:a3:ce:26:d8:a5:f6:10:e5:
e0:97:6b:b5:3d:ad:d3:84:10:7e:a4:4b:56:b0:41:59:c1:68:
1c:7c:63:8f:c8:04:d1:6e:48:76:c0:50:b2:d9:3e:ce:94:0a:
8e:48:82:71:d6:1c:78:3a:e9:a1:a6:3a:58:02:ed:76:dd:7a:
11:a7:a0:44:92:dc:1f:64:3e:c0:0f:d5:8b:2b:39:27:63:bd:
e1:40:2a:ba:4f:03:77:17:57:6b:6c:56:67:02:5b:b3:2c:10:
e1:3e:99:c2:68:c0:1e:9b:90:8f:e1:6f:40:2c:38:5a:2a:62:
65:2a:bb:a8:fc:ef:1a:95:35:d0:2c:50:5e:80:c5:d3:17:bc:
c5:15:7c:dd:95:48:6c:64:03:7a:e0:57:53:1b:b6:98:e0:a6:
eb:b3:99:61:23:df:1b:fe:6e:44:1a:3f:75:ab:42:87:c9:cb:
9c:5b:e2:ba:c9:0f:94:5d:37:98:6d:47:d0:2a:a5:da:c0:43:
77:5f:a9:4c:68:03:8f:15:22:be:70:f8:2b:31:fc:6e:01:fa:
0f:04:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:17 2025 by rpki-client