Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/nFtpqfzUwPlXpj5OgQHgX0LejJk.roa
File: nFtpqfzUwPlXpj5OgQHgX0LejJk.roa (raw, json)
Hash identifier: tYXUtSJEG+KiPjSHIU3p+B/r9EQ5Cu5VOCa+HlynS80=
Subject key identifier: 9C:5B:69:A9:FC:D4:C0:F9:57:A6:3E:4E:81:01:E0:5F:42:DE:8C:99
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 05B39DE1
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/nFtpqfzUwPlXpj5OgQHgX0LejJk.roa
Signing time: Sat 01 Jan 2022 16:07:36 +0000
ROA not before: Sat 01 Jan 2022 16:07:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62275
IP address blocks: 185.221.72.0/22 maxlen: 24
5.62.72.0/21 maxlen: 24
185.40.212.0/22 maxlen: 24
193.254.12.0/22 maxlen: 24
2a0c:e2c0::/29 maxlen: 29
2a0c:8000::/29 maxlen: 29
2a04:8640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95657441 (0x5b39de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Jan 1 16:07:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c5b69a9fcd4c0f957a63e4e8101e05f42de8c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:c7:80:d4:b8:ce:fe:40:b6:3e:01:c8:36:
1a:07:cd:4e:97:8f:31:8c:a2:a1:70:46:65:28:e2:
8c:3d:9b:50:86:3d:03:68:5e:f1:10:bc:ae:bc:a1:
6a:41:02:03:b8:61:7a:4b:71:e1:94:9a:24:84:e0:
e8:4c:dd:da:52:85:55:19:08:99:ea:87:be:d3:f7:
27:92:eb:90:2e:5e:a0:09:30:81:ec:a0:92:17:5f:
3c:77:35:f8:d2:51:0b:41:9c:e9:2b:34:8b:c5:7b:
0b:00:ea:ad:08:0e:93:e3:23:aa:5a:f9:ff:7d:4c:
5b:7b:96:d2:4c:e7:c9:06:96:53:c0:7a:23:fd:d4:
fd:65:37:24:62:b0:d9:47:24:62:8d:78:45:0f:0e:
96:0a:d2:8f:fa:85:2f:14:9e:5e:df:cf:27:67:51:
36:e0:4e:80:d1:d8:51:c8:48:06:5f:2c:ac:95:64:
5d:58:63:53:eb:b0:8f:e6:d7:53:51:d8:b8:63:74:
3c:92:08:e7:41:82:1b:82:b5:e1:5b:4d:cb:57:14:
45:da:a9:5f:dd:7d:2c:bc:72:11:db:67:88:d2:38:
47:00:96:8f:a5:62:7e:67:ea:6d:e5:40:a6:13:38:
f8:85:b1:33:f5:62:63:cf:81:28:c7:3a:bd:fc:ec:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:69:A9:FC:D4:C0:F9:57:A6:3E:4E:81:01:E0:5F:42:DE:8C:99
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/nFtpqfzUwPlXpj5OgQHgX0LejJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.72.0/21
185.40.212.0/22
185.221.72.0/22
193.254.12.0/22
IPv6:
2a04:8640::/29
2a0c:8000::/29
2a0c:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:c1:96:b7:ee:13:19:00:d7:72:a9:07:fc:f6:cf:40:8a:1e:
3d:71:ed:f9:9b:cb:fd:22:e2:9e:af:0b:ba:e4:a7:5b:86:17:
20:dc:34:6f:f8:85:d2:77:a2:60:7f:b7:ef:88:a7:a6:cb:40:
f2:82:2b:c7:cf:66:af:eb:af:40:8c:1f:fc:85:28:82:58:30:
4b:5f:52:b3:8e:20:38:17:b5:33:32:7b:53:6d:54:d9:af:bf:
10:f8:c4:52:51:47:9e:15:05:82:35:9a:80:c4:1b:9b:04:29:
b4:93:a3:8d:4a:47:a4:a7:c5:1e:84:2c:59:7b:88:ca:b9:81:
4b:d3:7d:1c:e3:ff:92:1d:e0:93:1d:39:14:fa:cb:e3:99:be:
9f:55:60:42:71:73:29:41:3b:d4:c9:18:41:6a:6c:3a:e0:ac:
60:ba:88:fc:b8:86:a3:a0:71:43:be:24:dd:29:79:d0:73:ef:
b8:5f:c7:6e:50:04:27:b5:ae:49:62:9d:e4:66:a9:68:0a:50:
20:96:e8:2a:f9:4c:a5:28:35:16:56:34:55:78:3a:8e:ad:02:
de:53:23:46:34:35:26:4e:e7:f8:46:7b:1e:54:bc:99:46:8e:
a3:60:6f:14:d8:bc:4c:70:86:6d:2e:ad:86:47:cb:33:80:f7:
8f:b1:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org