Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/nmYR-kv8P0A5LK5j3oFig8A3zag.roa
File: nmYR-kv8P0A5LK5j3oFig8A3zag.roa (raw, json)
Hash identifier: LI7Epg5IhseletvuQR9146JWjtvkiIehxphrSsrm+HQ=
Subject key identifier: 9E:66:11:FA:4B:FC:3F:40:39:2C:AE:63:DE:81:62:83:C0:37:CD:A8
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 018BCDE312607506EEC3F17F33833560331B
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/nmYR-kv8P0A5LK5j3oFig8A3zag.roa
Signing time: Tue 14 Nov 2023 12:51:32 +0000
ROA not before: Tue 14 Nov 2023 12:51:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51942
IP address blocks: 185.133.36.0/22 maxlen: 22
81.173.44.0/22 maxlen: 22
91.221.150.0/23 maxlen: 23
2001:67c:16b4::/48 maxlen: 48
2a06:21c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:e3:12:60:75:06:ee:c3:f1:7f:33:83:35:60:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Nov 14 12:51:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e6611fa4bfc3f40392cae63de816283c037cda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:4b:ea:b7:aa:0d:14:5f:cf:af:81:9d:bf:
2d:82:8f:87:43:cd:10:0a:29:57:aa:c6:22:7e:e8:
e3:8c:8b:d5:ef:f2:95:ab:13:4d:e5:ce:e1:e6:7c:
56:1c:b6:2c:62:0f:91:c7:50:67:13:38:80:32:f0:
7a:1c:3b:4c:8c:97:a6:a0:ee:e9:1c:c1:d1:82:5c:
84:43:f3:89:01:e8:d5:31:b6:f2:d6:85:90:81:fd:
d7:0a:1b:38:cc:8e:cd:21:7e:d0:c3:e0:d8:47:ba:
4d:ce:2c:39:8e:39:72:00:ce:7c:a7:a3:44:4e:36:
d3:35:6d:5a:cc:c3:6c:f0:93:4f:ae:b4:c5:c1:80:
b6:9b:49:f4:7e:7f:a0:3e:86:2d:02:f6:6e:8d:98:
ee:58:be:a7:cd:08:99:ad:53:28:a4:c5:1e:72:4a:
c4:3f:00:47:09:63:12:2c:30:f2:2f:63:4a:c2:b0:
51:d5:aa:9a:13:1b:f6:91:40:3a:c6:ed:9c:41:29:
1b:06:ac:64:37:67:dd:c0:ed:08:61:70:db:4b:0a:
d3:a5:14:18:36:5e:11:7e:76:61:2f:42:59:27:d6:
4d:37:55:b2:85:2a:80:54:38:dd:dc:8e:0f:22:69:
c2:42:f3:5b:5e:c3:4a:d5:16:a0:79:4f:d3:54:53:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:11:FA:4B:FC:3F:40:39:2C:AE:63:DE:81:62:83:C0:37:CD:A8
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/nmYR-kv8P0A5LK5j3oFig8A3zag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.44.0/22
91.221.150.0/23
185.133.36.0/22
IPv6:
2001:67c:16b4::/48
2a06:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:04:fd:bf:92:e5:04:33:a8:b5:fa:e7:e7:68:0f:32:b1:0a:
c9:25:ec:41:c8:20:c7:8b:84:28:6a:25:10:7e:5f:ac:36:ee:
05:7e:1e:84:4c:7f:8b:df:01:49:87:0a:71:65:1d:0d:a9:cd:
be:d3:cd:b9:75:81:4c:b9:8e:11:fc:c4:31:e1:b7:c5:20:c9:
67:ed:ee:be:44:b0:2b:9d:f9:57:f6:8a:38:6b:05:20:b2:aa:
d8:a1:1e:76:85:6e:37:2c:61:28:80:5e:7d:4b:72:b6:d1:eb:
ea:e7:b3:89:fc:62:e9:93:1c:22:b9:36:22:7f:da:22:65:7e:
1b:50:9b:10:75:8c:cf:f2:7e:02:ff:94:af:40:bd:34:91:8d:
0e:3f:0b:ae:c4:97:7c:e0:e9:7b:2d:1a:5f:4a:46:65:59:57:
13:cd:62:80:65:cf:74:52:db:fe:1f:5a:33:76:68:71:0d:c0:
9a:31:7f:17:cc:27:5d:4b:70:b9:4c:60:a3:04:d3:da:04:0b:
73:91:18:13:f2:89:8f:f1:70:64:05:c7:88:29:81:e7:a7:1b:
ed:1c:fd:91:5f:28:9d:ee:e6:ca:48:48:b0:3f:9e:c0:7e:53:
27:4b:da:bb:09:e6:d5:a1:d0:94:be:35:38:ef:24:8d:00:f3:
52:96:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:54 2025 by rpki-client