Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/nmNgoO6WhMjznJgFWVanH01QYgg.roa
File: nmNgoO6WhMjznJgFWVanH01QYgg.roa (raw, json)
Hash identifier: iQZ3aRCK+sLSozY8ZwROVxVDBHTF47mio7RsC6owydM=
Subject key identifier: 9E:63:60:A0:EE:96:84:C8:F3:9C:98:05:59:56:A7:1F:4D:50:62:08
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 02010232
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/nmNgoO6WhMjznJgFWVanH01QYgg.roa
Signing time: Sat 01 Jan 2022 05:02:57 +0000
ROA not before: Sat 01 Jan 2022 05:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13135
IP address blocks: 185.132.220.0/22 maxlen: 24
213.238.56.0/21 maxlen: 24
192.76.134.0/24 maxlen: 24
212.12.48.0/21 maxlen: 24
2a00:14b0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33620530 (0x2010232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 1 05:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e6360a0ee9684c8f39c98055956a71f4d506208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:e9:cd:84:03:a8:25:fc:5c:01:fe:f3:10:
1d:b5:ae:5e:d4:fe:65:79:48:0e:84:45:39:a7:a9:
c6:29:a0:95:a4:63:14:b6:c5:45:a2:23:eb:6d:95:
2b:8c:0c:0d:d8:ae:83:08:7a:a3:c7:f2:56:79:a5:
2f:a5:50:ea:cb:be:73:b0:4d:82:84:bf:9e:80:b3:
1f:3e:55:01:11:6f:7a:8b:88:89:74:b1:21:6f:c4:
97:93:53:c7:fa:46:ac:3a:32:1d:de:e4:41:96:2b:
5d:ed:c3:8a:5f:74:55:64:6c:81:4a:16:57:22:58:
8a:e9:f1:56:df:34:95:c8:9a:a7:3d:43:e8:30:52:
70:fc:98:76:ca:ce:d7:32:62:47:43:45:ac:b6:56:
66:db:38:1f:cd:f8:6a:ca:1b:f0:6e:a7:a8:fe:28:
b9:80:05:4a:84:89:a6:d8:b7:0d:89:45:f5:e2:c9:
36:da:31:81:2c:46:60:18:d3:ce:35:34:c2:ed:5e:
3c:aa:60:48:fc:d6:31:84:48:18:84:5f:b1:27:ce:
95:10:7a:e6:f9:2d:bb:ce:32:df:72:65:bb:e1:27:
98:f3:fb:3a:88:5a:10:8a:e2:23:d0:47:ae:96:34:
4c:22:07:04:fe:af:eb:5c:2f:f9:84:4f:ef:84:e8:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:63:60:A0:EE:96:84:C8:F3:9C:98:05:59:56:A7:1F:4D:50:62:08
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/nmNgoO6WhMjznJgFWVanH01QYgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.220.0/22
192.76.134.0/24
212.12.48.0/21
213.238.56.0/21
IPv6:
2a00:14b0::/32
Signature Algorithm: sha256WithRSAEncryption
84:2c:17:42:37:77:a5:e6:3c:3f:a5:b1:58:22:6a:62:f9:51:
6c:59:02:f7:a9:ab:43:bf:7b:52:05:d1:d4:7b:30:12:35:ce:
2c:47:b1:02:f3:3f:c4:47:5d:b1:eb:c4:3b:a7:14:6d:ef:c5:
0d:88:5f:4d:db:be:59:c1:06:3d:60:56:0f:2d:68:90:6c:05:
47:fb:1e:b1:9f:fe:45:02:74:14:2e:fa:b3:3a:66:77:c3:bc:
0b:d0:c5:a9:ce:5b:ab:27:1b:0b:6c:59:58:78:dc:dc:22:3b:
3d:19:51:1a:7f:bb:c4:ff:51:db:ce:a3:c5:eb:a5:a1:55:c5:
b1:b5:ac:33:02:92:86:62:2c:6b:f6:db:29:00:a9:4d:11:e7:
ed:a6:f8:5f:c4:2d:7f:5c:3a:e5:e4:57:9a:25:6b:f1:99:6a:
1c:27:4e:13:b9:ca:4a:1d:36:83:0f:91:69:5d:6f:58:31:b1:
67:57:1b:e1:fd:1d:f2:d7:c7:11:7f:5c:40:0a:e9:5d:b0:97:
bb:ae:f2:dc:a0:82:2f:9e:a5:43:8e:c5:7f:42:26:e8:0c:a4:
64:80:55:50:80:a1:44:ca:5e:9a:42:ea:ac:f7:77:13:2f:ce:
4e:d6:a0:ba:f8:c7:b1:dc:80:a6:b3:32:a1:f9:da:09:3a:26:
0f:62:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:41 2024 by rpki-client on console-fra.rpki-client.org