Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/NxBNDDwkgDAGp1CowV3oS4GnKfI.roa
File: NxBNDDwkgDAGp1CowV3oS4GnKfI.roa (raw, json)
Hash identifier: l64RGSWPwyOX36Py1ccXFN+cbR/IpI5WjRNrs9N09fU=
Subject key identifier: 37:10:4D:0C:3C:24:80:30:06:A7:50:A8:C1:5D:E8:4B:81:A7:29:F2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 28D00383
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/NxBNDDwkgDAGp1CowV3oS4GnKfI.roa
Signing time: Sat 01 Jan 2022 15:00:26 +0000
ROA not before: Sat 01 Jan 2022 15:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6908
IP address blocks: 217.61.176.0/20 maxlen: 20
217.61.180.0/22 maxlen: 24
217.61.184.0/22 maxlen: 24
91.135.224.0/20 maxlen: 20
78.41.152.0/21 maxlen: 21
62.149.32.0/19 maxlen: 19
62.149.48.0/20 maxlen: 20
185.120.152.0/22 maxlen: 22
94.247.96.0/21 maxlen: 21
217.20.16.0/20 maxlen: 20
185.109.92.0/22 maxlen: 22
185.122.232.0/22 maxlen: 22
5.102.184.0/21 maxlen: 21
46.252.64.0/20 maxlen: 20
185.119.68.0/22 maxlen: 22
158.58.160.0/21 maxlen: 21
91.151.208.0/20 maxlen: 20
80.79.128.0/20 maxlen: 20
80.79.128.0/21 maxlen: 21
91.199.24.0/24 maxlen: 24
80.79.136.0/21 maxlen: 21
217.10.128.0/19 maxlen: 19
195.72.128.0/22 maxlen: 22
85.92.192.0/19 maxlen: 19
77.75.232.0/23 maxlen: 23
109.239.80.0/20 maxlen: 20
185.64.160.0/22 maxlen: 22
217.169.32.0/19 maxlen: 19
185.121.248.0/22 maxlen: 22
109.71.120.0/21 maxlen: 21
213.133.128.0/19 maxlen: 19
82.147.0.0/19 maxlen: 19
95.131.216.0/21 maxlen: 21
2001:1b90::/32 maxlen: 32
2a03:14e0::/32 maxlen: 32
2a01:450::/32 maxlen: 32
2a02:2458::/32 maxlen: 32
2a03:6a00::/29 maxlen: 29
2a02:298::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684721027 (0x28d00383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jan 1 15:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37104d0c3c24803006a750a8c15de84b81a729f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:47:e8:ac:05:4e:71:f2:aa:fa:40:f4:0c:
dd:03:31:97:f7:9d:76:27:b0:18:72:39:97:78:92:
e3:43:e2:96:14:e0:2b:17:40:30:8d:3e:b6:1b:f5:
3b:8e:50:28:d6:cf:19:0b:4d:8f:fa:e8:51:44:3b:
73:85:3d:19:5b:d8:d1:9a:9f:bc:97:54:36:d8:2f:
88:17:16:df:78:d5:85:f8:8f:7f:b0:a3:35:f9:44:
4b:93:e6:e5:6b:ee:41:5d:8c:f3:f7:e9:34:cf:18:
58:18:cd:54:7e:ef:84:f0:c1:ce:4e:9d:07:d6:2f:
6d:23:8b:11:26:67:8f:0f:44:f6:13:9a:e2:c5:5d:
7e:98:1a:9a:35:2d:90:2b:14:a7:67:77:b9:35:ef:
a0:da:66:a2:10:17:6d:ea:44:9e:20:ce:85:bd:65:
53:97:0b:16:6e:e7:ae:18:61:01:e4:f9:58:4a:f2:
39:d0:09:26:9e:c2:66:86:f2:2d:ee:6e:8a:04:cd:
d8:4f:c5:7a:48:52:8d:04:b1:f3:1e:a6:87:ae:49:
e5:ba:4b:a8:e5:cd:43:26:c7:6f:2d:d7:60:2e:f7:
ad:b8:9f:d0:29:bf:ed:f2:82:d5:d4:f9:a2:53:fa:
41:fa:46:42:01:d1:cf:21:5a:fc:e1:65:ed:12:c4:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:10:4D:0C:3C:24:80:30:06:A7:50:A8:C1:5D:E8:4B:81:A7:29:F2
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/NxBNDDwkgDAGp1CowV3oS4GnKfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.184.0/21
46.252.64.0/20
62.149.32.0/19
77.75.232.0/23
78.41.152.0/21
80.79.128.0/20
82.147.0.0/19
85.92.192.0/19
91.135.224.0/20
91.151.208.0/20
91.199.24.0/24
94.247.96.0/21
95.131.216.0/21
109.71.120.0/21
109.239.80.0/20
158.58.160.0/21
185.64.160.0/22
185.109.92.0/22
185.119.68.0/22
185.120.152.0/22
185.121.248.0/22
185.122.232.0/22
195.72.128.0/22
213.133.128.0/19
217.10.128.0/19
217.20.16.0/20
217.61.176.0/20
217.169.32.0/19
IPv6:
2001:1b90::/32
2a01:450::/32
2a02:298::/32
2a02:2458::/32
2a03:14e0::/32
2a03:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
27:d0:f8:1a:81:3c:5a:97:2c:5a:a9:37:7f:76:2a:92:e1:a9:
64:a7:55:08:6e:34:15:14:32:5c:a5:03:ff:4b:fa:ee:b3:7d:
2f:01:98:79:7b:53:e8:05:9d:27:72:7e:93:1a:ec:a9:aa:de:
e2:f2:84:0b:f8:bd:dd:67:de:51:ca:3e:2a:ee:5b:58:77:1e:
28:e1:a6:3a:09:be:91:e8:d3:8a:56:8e:c8:d6:c6:c8:6f:81:
b7:95:32:50:4b:06:04:3a:9b:7d:38:2e:bc:dd:95:87:da:9d:
b3:1c:6c:18:60:f5:f4:6f:5c:28:c7:19:9c:bb:9a:cb:97:16:
81:38:8e:93:2c:16:df:12:3b:59:93:1e:c0:d2:c2:44:7b:6b:
c9:dc:80:86:6f:08:f6:51:47:c0:7d:80:8b:1c:05:3b:b5:d2:
55:9e:ca:35:ae:54:ae:5a:05:bb:8e:08:cd:65:e0:63:79:01:
70:06:d0:bf:e0:74:45:86:c5:29:56:13:2a:ba:36:7a:76:6e:
fc:76:e6:a0:50:6a:ae:d0:4a:fe:e6:ed:7e:84:5b:ff:a4:7f:
b0:b9:8d:cc:2a:f3:66:55:b3:35:b1:b9:df:7d:27:37:fd:d4:
ee:fa:3b:f5:ab:ca:54:04:7d:99:b1:00:97:ec:5b:84:6b:cc:
85:da:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:21 2024 by rpki-client on console-fra.rpki-client.org