Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/nqunxsXQ4-P5f9LdMiklAmGuCA4.roa
File: nqunxsXQ4-P5f9LdMiklAmGuCA4.roa (raw, json)
Hash identifier: 5y/krUh0qY1RIvJz36xAED1s9hqNFBYqYI/zipCfeIY=
Subject key identifier: 9E:AB:A7:C6:C5:D0:E3:E3:F9:7F:D2:DD:32:29:25:02:61:AE:08:0E
Certificate issuer: /CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Certificate serial: 018264143E87E23464E1560B30F126294200
Authority key identifier: C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/nqunxsXQ4-P5f9LdMiklAmGuCA4.roa
Signing time: Wed 03 Aug 2022 14:20:24 +0000
ROA not before: Wed 03 Aug 2022 14:20:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41872
IP address blocks: 185.161.20.0/22 maxlen: 22
94.198.248.0/21 maxlen: 22
94.100.144.0/20 maxlen: 20
37.209.176.0/20 maxlen: 20
37.110.200.0/21 maxlen: 24
212.35.0.0/19 maxlen: 19
91.190.0.0/19 maxlen: 19
81.92.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:14:3e:87:e2:34:64:e1:56:0b:30:f1:26:29:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff935057c3bdbadbdf49f343562c5e30016044
Validity
Not Before: Aug 3 14:20:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eaba7c6c5d0e3e3f97fd2dd3229250261ae080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:6b:bf:01:2b:d1:0e:9f:45:05:dc:5e:58:
e3:4f:32:47:8d:08:7c:0f:e8:2c:56:1a:ad:c2:98:
69:17:6e:06:de:b9:8e:fb:6f:26:27:cf:9d:96:37:
25:cc:ab:65:54:b1:1b:49:cc:30:81:e8:05:57:f1:
32:ef:eb:7e:0a:03:02:5e:0b:52:f1:8b:c5:80:17:
52:87:15:e6:90:6a:cd:bc:d3:ae:d2:3a:53:72:93:
82:3f:d8:c6:45:6b:10:80:10:32:08:e8:59:54:e3:
71:17:dd:b7:eb:6a:67:38:af:5e:65:84:fd:f6:7e:
5c:a2:15:88:18:d8:99:a9:5a:fb:5a:59:9c:a9:55:
77:d5:d5:22:af:e7:84:bc:af:07:12:c9:7e:ee:dc:
90:2f:5c:9d:59:d8:a6:18:9b:7e:42:43:88:b0:cf:
80:e3:b5:cb:67:f0:bc:3d:18:56:d0:ad:01:ba:68:
b3:b0:da:c3:0c:17:0a:94:38:fc:5b:84:9e:8a:5b:
1f:b7:23:06:9a:a9:93:cd:82:a0:67:fb:bf:0d:d7:
c7:a9:c0:4d:4a:9f:ff:93:45:3c:4c:e0:20:79:ef:
26:06:37:bf:13:47:8a:85:d1:00:e8:16:12:fa:cb:
a5:03:95:df:4f:16:e2:f9:f1:1c:c6:e7:d2:fa:86:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:A7:C6:C5:D0:E3:E3:F9:7F:D2:DD:32:29:25:02:61:AE:08:0E
X509v3 Authority Key Identifier:
keyid:C4:FF:93:50:57:C3:BD:BA:DB:DF:49:F3:43:56:2C:5E:30:01:60:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP-TUFfDvbrb30nzQ1YsXjABYEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/nqunxsXQ4-P5f9LdMiklAmGuCA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b059a-325d-4385-811f-17e1a2569568/1/xP-TUFfDvbrb30nzQ1YsXjABYEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.200.0/21
37.209.176.0/20
81.92.96.0/20
91.190.0.0/19
94.100.144.0/20
94.198.248.0/21
185.161.20.0/22
212.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:db:62:d4:0e:f8:fd:d9:2b:3c:37:52:b7:d5:63:9d:ac:c9:
d9:21:76:66:98:1f:0f:a6:65:4d:25:98:33:f9:e2:b8:e9:a2:
dd:da:32:08:3b:c8:31:f9:e0:65:85:71:76:b5:aa:59:98:a2:
5d:37:21:7b:f6:67:fa:44:52:d2:44:e8:6c:51:01:ee:ab:c8:
59:11:42:a5:84:e3:d5:17:1a:1b:2a:82:e8:83:f1:47:ee:7d:
d6:b0:50:cf:b7:3b:69:51:74:ef:1f:f9:74:13:0f:ea:08:c0:
6e:39:b0:6a:79:03:9c:c4:8d:f0:9c:c5:a5:f8:7b:df:3b:49:
70:ab:a8:26:ee:d9:f9:fb:65:c6:1a:3b:31:e2:9a:0c:cc:7d:
bb:aa:60:ae:5a:0e:ef:8f:8b:f5:88:3d:88:20:62:0f:d1:00:
3b:93:0b:3b:77:08:68:c0:70:40:3d:4c:06:ed:60:3a:11:70:
e2:7c:13:7b:d9:cf:55:9b:21:fb:40:ac:c7:b9:40:b3:08:38:
84:d2:71:fa:e3:40:8c:88:ae:5a:66:ff:40:f5:04:09:55:c1:
47:76:5a:d5:0a:20:18:c4:89:a2:4f:e1:71:f1:f8:75:28:df:
0c:eb:a9:20:bb:41:7f:fc:b1:02:82:3c:2e:d9:e2:1f:cc:59:
99:be:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:56 2025 by rpki-client