Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/NpI6ATtchBI7k5f1xHZKfm7QaqI.roa
File: NpI6ATtchBI7k5f1xHZKfm7QaqI.roa (raw, json)
Hash identifier: cgPI2LyIWrQD4CGoPGPfQQbWG2ca8y0xLbdM00+vI+k=
Subject key identifier: 36:92:3A:01:3B:5C:84:12:3B:93:97:F5:C4:76:4A:7E:6E:D0:6A:A2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 064B34EB
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/NpI6ATtchBI7k5f1xHZKfm7QaqI.roa
Signing time: Sat 01 Jan 2022 08:02:55 +0000
ROA not before: Sat 01 Jan 2022 08:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8943
IP address blocks: 212.13.192.0/19 maxlen: 19
185.73.44.0/22 maxlen: 22
194.33.11.0/24 maxlen: 24
2001:ba8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105592043 (0x64b34eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jan 1 08:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36923a013b5c84123b9397f5c4764a7e6ed06aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:b9:f0:58:2a:dd:ad:ec:14:66:60:aa:1f:
68:6a:69:51:a6:45:9c:ef:93:48:22:6b:80:f8:25:
6f:6a:bb:48:fe:21:21:7d:11:5f:c5:da:bc:5b:36:
04:93:8d:7c:8b:b3:51:af:14:ea:ec:7b:61:0f:c0:
19:67:62:7d:7c:3f:82:01:f5:20:56:d5:23:58:43:
de:98:3d:b6:cd:a8:21:03:11:05:ad:ee:5b:f7:88:
73:ef:6f:40:5f:f9:74:34:f6:64:36:26:fa:55:11:
a3:54:ee:b5:e9:85:76:43:cb:25:c8:20:11:ec:a4:
e6:ea:b9:42:86:c2:f6:8c:21:f4:de:4d:92:a9:e7:
94:d8:a3:29:d2:5b:09:d3:2b:40:12:23:69:2d:09:
c6:0a:45:5a:36:f3:52:f8:7d:a9:86:87:3f:48:16:
74:31:21:33:a8:3c:d6:e4:26:48:0c:ac:58:9f:c9:
f0:2b:4e:56:ef:00:06:40:4f:ab:df:90:d1:9d:37:
ce:23:a6:61:bb:0c:4b:d8:bb:07:d4:2f:5f:1d:e6:
3d:a2:4c:fc:a7:99:33:64:1f:b8:42:47:b0:c1:2a:
34:8e:42:5f:eb:a1:5a:62:03:40:3e:a8:f1:1e:fc:
12:aa:f4:46:27:a7:23:a1:48:7b:93:da:61:00:93:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:3A:01:3B:5C:84:12:3B:93:97:F5:C4:76:4A:7E:6E:D0:6A:A2
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/NpI6ATtchBI7k5f1xHZKfm7QaqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.44.0/22
194.33.11.0/24
212.13.192.0/19
IPv6:
2001:ba8::/32
Signature Algorithm: sha256WithRSAEncryption
48:11:73:53:1d:17:d2:69:13:f6:01:40:00:47:dc:9d:a3:61:
30:66:19:b9:e7:ab:5c:d9:00:e1:74:08:55:ad:90:4b:63:78:
eb:65:38:43:74:2c:21:68:02:2b:9c:87:a8:d0:f9:e3:e5:28:
9c:4b:74:a4:c7:7a:5a:e3:f2:7f:81:1d:00:80:8b:95:d2:30:
9a:d0:e9:37:1b:c2:16:42:7d:2b:9a:12:ef:e8:d8:0d:5d:6e:
da:45:b6:d9:05:ea:4d:4f:11:8d:f2:b8:1f:37:78:25:74:db:
8b:07:0e:d8:b6:e3:69:f8:66:ee:59:2c:99:2b:92:88:fd:5f:
b4:ce:05:d9:c3:b8:97:ce:a4:b0:f9:8c:f1:83:f7:72:50:ef:
5b:c5:a4:28:0c:97:a8:5c:0d:6f:03:1a:83:2f:60:80:1a:22:
77:c8:8f:a8:fc:a1:f9:d1:c4:2d:f5:2c:04:2d:84:26:24:3d:
dd:ce:86:db:67:c7:21:83:ab:23:69:cf:41:83:25:ee:e5:e7:
6f:68:7c:8b:95:a0:f6:58:d6:2d:94:f8:3f:16:96:a8:75:cb:
cd:0c:33:55:c5:74:78:36:f4:4e:d5:d4:af:f8:4d:22:a8:33:
de:b1:c3:31:84:cf:5e:d2:d4:0f:9b:6c:87:b4:53:be:18:39:
dd:e9:0c:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:39 2023 by rpki-client on console-fra.rpki-client.org