Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nSBOpN6qgmeMT3GRLvKSlebrM0Y.roa
File: nSBOpN6qgmeMT3GRLvKSlebrM0Y.roa (raw, json)
Hash identifier: 7S0Kp3VL72CIJl3ylMS8K1jREX7RYOugRUWyxKM5ZNY=
Subject key identifier: 9D:20:4E:A4:DE:AA:82:67:8C:4F:71:91:2E:F2:92:95:E6:EB:33:46
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 05E32B0F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nSBOpN6qgmeMT3GRLvKSlebrM0Y.roa
Signing time: Sat 01 Jan 2022 11:03:00 +0000
ROA not before: Sat 01 Jan 2022 11:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200005
IP address blocks: 185.123.168.0/22 maxlen: 24
194.35.38.0/24 maxlen: 24
194.35.36.0/23 maxlen: 24
2a0b:35c2::/32 maxlen: 32
2a0b:35c1::/32 maxlen: 32
2a0b:35c3::/32 maxlen: 32
2a0b:35c4::/48 maxlen: 48
2a0b:35c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98773775 (0x5e32b0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 11:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d204ea4deaa82678c4f71912ef29295e6eb3346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:c7:ca:d0:77:9e:f5:92:08:57:54:75:7d:
f4:d0:0a:2f:59:c3:3c:58:62:a2:25:f2:b7:3e:bf:
4a:42:b2:db:7b:9a:e2:b8:47:25:4b:25:5e:f7:39:
f9:d0:77:13:78:79:15:b8:3b:d2:4f:a9:3e:a2:af:
ab:24:ef:11:06:2b:0a:76:fd:0d:ff:17:de:bd:2e:
bc:b1:97:d8:89:13:52:43:53:8f:00:d0:61:3a:d2:
e1:8a:d6:2d:04:99:e6:eb:36:13:e3:2b:c6:d2:6f:
fa:66:13:8c:e9:9e:3c:56:f0:ac:eb:ca:77:07:7f:
5c:b5:b5:d6:a2:27:30:3b:7d:2a:6b:13:b7:d6:79:
05:dc:3b:91:97:fc:31:cd:9d:b4:99:3b:94:6e:b9:
2f:f8:7f:a7:43:0f:27:0b:a3:be:ae:4b:18:f8:a9:
e9:39:46:34:f4:a3:e9:b1:c1:13:eb:fd:79:3c:8d:
39:ad:9b:86:5f:6a:b7:6a:df:eb:20:09:c4:05:67:
76:93:5e:8c:fd:2f:04:04:2d:0c:66:3d:a7:94:07:
88:51:3b:64:a5:4d:a8:29:df:16:cc:72:75:8a:74:
45:4e:c7:69:f0:dc:4e:1a:db:cf:7c:38:66:41:7f:
84:b3:b5:fa:78:ff:2f:57:0e:34:40:07:21:da:4d:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:4E:A4:DE:AA:82:67:8C:4F:71:91:2E:F2:92:95:E6:EB:33:46
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nSBOpN6qgmeMT3GRLvKSlebrM0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.168.0/22
194.35.36.0-194.35.38.255
IPv6:
2a0b:35c0::-2a0b:35c4:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:fb:8a:eb:6a:e4:49:6d:f0:62:be:7a:d7:e0:02:36:e1:32:
0d:42:c6:45:01:45:34:5f:1f:8d:54:7f:af:af:5b:57:d9:70:
d7:9a:20:5a:7f:d3:23:53:55:dd:35:1d:69:ef:18:58:a0:37:
26:eb:43:49:49:b1:00:14:fb:85:08:f4:28:ac:94:24:07:c4:
bb:70:d3:19:35:7b:4f:9b:5e:e2:88:48:70:0f:63:f2:8b:cd:
89:86:cf:c8:9a:65:62:65:b2:a0:36:b7:2a:cc:33:0e:b8:2f:
69:fd:8d:9c:af:f2:2c:1b:d7:62:f1:c8:8b:c7:8f:5c:bd:5c:
ee:c6:d4:3c:91:92:91:5e:bd:5f:e8:9a:32:ce:44:be:3e:26:
9c:e9:f2:48:2f:d7:64:fd:32:2f:14:cc:53:3f:04:40:83:c2:
8d:53:e2:fa:11:4d:ab:80:54:ce:b5:4c:be:aa:35:4f:e3:63:
08:3d:70:41:3e:56:58:13:20:19:63:20:50:e6:ff:38:9c:ee:
8b:46:c0:65:c9:ef:98:aa:74:4c:d3:4d:bb:c5:fe:11:96:75:
a3:66:c7:b6:4f:5f:98:77:af:b6:4e:b5:fa:07:00:71:fe:df:
ac:ea:65:40:62:60:ee:5f:f4:0e:58:77:f1:d3:5a:36:85:2f:
3a:a8:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org