Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/nxCa5gtgMuad6eeWqCej3WX2p9Q.roa
File: nxCa5gtgMuad6eeWqCej3WX2p9Q.roa (raw, json)
Hash identifier: UjL/2dzefDQv0uylO5u5bSDYDKCRO1PCL4dgrcSH52I=
Subject key identifier: 9F:10:9A:E6:0B:60:32:E6:9D:E9:E7:96:A8:27:A3:DD:65:F6:A7:D4
Certificate issuer: /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial: 01837A3C7FE45C99841096F739A8D825E102
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/nxCa5gtgMuad6eeWqCej3WX2p9Q.roa
Signing time: Mon 26 Sep 2022 14:38:48 +0000
ROA not before: Mon 26 Sep 2022 14:38:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 185.155.64.0/24 maxlen: 24
185.155.67.0/24 maxlen: 24
176.98.223.0/24 maxlen: 24
176.98.220.0/24 maxlen: 24
185.187.183.0/24 maxlen: 24
185.187.182.0/24 maxlen: 24
185.187.181.0/24 maxlen: 24
185.187.180.0/24 maxlen: 24
2a0d:59c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:3c:7f:e4:5c:99:84:10:96:f7:39:a8:d8:25:e1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Validity
Not Before: Sep 26 14:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f109ae60b6032e69de9e796a827a3dd65f6a7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:26:a5:de:3d:46:b3:f1:3f:c6:1c:b2:2d:
03:dd:74:2e:f0:14:ba:bb:9b:dc:58:68:7b:47:01:
81:7e:21:f1:d9:ba:09:4a:3a:88:10:4b:2f:76:10:
6f:3e:7e:81:1a:ee:d1:56:a5:06:06:8f:ef:5e:20:
89:3e:cc:1b:f8:f5:08:c8:4d:f1:35:22:37:26:c6:
0e:d5:f0:8b:04:7f:b1:d8:25:30:3e:63:a9:76:a9:
8c:6a:c6:e2:97:4c:14:d0:24:db:d4:85:23:33:99:
0a:de:9d:d3:c9:d7:be:41:47:3c:c9:c7:16:fa:9e:
12:c3:47:b2:2b:f8:91:ca:a4:38:2b:55:5c:1f:e3:
55:bb:83:91:65:91:75:89:40:4a:8c:c2:dc:04:b8:
d0:37:ec:89:39:6e:01:78:91:95:72:e6:08:ca:40:
ee:30:9b:aa:68:4b:1e:49:0b:4c:99:30:3f:f4:87:
10:dc:04:0a:88:85:97:10:51:38:04:4f:c9:7e:9c:
20:17:e7:44:e8:e8:08:0c:fe:3d:be:3a:94:97:7f:
02:87:ae:c5:6c:ca:7d:31:f0:8e:d4:9e:5b:c2:e9:
98:27:3b:f4:60:e0:fd:de:1f:ec:02:dd:8f:0f:10:
ac:00:1a:37:34:fc:2e:70:a0:d1:35:09:00:db:c3:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:9A:E6:0B:60:32:E6:9D:E9:E7:96:A8:27:A3:DD:65:F6:A7:D4
X509v3 Authority Key Identifier:
keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/nxCa5gtgMuad6eeWqCej3WX2p9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.220.0/24
176.98.223.0/24
185.155.64.0/24
185.155.67.0/24
185.187.180.0/22
IPv6:
2a0d:59c7::/32
Signature Algorithm: sha256WithRSAEncryption
4a:28:25:e3:2d:f2:0e:3b:72:30:0a:e8:4e:fd:ee:b8:cc:01:
f3:b2:be:c4:19:ec:e5:a2:8e:8c:f2:f9:5f:44:a9:67:b5:7e:
f7:e8:64:bc:8c:de:d6:e9:d3:ff:6c:fa:5a:6c:50:25:51:14:
4a:0f:70:1d:29:6c:3c:d0:67:b1:98:85:27:02:a1:38:9b:2b:
77:4e:ea:da:ef:90:5f:7f:b3:96:16:b7:17:e7:78:4e:f0:67:
94:26:8f:93:ef:81:0c:77:8d:44:84:d0:cc:bb:b8:4d:14:f2:
46:85:61:aa:c4:0c:e6:a0:0b:de:39:3e:8b:da:03:c4:89:21:
66:eb:20:0b:61:eb:49:f3:aa:53:d3:74:4f:a3:ed:04:c8:bc:
6a:d2:db:2f:62:26:eb:09:e9:d1:fc:80:8b:4b:c4:09:75:97:
84:18:ba:9e:16:02:fa:1c:19:de:2a:7c:22:ca:62:51:58:23:
9e:30:95:b4:5f:a9:8d:2e:01:76:1f:06:fb:0b:78:49:ca:e9:
f6:b2:42:c8:56:77:b0:c9:5e:76:cc:c3:87:f8:c2:61:1d:e3:
7c:d4:f4:14:80:77:1a:7d:d7:d1:6e:86:5e:68:80:f9:07:ab:
d2:0e:78:ea:34:a7:b1:72:c1:de:35:17:7b:96:84:09:c7:40:
b4:22:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:47 2023 by rpki-client on console-ams.rpki-client.org