Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/nZHLPdTzx7HUOhEKfAt7ccOmeEg.roa
File: nZHLPdTzx7HUOhEKfAt7ccOmeEg.roa (raw, json)
Hash identifier: ihA63qGM+t18y9DWTm59FlrvM8NuYqblSECtXW7AAtY=
Subject key identifier: 9D:91:CB:3D:D4:F3:C7:B1:D4:3A:11:0A:7C:0B:7B:71:C3:A6:78:48
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 0181CE44D34600931C4DEB94932196B350ED
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/nZHLPdTzx7HUOhEKfAt7ccOmeEg.roa
Signing time: Tue 05 Jul 2022 12:10:25 +0000
ROA not before: Tue 05 Jul 2022 12:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1547
IP address blocks: 37.26.128.0/20 maxlen: 20
95.153.64.0/19 maxlen: 19
185.10.20.0/22 maxlen: 22
77.235.96.0/20 maxlen: 20
77.235.112.0/20 maxlen: 20
95.153.96.0/19 maxlen: 19
80.94.246.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.243.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
31.31.0.0/19 maxlen: 19
80.94.254.0/24 maxlen: 24
62.221.96.0/19 maxlen: 19
80.94.240.0/24 maxlen: 24
62.221.64.0/19 maxlen: 19
2a03:f680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:44:d3:46:00:93:1c:4d:eb:94:93:21:96:b3:50:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Jul 5 12:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d91cb3dd4f3c7b1d43a110a7c0b7b71c3a67848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:60:b0:af:ad:89:22:a2:d0:0d:2f:5b:8a:4f:
69:6b:22:b7:4d:be:00:53:2a:11:e8:37:a3:9d:e5:
72:3b:8c:1d:2e:7c:b0:0a:f2:63:2e:83:7a:86:1c:
90:cd:3f:85:be:f8:5a:31:ee:df:6f:23:e3:9d:05:
eb:55:87:a5:75:41:25:d9:71:59:2b:89:99:1f:68:
3b:63:fa:a6:65:be:d0:4a:0c:f6:f4:a4:e1:5e:2a:
6a:99:1e:15:e8:b9:84:c5:52:50:d3:3e:ee:8b:f3:
83:73:d5:e0:ed:79:c2:6a:c2:ad:fa:9a:91:f7:53:
61:32:43:7e:fa:19:fd:26:4f:54:3b:d7:96:7c:1d:
e3:8f:c5:13:23:af:ba:1f:80:0d:b5:4f:49:f6:10:
bc:9b:3c:73:3b:8d:42:78:f9:5e:2a:7b:46:96:6d:
9f:c6:c9:2d:cb:ad:47:fc:fd:89:22:ad:83:88:ec:
2b:cd:b5:59:2d:49:3c:d4:64:cc:87:2a:3c:ee:5f:
1e:07:d7:02:6b:1b:9a:3a:4b:0f:43:9a:28:ab:15:
d3:c5:69:bd:ca:32:e8:37:57:a0:8d:77:22:e6:ef:
4d:26:f8:12:bb:1c:65:06:f5:6b:e8:a3:b9:62:67:
af:2f:d1:bd:46:b4:b1:df:ea:68:1b:cd:0e:cb:3a:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:CB:3D:D4:F3:C7:B1:D4:3A:11:0A:7C:0B:7B:71:C3:A6:78:48
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/nZHLPdTzx7HUOhEKfAt7ccOmeEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
26:ba:29:45:7e:e5:ad:2c:dc:38:cf:8e:fa:f2:eb:2f:f3:f7:
2f:53:81:d1:e6:51:e5:30:a2:54:5c:31:49:11:61:98:7b:6e:
e6:e6:bf:37:8a:11:42:ab:3b:8a:6d:ed:2a:f9:1f:7b:d3:be:
e6:65:e2:06:0b:33:99:51:22:d7:4d:e2:cd:31:42:64:3f:d1:
a5:1a:5e:07:26:9a:c0:b1:df:f9:c0:94:5a:32:61:52:6c:ea:
83:54:15:06:10:a3:e7:6d:1a:07:ab:6b:6f:12:de:21:3f:59:
46:bb:24:8c:1c:0e:a6:82:2c:13:09:d0:a8:7d:17:86:5f:d3:
cf:64:45:04:a6:88:df:b8:10:45:fd:e5:35:f3:f4:18:66:a1:
05:ee:a1:b3:26:40:4e:c8:fa:ee:9a:88:e8:29:27:12:35:bd:
25:47:4b:ec:fb:95:19:42:43:f1:f2:0e:87:5d:f9:8c:f3:f7:
6d:76:f7:ea:58:09:f0:ff:66:4f:c2:42:b5:68:6c:b4:40:46:
89:a0:71:80:42:ca:0e:53:d4:83:b0:68:fe:b7:e3:e9:20:6b:
eb:2c:00:6d:d9:03:c2:aa:1e:e6:50:3f:ba:d2:c1:99:9f:3f:
67:39:4d:a8:c9:a8:fe:fe:5b:d1:d5:e3:c6:72:a3:59:ea:cb:
4b:7a:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org