Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/NHOUX_LeqSLHi6arEZiC6Pb1fbo.roa
File: NHOUX_LeqSLHi6arEZiC6Pb1fbo.roa (raw, json)
Hash identifier: xcNZq9c0fhtlJ5WUkO7OURvrM5vZKH2BKs7RVIrFdh0=
Subject key identifier: 34:73:94:5F:F2:DE:A9:22:C7:8B:A6:AB:11:98:82:E8:F6:F5:7D:BA
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 0599760B
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/NHOUX_LeqSLHi6arEZiC6Pb1fbo.roa
Signing time: Sat 01 Jan 2022 06:53:42 +0000
ROA not before: Sat 01 Jan 2022 06:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49601
IP address blocks: 185.189.124.0/22 maxlen: 22
185.189.125.0/24 maxlen: 24
185.189.124.0/24 maxlen: 24
185.189.126.0/24 maxlen: 24
185.189.127.0/24 maxlen: 24
91.229.56.0/24 maxlen: 24
91.229.185.0/24 maxlen: 24
91.229.182.0/24 maxlen: 24
91.229.210.0/24 maxlen: 24
185.226.62.0/24 maxlen: 24
185.226.60.0/22 maxlen: 22
185.226.63.0/24 maxlen: 24
185.226.60.0/24 maxlen: 24
185.226.61.0/24 maxlen: 24
185.252.96.0/24 maxlen: 24
185.252.97.0/24 maxlen: 24
185.252.98.0/24 maxlen: 24
185.252.96.0/22 maxlen: 22
185.252.99.0/24 maxlen: 24
2a0c:3e00::/29 maxlen: 29
2a0b:e680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93943307 (0x599760b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Jan 1 06:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3473945ff2dea922c78ba6ab119882e8f6f57dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:02:7e:5e:95:83:f3:bc:87:3e:46:1d:d9:
41:54:b0:a3:1e:95:7a:0d:ce:dd:5c:98:09:80:f7:
9f:44:53:40:ef:b9:e1:25:b0:fa:22:af:a2:ab:3a:
2a:93:dd:6d:b9:62:e5:ad:e1:89:e9:aa:20:f4:18:
82:f3:89:7a:9a:b2:91:78:41:76:33:7b:da:ac:9a:
48:81:a2:5d:fc:ba:2d:51:0f:42:df:85:2d:8f:a4:
3e:dd:8a:83:f3:68:84:97:4a:d1:85:ba:d2:c9:46:
2c:be:14:f7:f6:76:02:a3:5b:c1:89:ff:ef:a2:81:
42:e5:a8:b7:42:3f:24:e3:e5:a1:14:67:a8:b9:39:
be:78:82:d0:a9:c6:a8:d3:d9:4e:d6:a2:f3:67:13:
b2:3e:09:e9:99:82:7b:d2:09:41:39:c6:83:5d:39:
5f:2d:07:9a:e1:4a:94:ee:ba:35:13:b5:ed:f2:28:
78:f9:4c:57:54:1a:c4:67:30:84:4c:20:87:24:8f:
f1:b3:66:17:fd:b0:34:0a:f0:ba:f5:21:c6:75:b5:
10:99:19:d4:e4:df:7b:b0:d7:12:90:3f:1f:6d:3d:
45:64:00:96:6b:98:af:ce:f1:5c:6f:a8:ca:1a:82:
e6:1d:14:a6:b4:65:cf:32:17:de:c6:46:5e:b8:c8:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:94:5F:F2:DE:A9:22:C7:8B:A6:AB:11:98:82:E8:F6:F5:7D:BA
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/NHOUX_LeqSLHi6arEZiC6Pb1fbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.56.0/24
91.229.182.0/24
91.229.185.0/24
91.229.210.0/24
185.189.124.0/22
185.226.60.0/22
185.252.96.0/22
IPv6:
2a0b:e680::/29
2a0c:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
95:6b:ab:9b:3f:f5:de:ac:8d:71:23:3b:93:61:5b:2f:74:39:
8c:00:17:65:7f:a1:a0:1a:df:c9:67:54:3d:f8:27:44:92:92:
b9:c3:05:d8:7e:b0:9e:ce:5c:bb:03:52:51:fb:1e:91:aa:1e:
d9:00:3e:16:0b:23:6e:4a:e3:29:4d:d0:37:78:51:81:cd:d6:
ef:76:16:d7:1e:2b:dd:54:f9:5d:65:e2:4b:c9:f3:95:64:3d:
b1:f3:7a:9b:ef:d1:95:bf:78:be:ae:d7:67:de:76:fc:45:6b:
30:a8:db:98:54:54:03:e3:10:f0:d3:6f:d5:01:56:57:9f:90:
59:1b:17:31:9f:6e:18:ac:1e:0a:ef:49:45:9b:dd:99:5b:5f:
e2:3b:55:93:2f:44:17:f9:4d:87:71:44:7a:c7:27:33:1c:38:
9a:bb:40:d1:77:a6:87:e3:a6:c7:92:15:6b:c4:94:e9:28:c0:
2c:6e:81:29:5c:99:e5:20:6c:53:60:80:48:51:f9:0d:e2:bc:
1a:74:d9:ac:d9:15:6e:fa:76:22:96:10:05:f6:d1:cd:3d:ee:
b5:20:89:13:00:76:ee:ad:6e:94:9d:80:dc:da:3e:9c:90:4e:
96:a2:a2:37:c7:c0:a0:43:d6:ab:a1:69:ab:0c:7b:d1:1b:76:
c8:58:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org