Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/ngPb1GFVSOM-lSQLdh-EK5RiYes.roa
File: ngPb1GFVSOM-lSQLdh-EK5RiYes.roa (raw, json)
Hash identifier: 9qQexTkSpr0i2l/wGcy3cxdhxlVIb0omGh04IVZdob4=
Subject key identifier: 9E:03:DB:D4:61:55:48:E3:3E:95:24:0B:76:1F:84:2B:94:62:61:EB
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0C1B135B
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/ngPb1GFVSOM-lSQLdh-EK5RiYes.roa
Signing time: Wed 01 Jun 2022 12:44:20 +0000
ROA not before: Wed 01 Jun 2022 12:44:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51190
IP address blocks: 82.200.77.0/24 maxlen: 24
94.251.92.0/24 maxlen: 24
82.200.122.0/24 maxlen: 24
82.200.123.0/24 maxlen: 24
82.200.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203101019 (0xc1b135b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jun 1 12:44:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e03dbd4615548e33e95240b761f842b946261eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:82:af:c2:5c:ec:ba:fa:4a:6a:a9:63:3d:
35:84:c9:1e:af:40:bd:73:66:43:b8:3a:60:4f:ff:
2b:f1:83:e9:63:9d:28:ee:65:2b:01:11:28:94:18:
a9:0c:c0:4d:5a:15:a6:fa:35:cf:ca:7b:62:36:e7:
b3:f6:54:48:19:71:8c:c4:58:0e:ec:2c:79:31:66:
0b:14:ae:b7:4a:77:7c:d2:fe:9a:92:d5:5e:95:27:
d2:82:31:33:90:90:99:9a:1b:10:5c:51:e6:1a:64:
29:b3:d3:d3:50:28:b6:65:47:f5:22:29:c8:b6:62:
65:5e:4d:48:ad:1a:22:94:7f:5a:1c:0f:ba:af:11:
eb:73:d7:75:34:7e:c2:a2:1e:97:7a:5c:1e:a9:5a:
30:d1:bc:6c:88:e7:1b:00:ea:68:6a:a2:d9:68:21:
93:a8:4d:93:99:7b:0d:cc:39:f6:f0:f5:df:58:34:
80:3d:af:94:a5:75:ee:70:04:5f:dd:6c:05:db:de:
ff:6b:4a:27:41:6d:e6:93:f5:db:93:ea:6e:f9:0d:
d3:e7:e6:f1:c0:bd:7d:ec:d7:11:b7:c0:6f:55:9f:
1a:1b:5d:61:06:f5:de:ed:b7:53:f5:59:d6:73:44:
51:7a:ce:8f:0e:ea:9b:06:67:13:87:5f:4d:f3:c4:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:DB:D4:61:55:48:E3:3E:95:24:0B:76:1F:84:2B:94:62:61:EB
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/ngPb1GFVSOM-lSQLdh-EK5RiYes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.200.17.0/24
82.200.77.0/24
82.200.122.0/23
94.251.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6e:f7:9e:a1:20:ff:f9:c4:6b:82:2d:64:0b:db:d3:e4:9c:
b9:ed:0c:69:96:7c:31:54:1b:62:55:54:16:89:10:11:7e:df:
bf:3e:d3:86:d8:4e:59:56:d5:b7:fc:c3:83:da:b4:ae:03:fd:
68:cf:a5:36:a4:0f:c9:71:a2:b4:26:6c:63:c3:2a:a9:5c:f4:
ba:99:27:5d:77:99:81:a0:e8:b9:89:b9:fb:1f:57:b8:f2:01:
ab:01:85:84:62:41:d3:dc:99:ef:49:62:24:6e:77:83:f9:3c:
74:3f:56:a0:c4:a9:fb:bc:2a:0d:af:72:5a:03:1c:aa:03:e4:
64:37:79:3a:05:a1:8a:eb:59:be:ef:d0:88:94:27:d0:9a:0d:
6d:17:b5:84:2c:0c:6d:63:50:6f:89:34:5b:a0:02:c9:b0:5c:
4f:e3:60:44:60:f3:e9:4f:a8:e7:e9:6f:1a:a1:49:66:50:95:
e7:04:b3:f8:b3:c1:ed:f0:2b:da:3c:3d:c4:85:d7:59:ba:79:
a8:8e:c3:aa:e9:c0:59:a1:7c:b9:46:a5:ba:05:9c:1c:e5:3e:
86:90:2f:83:a3:b7:e9:31:fa:81:97:fe:0a:ba:80:0c:28:b4:
75:cd:9c:c3:3a:fd:d2:cf:2a:98:5b:23:22:b2:04:24:11:83:
70:f4:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org