Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/N4S_jElVAfP88tlnPFr6iHIfqPk.roa
File: N4S_jElVAfP88tlnPFr6iHIfqPk.roa (raw, json)
Hash identifier: jCaVBVjzLIFV0HU9O9rZYF/npEm8JeCpTDOfNQdaWfU=
Subject key identifier: 37:84:BF:8C:49:55:01:F3:FC:F2:D9:67:3C:5A:FA:88:72:1F:A8:F9
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 393DE27C
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/N4S_jElVAfP88tlnPFr6iHIfqPk.roa
Signing time: Sat 01 Jan 2022 08:05:29 +0000
ROA not before: Sat 01 Jan 2022 08:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6736
IP address blocks: 94.184.0.0/16 maxlen: 24
185.62.232.0/22 maxlen: 22
194.225.0.0/16 maxlen: 24
2001:678:b0::/46 maxlen: 48
2001:14e8::/32 maxlen: 48
2001:14e8::/48 maxlen: 48
2001:14e8:1::/48 maxlen: 48
2001:14e8:0:405::405/128 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960356988 (0x393de27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 1 08:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3784bf8c495501f3fcf2d9673c5afa88721fa8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:cf:0f:83:ad:9d:7a:84:9a:ea:e5:8e:19:
b3:b0:dd:f6:0d:60:1c:96:94:c1:7d:d7:0f:7e:28:
3f:14:4b:89:f2:13:e9:f8:85:b9:1b:0d:61:62:63:
27:78:63:2f:f6:22:18:37:2f:62:59:85:99:64:d4:
86:12:fc:4b:57:c0:91:06:44:67:63:07:56:68:d6:
94:78:0c:5a:8e:63:92:e2:04:ca:05:4d:a0:c5:67:
c7:06:77:1d:8d:c7:17:8a:fb:66:8f:8f:cf:3b:07:
65:d3:e1:2a:29:99:8a:1c:1d:82:50:94:52:cc:8f:
af:35:2d:d5:48:7c:24:c2:d7:87:d9:1d:44:d0:74:
b7:62:20:5e:1e:2c:07:15:d8:29:c5:d9:fc:3c:48:
c3:24:00:ce:70:18:92:bb:e6:43:80:0a:0e:c7:0a:
dd:db:ba:cd:f5:98:67:a9:32:5a:a2:6b:a4:2d:c0:
a4:08:31:76:08:9d:51:b9:2c:24:e3:17:7d:17:4e:
9e:7b:a4:44:f0:d9:23:26:e1:2e:5b:03:90:04:1d:
bc:71:3d:fd:1d:0f:43:0d:54:79:0d:93:39:02:5f:
c0:11:66:1b:ed:13:8e:c0:06:46:94:82:3a:d1:f4:
68:d0:39:f2:64:d5:f6:9e:4b:a0:4f:1c:b2:20:34:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:84:BF:8C:49:55:01:F3:FC:F2:D9:67:3C:5A:FA:88:72:1F:A8:F9
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/N4S_jElVAfP88tlnPFr6iHIfqPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/16
185.62.232.0/22
194.225.0.0/16
IPv6:
2001:678:b0::/46
2001:14e8::/32
Signature Algorithm: sha256WithRSAEncryption
45:d5:af:68:6b:2c:75:6d:c1:1b:07:f4:29:62:38:fa:f1:fc:
f0:8d:00:91:4e:b4:ab:cd:a5:94:7c:f4:25:ef:fc:b8:6e:54:
3a:c4:04:98:8f:c8:bf:73:2c:79:83:8f:2e:e4:11:1b:1e:17:
df:2a:bc:7e:e8:bc:5b:9a:39:cc:26:50:3c:ab:44:9c:eb:57:
00:09:f1:89:3c:e6:d7:68:db:76:be:43:72:bd:cb:31:8e:ce:
ac:00:80:c6:f8:c3:d3:44:97:eb:c5:13:d5:25:8d:76:c0:93:
8b:2d:98:61:56:64:e6:47:e9:37:4a:01:74:d6:ff:46:1d:a0:
ae:68:ed:f1:a7:26:67:05:de:f1:f6:f2:16:c5:83:c8:02:16:
8b:ee:59:5c:50:67:86:03:77:37:03:34:ce:c8:30:cc:76:f5:
06:71:4e:8e:4c:af:cc:09:90:79:a3:1b:6d:c6:4d:75:6f:b0:
1a:28:30:5f:67:e3:f0:ad:93:20:04:7e:e8:8f:e9:e4:d3:7c:
73:ee:3d:9d:7a:63:c4:97:de:55:6e:34:02:5f:00:d4:c7:9a:
64:61:02:6a:0a:61:6f:49:b0:8d:07:8c:b4:61:ea:e6:4f:41:
54:6c:bb:7b:2f:5a:42:f0:a2:96:01:d4:cb:e7:de:5b:f1:60:
c3:79:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org