Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/nxeHw8fGLD84q0A84JyZak9YEaw.roa
File: nxeHw8fGLD84q0A84JyZak9YEaw.roa (raw, json)
Hash identifier: znoUeZYEV/sXlGXuXRBjllAziSrmfauBx9KlOKJkJVc=
Subject key identifier: 9F:17:87:C3:C7:C6:2C:3F:38:AB:40:3C:E0:9C:99:6A:4F:58:11:AC
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 2588F9C0
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/nxeHw8fGLD84q0A84JyZak9YEaw.roa
Signing time: Sat 01 Jan 2022 05:58:06 +0000
ROA not before: Sat 01 Jan 2022 05:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20552
IP address blocks: 93.105.73.0/24 maxlen: 24
93.105.75.0/24 maxlen: 24
93.105.72.0/24 maxlen: 24
178.235.240.0/24 maxlen: 24
178.235.240.0/22 maxlen: 22
178.235.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629733824 (0x2588f9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 05:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f1787c3c7c62c3f38ab403ce09c996a4f5811ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:c3:ed:f7:9a:c5:1a:34:3a:1d:18:4e:b1:
ea:b4:40:b5:8f:2f:bc:41:44:bb:f8:3f:57:7d:9a:
10:17:43:cd:df:b6:e9:40:7e:ac:ed:de:fa:92:03:
61:76:f9:b1:6f:78:17:65:15:0e:68:55:90:aa:2c:
49:42:32:85:67:57:0b:f5:12:0a:29:31:35:55:c9:
08:23:04:5b:3d:27:80:cb:1e:48:ea:90:ba:1d:9a:
e7:b8:87:d0:55:06:0f:45:9b:ce:6e:83:ab:27:b4:
00:ff:f6:d0:be:1e:88:dc:57:fb:d9:82:71:5a:9a:
6a:c7:b1:5b:14:c9:cb:cc:e1:4a:b6:21:4e:11:9d:
48:14:fb:58:c8:ee:51:13:f2:c5:45:33:f1:a3:2c:
1e:4d:d8:66:76:54:c6:ce:62:1b:64:71:68:45:4c:
f4:81:44:52:b6:10:1b:80:6f:dd:ea:cc:b4:d9:65:
60:a0:e6:3e:37:f1:1e:e5:10:de:fa:6d:06:7c:a2:
b9:cd:b1:dc:14:9d:2a:d0:5d:91:32:03:c4:69:88:
9f:6b:5a:4b:04:85:dd:9a:61:80:74:5d:08:1b:d3:
fd:44:ec:70:d1:b0:dc:db:0b:4d:26:26:09:2b:2a:
cd:e4:29:bd:07:03:7a:fb:81:e7:9b:0e:f2:92:af:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:17:87:C3:C7:C6:2C:3F:38:AB:40:3C:E0:9C:99:6A:4F:58:11:AC
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/nxeHw8fGLD84q0A84JyZak9YEaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.72.0/23
93.105.75.0/24
178.235.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:e5:40:f9:04:4d:41:56:18:b7:53:a1:21:87:11:4a:60:6a:
b0:b1:1c:07:6b:68:65:8c:30:3c:a7:42:50:a0:8a:50:40:b6:
b3:12:68:f5:9e:34:a4:12:e7:af:2f:20:3d:9a:6b:eb:ee:4d:
ce:eb:67:7f:74:1a:a9:3e:3d:5e:39:23:f3:11:83:8d:88:ae:
42:dd:f4:66:41:24:f5:d9:f7:78:a4:5f:9c:0b:5b:51:5a:3c:
fa:70:95:c0:1d:01:10:1e:f4:dd:80:4e:b3:94:e3:d9:4b:8c:
e6:cd:4d:7a:b6:e0:7d:5b:b7:f4:b5:34:00:05:e4:50:9f:fb:
e2:3b:8b:ec:86:a4:cf:40:c1:b2:0c:e5:5e:1d:a2:e1:f6:6f:
3d:36:90:64:e3:11:d8:f2:a0:6b:09:04:eb:02:40:2b:cf:05:
b8:53:9d:ff:e9:1f:cc:84:9d:27:1a:17:81:24:c1:6a:49:33:
a6:32:9c:a5:ee:26:4a:54:fd:87:a4:cc:9f:ba:54:00:c8:aa:
b2:51:d1:94:68:75:62:a4:79:8e:3e:c5:ba:8a:72:86:42:d8:
0a:89:a9:7e:42:ee:e7:d8:55:c8:a8:3f:25:10:a3:e4:fe:75:
53:32:af:52:2a:a7:b1:9a:31:68:56:42:96:11:c7:c0:0e:b1:
ee:9f:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org