Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/nPj1694yqD9I02Mgp8_iOaJiKpA.roa
File: nPj1694yqD9I02Mgp8_iOaJiKpA.roa (raw, json)
Hash identifier: XKNwgqFhDjLbGbv+e3I7kxgZ0GLC56NFdNsB272q+Cs=
Subject key identifier: 9C:F8:F5:EB:DE:32:A8:3F:48:D3:63:20:A7:CF:E2:39:A2:62:2A:90
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 0B64D3B1
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/nPj1694yqD9I02Mgp8_iOaJiKpA.roa
Signing time: Sat 01 Jan 2022 06:06:32 +0000
ROA not before: Sat 01 Jan 2022 06:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205581
IP address blocks: 185.213.37.0/24 maxlen: 24
185.213.36.0/24 maxlen: 24
185.213.38.0/24 maxlen: 24
185.213.39.0/24 maxlen: 24
2a0b:8240::/32 maxlen: 32
2a0b:8246::/32 maxlen: 32
2a0b:8245::/32 maxlen: 32
2a0b:8242::/32 maxlen: 32
2a0b:8241::/32 maxlen: 32
2a0b:8243::/32 maxlen: 32
2a0b:8244::/32 maxlen: 32
2a0b:8247::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191157169 (0xb64d3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Jan 1 06:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cf8f5ebde32a83f48d36320a7cfe239a2622a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:d2:98:8b:c3:ef:83:3d:f5:36:6e:1b:01:
7d:b0:37:38:46:04:d1:25:46:92:32:ba:ff:43:77:
02:18:a0:64:74:db:43:4a:14:dc:2c:50:57:f0:dd:
d0:df:8c:72:1e:24:eb:80:2f:d3:5c:f9:d6:8a:50:
63:58:f2:80:51:97:24:31:38:99:85:5a:ab:7a:6f:
c0:19:cd:99:0b:20:c3:bd:ee:69:62:3f:0d:18:2c:
6f:32:d1:7d:ab:47:46:1a:f2:d2:ce:db:70:f4:b0:
f1:e8:f7:b8:8a:0a:20:fb:57:a9:6d:6e:3a:09:c7:
02:70:77:1d:ce:29:a5:3d:b0:b0:4a:1e:5d:38:88:
26:f0:c9:e3:a5:70:b9:a1:6a:27:f9:21:e5:a8:fd:
63:f0:b7:05:17:51:bb:0c:72:25:3e:b9:02:3f:21:
ae:71:f4:16:77:03:5c:7a:0c:5f:d5:8b:f1:4e:9f:
fb:e9:ee:1d:ff:db:64:4e:74:f1:58:03:1b:25:c5:
80:c9:bf:ac:dc:11:d4:c6:dc:a5:14:e2:ce:f5:fa:
e5:b7:43:28:bc:d5:e0:43:a5:2f:49:ef:5b:55:62:
4e:25:9d:08:37:12:47:ec:0d:e9:29:69:90:91:22:
34:6b:d0:e4:b9:3b:be:d6:03:0a:04:89:2d:88:ce:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:F5:EB:DE:32:A8:3F:48:D3:63:20:A7:CF:E2:39:A2:62:2A:90
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/nPj1694yqD9I02Mgp8_iOaJiKpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.36.0/22
IPv6:
2a0b:8240::/29
Signature Algorithm: sha256WithRSAEncryption
3e:bf:3d:f0:af:16:40:36:d7:57:6e:2b:c2:0e:4a:b8:f4:e4:
7e:2e:2f:c7:ce:80:fb:78:1b:30:aa:05:a2:fd:35:6b:b5:fd:
bd:d4:b4:ea:e0:2c:a5:1b:c3:2a:3f:ab:29:9e:06:21:99:50:
77:86:96:a9:6d:a6:56:8a:f2:dc:bc:b9:83:e7:62:b1:c4:fd:
65:0e:58:57:85:4f:56:26:2e:e2:ef:20:55:6a:55:ce:9f:4f:
a0:a6:c3:43:09:75:d1:ff:1d:8d:8f:a9:e4:85:d7:37:7d:b0:
46:a1:30:8c:cf:ca:02:86:dc:d6:eb:43:a1:07:50:18:d0:3a:
10:e8:8e:7c:d3:7e:ce:6c:df:55:dc:4e:0f:c1:40:09:ce:2a:
6e:54:cd:8b:f2:66:f3:62:1a:24:7a:b5:ed:cd:1a:09:c4:57:
c4:7f:06:2c:72:47:70:b4:31:8b:bf:80:12:f3:3e:ab:9a:ad:
9c:f3:e3:7e:4b:90:47:f0:5a:96:17:46:58:57:c0:6c:5b:8f:
84:95:3e:dc:df:c1:8e:95:7b:9a:ff:6d:7e:01:73:64:6c:92:
3c:1a:d3:62:6a:ed:36:72:b1:b0:71:c8:74:25:28:7c:e7:96:
db:a2:61:6b:d1:0d:b1:11:a7:96:16:94:65:23:e6:95:4c:9a:
e5:98:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:26 2025 by rpki-client