Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/nsTo_uE_zXNaIa0Vu9OlMEGpQEs.roa
File: nsTo_uE_zXNaIa0Vu9OlMEGpQEs.roa (raw, json)
Hash identifier: 2DaqKI4jRpCSwtsLDHpQDgPkrvUdN3dCc+ky2NUyxJQ=
Subject key identifier: 9E:C4:E8:FE:E1:3F:CD:73:5A:21:AD:15:BB:D3:A5:30:41:A9:40:4B
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 05B6D6DC
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/nsTo_uE_zXNaIa0Vu9OlMEGpQEs.roa
Signing time: Sat 01 Jan 2022 15:07:29 +0000
ROA not before: Sat 01 Jan 2022 15:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61295
IP address blocks: 185.241.213.0/24 maxlen: 24
185.241.212.0/24 maxlen: 24
185.241.215.0/24 maxlen: 24
185.241.214.0/24 maxlen: 24
2a0c:bf80::/48 maxlen: 48
2a0c:bf81::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95868636 (0x5b6d6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 1 15:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ec4e8fee13fcd735a21ad15bbd3a53041a9404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:ac:df:64:4b:37:2c:c2:8f:38:54:40:83:
d0:5e:00:d9:2a:59:dd:e4:43:d3:8c:b6:21:8a:62:
ee:df:d5:81:9d:f6:ac:d2:8a:9a:25:2b:cd:ef:0d:
f5:5b:0b:16:0f:6e:73:f9:d1:99:30:17:85:ce:47:
f0:19:73:09:cc:9e:5c:3b:87:79:9e:43:e4:bb:b4:
43:b9:5e:32:6d:7b:fe:50:15:cd:e5:a4:ab:cf:9e:
67:67:1b:f1:df:9c:e6:af:bd:e2:22:80:30:2b:ca:
fc:f7:9c:5a:51:b6:31:7b:eb:9a:45:cc:f0:a5:33:
4c:7b:c4:62:93:12:9b:8c:24:01:dc:93:f7:4e:0a:
2f:f8:f6:e6:38:ef:86:86:ff:56:93:1d:06:c4:06:
1d:65:6e:44:66:a3:bc:90:ba:ea:c5:82:d9:23:ed:
19:ab:fe:36:45:ca:fd:82:ff:46:a2:91:1e:a6:75:
e7:9f:8c:4a:3c:66:5e:a1:d0:cf:71:12:b8:83:b8:
91:a2:48:5e:f9:a4:27:87:6b:fe:5a:bc:74:6e:55:
e9:89:bb:e8:e4:3b:c4:1c:4e:0b:81:09:f9:42:bf:
9f:4a:52:55:9f:72:60:2d:4e:b7:04:06:74:a8:ed:
aa:4a:b2:37:3e:1c:da:73:a7:98:80:c9:cc:02:69:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C4:E8:FE:E1:3F:CD:73:5A:21:AD:15:BB:D3:A5:30:41:A9:40:4B
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/nsTo_uE_zXNaIa0Vu9OlMEGpQEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.212.0/22
IPv6:
2a0c:bf80::/48
2a0c:bf81::/48
Signature Algorithm: sha256WithRSAEncryption
59:80:fa:31:e0:4b:a5:0e:35:89:99:d2:24:68:ac:10:c4:df:
97:05:e3:36:ee:c9:cd:67:85:9c:54:44:08:49:ed:84:25:6b:
a3:9b:a4:f7:86:1c:cc:68:31:91:70:6c:11:fb:46:40:f6:67:
21:a7:52:b2:22:bc:4e:ff:d5:a2:b3:38:c6:52:59:3b:60:3a:
24:ca:ee:6e:29:7b:f7:c0:65:2d:99:b7:a4:81:b9:45:43:6e:
a0:da:94:37:ff:13:79:10:3a:5a:56:b7:80:3d:5c:ac:30:46:
1a:12:25:6d:00:81:f7:1f:c6:9d:c4:35:6d:88:08:8c:74:0e:
5d:54:db:44:62:a0:e0:72:b7:4c:f0:db:6f:34:5a:75:0a:2e:
37:19:41:4d:45:93:13:c8:c9:78:72:6e:d8:d3:c4:c5:e2:b5:
b2:ea:ee:17:76:5a:06:e9:7a:fb:f3:e6:b0:f4:0c:fc:18:af:
47:9d:24:75:cb:6c:29:29:7f:e4:dc:e4:6a:49:95:17:dc:38:
cd:95:26:00:19:e1:ca:12:3b:36:9b:a7:11:0b:a8:8b:09:4c:
54:fd:8b:78:d3:b9:c0:f9:ac:ce:0c:cd:65:22:1d:cd:e0:17:
24:1a:51:44:81:9c:bd:66:65:12:66:59:8f:5d:5e:0c:cf:21:
2f:f3:d3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:19 2023 by rpki-client on console-fra.rpki-client.org