Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NlviZRXDSUj9AvsslH--qBCirag.roa
File: NlviZRXDSUj9AvsslH--qBCirag.roa (raw, json)
Hash identifier: ye44FrHKL+wFZgQWm1rLBG+udjy6EIzNLsrk77CRG2g=
Subject key identifier: 36:5B:E2:65:15:C3:49:48:FD:02:FB:2C:94:7F:BE:A8:10:A2:AD:A8
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0182D3CFF0C3C6E38A67294A7A3B1437CAED
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NlviZRXDSUj9AvsslH--qBCirag.roa
Signing time: Thu 25 Aug 2022 07:03:16 +0000
ROA not before: Thu 25 Aug 2022 07:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197343
IP address blocks: 185.215.230.0/24 maxlen: 24
185.124.172.0/22 maxlen: 22
5.56.130.0/23 maxlen: 23
5.56.128.0/22 maxlen: 22
5.56.128.0/23 maxlen: 23
37.32.44.0/24 maxlen: 24
37.32.42.0/24 maxlen: 24
37.32.41.0/24 maxlen: 24
37.32.40.0/22 maxlen: 24
37.32.45.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
5.57.32.0/21 maxlen: 24
185.212.48.0/24 maxlen: 24
185.212.48.0/22 maxlen: 22
185.212.49.0/24 maxlen: 24
178.239.149.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.156.0/23 maxlen: 23
178.239.156.0/22 maxlen: 22
178.239.155.0/24 maxlen: 24
178.239.154.0/23 maxlen: 23
178.239.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:cf:f0:c3:c6:e3:8a:67:29:4a:7a:3b:14:37:ca:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 25 07:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=365be26515c34948fd02fb2c947fbea810a2ada8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:b0:8c:56:91:4c:ca:6b:b3:62:5d:c0:5a:
ff:fd:e4:93:f8:6c:0a:a3:99:dc:d2:f4:35:85:fd:
25:b0:85:4e:f3:48:ea:f3:fa:dd:65:fb:13:db:2f:
b3:b7:ae:0c:8b:e2:4f:ba:66:64:6f:26:fa:02:33:
50:17:d8:05:94:86:8b:64:70:18:f3:b3:5a:d7:90:
af:78:0b:01:c9:9c:3d:d6:18:04:c1:98:16:6c:73:
bb:d7:71:28:b3:37:d6:b0:f1:4e:59:49:0f:3c:58:
0a:8b:b4:71:0d:62:4e:b4:da:48:01:3c:b0:53:77:
a4:0d:d1:c0:8c:b4:2d:1e:5f:48:53:c3:af:50:61:
3b:0f:53:b2:df:1c:f1:88:77:fa:1f:b0:de:d8:92:
a7:57:ca:0c:99:4e:48:5e:8d:fd:ad:95:09:e1:3b:
21:da:e9:99:f4:ca:67:f6:c7:5b:ed:98:e7:ea:a5:
dc:8b:2d:85:cb:4e:59:a9:59:62:b0:a9:ba:95:1e:
51:cd:4f:45:18:b6:92:34:55:33:44:82:8e:73:0e:
41:f8:17:67:6a:3a:70:64:b2:17:c4:3f:4b:59:2e:
2d:4b:69:80:a2:78:91:b5:8e:9e:22:a5:45:c4:16:
0d:b8:5d:8d:9d:b7:4e:a7:55:d9:6a:d6:12:4f:18:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5B:E2:65:15:C3:49:48:FD:02:FB:2C:94:7F:BE:A8:10:A2:AD:A8
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NlviZRXDSUj9AvsslH--qBCirag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.32.0/21
37.32.40.0-37.32.45.255
37.32.47.0/24
178.239.149.0-178.239.150.255
178.239.154.0-178.239.159.255
185.124.172.0/22
185.212.48.0/22
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
61:57:ac:92:28:89:1e:66:1b:b4:a5:30:30:53:3d:19:c6:5e:
34:32:d7:81:f2:0f:b3:62:41:4a:d6:2c:8f:dd:8c:5e:f8:c3:
c9:b2:33:06:b2:3f:f5:4a:b5:79:41:f5:f3:ab:19:12:8b:fa:
37:dc:88:8d:56:4b:a6:88:b5:d7:39:9b:3c:70:6e:9f:fb:88:
86:06:b6:76:3e:3c:0f:f9:3f:4f:b7:03:63:f5:15:05:c9:7f:
1c:45:27:bb:f3:4a:ed:50:ee:a7:58:71:db:49:46:4f:f3:44:
01:9e:bb:5c:1d:1f:00:3f:b1:a2:90:00:98:7b:cc:04:3e:0a:
11:ec:87:93:de:5f:eb:34:65:54:f4:b7:e9:30:80:c4:dd:df:
0e:eb:6e:25:fe:ef:b0:dc:3c:a6:61:e1:45:18:07:ed:e2:70:
aa:99:4d:41:5e:7c:cc:19:d4:ba:27:83:a0:e3:89:7f:59:6e:
08:9e:f6:4d:86:72:74:2b:a6:ac:8c:b9:36:a9:2a:15:7f:22:
14:9e:b4:ad:1c:d4:e8:ac:7d:3e:27:b3:f8:17:2d:86:de:a7:
15:52:ee:b4:9c:4c:2a:8c:a9:98:7d:ea:c3:02:f1:b5:8c:78:
ef:9b:e4:78:18:c7:ae:1a:74:ea:d9:cc:3a:37:e9:24:26:99:
de:c0:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org