Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/npVdnN4ywxTnCp3JdYmCP41vgCU.roa
File: npVdnN4ywxTnCp3JdYmCP41vgCU.roa (raw, json)
Hash identifier: +xlnlvaw/6HLuxGnnq9ZZPk7GXt87fQlXP93n2zCtfU=
Subject key identifier: 9E:95:5D:9C:DE:32:C3:14:E7:0A:9D:C9:75:89:82:3F:8D:6F:80:25
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: E62AB7
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/npVdnN4ywxTnCp3JdYmCP41vgCU.roa
Signing time: Sat 01 Jan 2022 05:56:27 +0000
ROA not before: Sat 01 Jan 2022 05:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39640
IP address blocks: 185.236.182.0/23 maxlen: 23
185.236.181.0/24 maxlen: 24
213.173.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15084215 (0xe62ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jan 1 05:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e955d9cde32c314e70a9dc97589823f8d6f8025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:f2:c3:05:81:66:a3:03:88:70:fe:73:44:
5a:24:13:d0:3e:6b:f6:74:b0:0b:7a:6c:fe:56:f8:
c8:a3:62:73:d1:ef:2b:d3:cc:20:21:b7:bd:31:9e:
73:fb:ae:17:5a:53:b5:4e:cd:0e:e4:33:73:ea:e3:
71:9f:2c:6d:33:02:9b:a9:df:71:f0:f6:88:e2:c8:
d6:2f:91:24:db:46:4d:5b:d2:52:fa:6c:a1:03:a5:
08:58:03:e2:4c:f9:5a:46:2b:7c:52:30:49:49:7b:
ab:c3:34:a8:28:c5:2c:69:50:5a:47:c2:3f:04:8a:
64:9a:72:6b:8e:e8:5d:f7:11:7c:a9:36:1b:8f:39:
b2:8a:18:24:45:c9:f6:e4:f1:f2:b1:9b:4e:fe:46:
2b:02:cb:03:40:d1:b5:64:4b:89:ac:07:5d:7c:ac:
05:69:1f:d4:72:78:f3:be:ec:12:5e:ab:75:01:fe:
63:36:ff:4b:2d:7c:37:d7:6a:aa:74:ac:e5:64:82:
ad:42:f7:7b:36:bf:cd:32:07:2d:5e:25:05:f0:b8:
ac:f3:8d:05:c0:54:67:14:16:1e:9e:55:f4:52:8b:
1b:e7:2a:cb:46:07:a9:96:81:a7:4d:34:08:a8:5d:
34:c1:e9:85:f5:b2:c9:a6:1b:b8:36:91:58:8e:85:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:5D:9C:DE:32:C3:14:E7:0A:9D:C9:75:89:82:3F:8D:6F:80:25
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/npVdnN4ywxTnCp3JdYmCP41vgCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.181.0-185.236.183.255
213.173.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:96:5e:46:c9:c7:40:56:c7:b4:bd:e0:70:ea:1a:6e:3a:53:
db:40:70:77:07:48:62:09:58:f1:1d:ef:6e:d1:f3:6d:37:d4:
0e:9b:75:1d:69:0d:e7:80:71:a1:d3:e1:1c:7a:d4:0f:33:2d:
13:2d:3e:0d:51:bc:90:2a:96:1b:2b:21:b3:98:22:84:d3:62:
05:28:f7:3c:fd:c8:31:46:ba:4f:45:03:54:ce:f3:19:35:9a:
c3:3c:fb:9d:99:6e:36:22:a3:a3:a3:cc:0d:1b:0e:6d:bc:c8:
78:4a:f1:78:c3:4f:df:c8:16:eb:64:e2:0f:6a:2e:03:3b:7d:
6d:65:32:b7:b9:ce:ca:f8:c8:31:24:2d:34:bf:bf:6b:de:1c:
92:3a:de:93:63:04:cd:1d:c4:3d:e9:0c:08:22:24:ae:1a:e1:
cf:55:5c:01:8f:5e:31:a1:64:ad:2b:e5:e2:4d:0f:e5:2e:e8:
66:7e:db:fe:02:a1:80:c1:fc:bd:a1:8d:f1:bb:cf:a3:f2:e1:
fd:da:bb:ed:fc:57:bb:ff:91:d2:77:c7:e1:e8:b0:82:d2:2c:
b3:87:f9:2b:04:cd:05:c5:5e:22:4f:88:a8:62:ea:83:3a:08:
28:64:32:77:81:90:f2:ca:12:e0:bb:93:d9:39:76:66:f8:c8:
a9:ab:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:19 2024 by rpki-client on console-ams.rpki-client.org