Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/yZjSqkRzJZv7eN0Msa5umWMjtzY.roa
File: yZjSqkRzJZv7eN0Msa5umWMjtzY.roa (raw, json)
Hash identifier: dPalzG6QdsPBv6HgFqhEv9s/qTfKElnF28V3CSp1pdk=
Subject key identifier: C9:98:D2:AA:44:73:25:9B:FB:78:DD:0C:B1:AE:6E:99:63:23:B7:36
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 018538FD6E14109D0F194F4F03CFD6B53560
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/yZjSqkRzJZv7eN0Msa5umWMjtzY.roa
Signing time: Thu 22 Dec 2022 08:40:10 +0000
ROA not before: Thu 22 Dec 2022 08:40:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 83.137.24.0/21 maxlen: 21
185.93.216.0/22 maxlen: 22
194.63.148.0/22 maxlen: 22
109.106.32.0/21 maxlen: 21
109.106.40.0/22 maxlen: 22
185.127.172.0/22 maxlen: 22
195.60.192.0/22 maxlen: 22
212.120.32.0/19 maxlen: 19
213.213.160.0/19 maxlen: 19
2a02:ab0::/29 maxlen: 29
2a00:5480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:fd:6e:14:10:9d:0f:19:4f:4f:03:cf:d6:b5:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Dec 22 08:40:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c998d2aa4473259bfb78dd0cb1ae6e996323b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:0b:18:46:2b:8b:c7:d5:a9:85:2d:ec:25:
32:1a:7e:e7:a8:73:93:72:a5:b6:1a:2e:fc:f1:b2:
28:d6:0d:20:93:ea:ac:27:de:b7:32:9a:fd:dc:2b:
88:9b:51:bd:b3:06:f6:2a:e5:6d:ba:43:f2:3a:25:
72:6c:20:15:1d:8d:42:ec:a5:f3:c3:72:25:55:7c:
22:8f:7a:e8:91:5d:d5:3b:bd:1e:96:d5:28:33:b5:
44:04:0a:9a:0d:e5:c9:34:2b:f9:3d:d5:66:3c:31:
d9:39:c0:93:0d:20:cc:fa:44:cb:ba:e7:a0:c2:b6:
59:70:ec:56:86:9e:43:5c:f4:0b:51:0c:56:8d:a4:
21:1c:4f:55:0f:58:7b:23:82:0c:92:94:f2:e5:b9:
f0:a9:52:26:61:59:77:2d:a2:95:ff:72:07:4a:bf:
e6:74:55:a0:68:26:82:98:99:e9:f6:6a:79:73:e3:
89:91:0e:04:8a:42:05:29:60:e7:24:d9:06:ec:b2:
03:d5:9e:3d:a3:39:b0:f9:ed:94:7e:18:cb:be:cd:
fa:fd:44:41:d8:fe:ab:7d:bf:34:08:ae:dd:47:a9:
b8:3a:43:23:a2:c5:86:be:5f:0f:5f:2a:3a:4f:a0:
ee:75:f5:b2:ef:7b:08:ed:8c:c6:a6:6b:57:18:55:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:D2:AA:44:73:25:9B:FB:78:DD:0C:B1:AE:6E:99:63:23:B7:36
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/yZjSqkRzJZv7eN0Msa5umWMjtzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.24.0/21
109.106.32.0-109.106.43.255
185.93.216.0/22
185.127.172.0/22
194.63.148.0/22
195.60.192.0/22
212.120.32.0/19
213.213.160.0/19
IPv6:
2a00:5480::/29
2a02:ab0::/29
Signature Algorithm: sha256WithRSAEncryption
24:77:db:12:89:45:c8:0f:db:6e:d7:99:08:d3:14:cf:97:84:
74:14:83:ef:59:20:33:3d:e1:8b:06:e7:a4:7e:a1:b0:96:00:
aa:a2:fa:53:0a:fb:b3:d1:e1:c5:0f:d2:9b:33:0e:f6:86:ce:
6d:2a:08:24:90:65:96:bf:7b:7b:e3:52:35:4b:72:76:61:94:
fb:bd:cb:03:83:81:89:39:97:db:9a:4e:cc:f3:f3:c4:69:60:
bf:b0:88:86:51:df:b4:27:e8:7b:e0:69:13:13:ee:d7:91:1b:
40:a3:c0:78:b5:f5:53:38:9a:ce:22:b4:04:ea:22:52:5f:59:
0e:36:a7:6f:14:38:fe:ce:91:a1:c2:6c:6b:62:73:01:13:3f:
3e:42:32:79:ff:b7:89:35:98:4a:e7:1d:3b:4a:a0:ec:bc:89:
77:39:5d:bd:84:1d:62:39:e7:8c:dc:2d:44:6e:e2:66:7c:7c:
87:b9:f7:a9:c0:66:bc:1b:0f:03:d0:af:34:9f:42:96:c1:b5:
a6:47:dc:f6:84:f4:e8:b3:7a:da:82:a9:a2:95:1f:fe:94:e0:
02:f3:ec:aa:4e:30:39:4d:ce:a9:e8:65:eb:24:de:d4:ef:01:
b6:fd:8f:5e:42:c7:4c:a9:bd:f0:bd:0f:ea:a5:90:c9:62:24:
ba:27:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org