Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/NhmG9DmF3SPp7nWy6ioy23QXiCI.roa
File: NhmG9DmF3SPp7nWy6ioy23QXiCI.roa (raw, json)
Hash identifier: 0mpqzXvCjb6UcbYhjLQEOZOWujxZMv4o+7PwzpYTRh0=
Subject key identifier: 36:19:86:F4:39:85:DD:23:E9:EE:75:B2:EA:2A:32:DB:74:17:88:22
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 163F05EE
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/NhmG9DmF3SPp7nWy6ioy23QXiCI.roa
Signing time: Tue 19 Apr 2022 19:41:41 +0000
ROA not before: Tue 19 Apr 2022 19:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32934
IP address blocks: 185.89.218.0/24 maxlen: 24
185.89.218.0/23 maxlen: 24
185.89.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373229038 (0x163f05ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Apr 19 19:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=361986f43985dd23e9ee75b2ea2a32db74178822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:03:cd:73:6c:6c:92:05:0e:88:ea:f9:78:
c9:b2:b7:c6:e5:b1:20:8b:24:ed:32:c8:a8:bb:7c:
40:c8:91:b5:5b:26:9c:8a:eb:83:46:38:a0:60:91:
c8:d2:22:57:d4:79:29:14:b8:d7:9d:cb:39:42:a7:
25:f7:92:8f:7a:ce:f9:a5:54:aa:4e:f3:f7:9d:29:
b4:9a:d8:1e:f7:0c:9d:9a:bf:10:3e:7d:81:81:18:
f6:c1:86:d1:a7:cd:03:7f:0b:5d:f9:c3:2d:64:71:
2a:e3:eb:0e:a8:e1:76:68:35:9b:fe:f9:b6:15:70:
bd:45:5f:39:14:af:01:3e:7d:9b:de:bc:f5:a6:bf:
c2:1a:c4:7e:83:69:0d:7d:ad:1a:15:5c:ea:11:b1:
2a:13:02:4a:87:c4:df:6d:23:83:c8:9c:43:69:93:
06:0a:4c:ff:78:2f:9f:b5:dc:d6:d2:d2:9d:57:c6:
e3:1b:94:d0:83:aa:d9:39:f4:b2:d2:b3:86:d7:54:
ae:b1:61:72:a7:4c:be:0f:21:01:aa:75:db:5f:94:
95:99:5b:6e:59:ae:e4:e6:11:64:ba:de:64:25:88:
bf:46:6a:9f:1e:75:b5:63:51:b5:bd:86:50:5b:82:
60:29:f9:97:dd:01:de:ff:5a:a9:84:60:58:1f:95:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:86:F4:39:85:DD:23:E9:EE:75:B2:EA:2A:32:DB:74:17:88:22
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/NhmG9DmF3SPp7nWy6ioy23QXiCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.218.0/23
Signature Algorithm: sha256WithRSAEncryption
20:9c:3b:c9:23:ae:56:ef:07:77:eb:f2:c7:a8:14:e4:dd:15:
5a:73:16:a8:56:a5:44:cf:8c:a7:43:af:db:bc:84:8e:18:59:
02:4a:2a:50:56:13:ba:b2:c8:97:68:f0:90:b9:96:f3:f0:e4:
52:b3:f8:0c:74:15:31:f9:0c:d6:48:dc:e0:d7:1e:88:fc:d5:
d0:f3:e7:f7:e2:b0:39:ab:13:07:ab:9d:e3:d5:96:72:72:a0:
e5:0e:e4:fa:dc:50:f1:22:53:cb:43:77:ec:46:6e:98:6a:9b:
86:67:4e:46:bc:93:8e:93:db:52:bf:eb:d5:e5:08:41:2b:71:
7e:74:d0:19:14:4c:30:a0:3e:e3:be:ff:6e:7d:c8:04:9f:cd:
4e:cb:ec:5e:4a:c1:09:2a:48:63:d0:b3:2d:12:e1:ff:3a:2d:
1f:12:0b:ab:a9:4a:39:b0:bd:b4:10:40:58:68:3d:7b:be:db:
63:37:d0:ca:59:17:1c:cf:13:0c:07:f3:99:e5:33:30:59:3a:
21:c8:04:9c:d3:6f:38:7c:a8:3e:7c:a8:30:bf:7b:a8:c6:74:
4f:a6:b8:1b:93:44:56:14:e4:ac:b1:4e:6a:83:f8:bf:eb:e7:
5c:51:44:41:85:f1:7e:cf:bd:6c:36:8c:30:a9:26:14:b9:13:
6d:d0:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org