Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/9NlKI94d7RCf663IQnbIu383a7M.roa
File: 9NlKI94d7RCf663IQnbIu383a7M.roa (raw, json)
Hash identifier: P8OSDUucLY6Sdgej+CSACOkKDs+anZxEddaxB9sbLYE=
Subject key identifier: F4:D9:4A:23:DE:1D:ED:10:9F:EB:AD:C8:42:76:C8:BB:7F:37:6B:B3
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0C7C2565
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/9NlKI94d7RCf663IQnbIu383a7M.roa
Signing time: Sat 01 Jan 2022 10:58:57 +0000
ROA not before: Sat 01 Jan 2022 10:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213002
IP address blocks: 185.210.95.0/24 maxlen: 24
185.210.92.0/24 maxlen: 24
185.210.93.0/24 maxlen: 24
185.210.94.0/24 maxlen: 24
2a0b:5540::/33 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209462629 (0xc7c2565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jan 1 10:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4d94a23de1ded109febadc84276c8bb7f376bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:c1:84:d6:5e:f6:b6:9a:87:83:49:af:c5:
2b:4c:bb:fe:ba:5c:26:13:93:6d:d8:6a:5e:0a:df:
33:6b:62:fc:e1:f4:1f:34:97:4e:b9:33:07:43:50:
68:f3:ab:6c:a3:2c:7b:9e:5b:f1:d5:e6:37:56:6c:
c2:3b:0f:9c:29:95:fa:ec:cd:84:04:e8:14:04:85:
0b:cf:8e:7c:4c:aa:c5:ea:c0:ed:f9:3d:12:8d:26:
ea:9a:74:fe:0d:59:4d:e5:fd:b0:55:33:47:3f:e4:
ef:10:db:36:67:61:af:64:49:da:c0:63:8c:56:5b:
0a:7b:9d:09:da:b2:c8:d3:2a:f3:b5:fb:64:72:82:
c5:38:a3:9c:1b:62:83:7c:7c:b8:8b:45:bd:7f:24:
df:66:69:6e:16:d7:d6:f7:69:c7:c1:c5:0d:83:a6:
ad:a9:4f:55:47:37:12:1d:46:cc:e3:fe:3f:ac:a0:
00:59:39:85:35:20:68:c5:10:38:ea:43:18:19:e3:
3c:94:dc:4a:8a:bb:5d:52:a8:7d:05:af:aa:0d:74:
96:80:17:d3:d6:f7:41:04:04:18:7c:ab:1a:54:08:
dc:b7:bf:31:a6:0a:6e:29:b7:38:01:0b:8e:10:3b:
56:67:be:f3:f8:f3:77:cf:89:5d:23:8a:b8:74:d9:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:4A:23:DE:1D:ED:10:9F:EB:AD:C8:42:76:C8:BB:7F:37:6B:B3
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/9NlKI94d7RCf663IQnbIu383a7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.92.0/22
IPv6:
2a0b:5540::/33
Signature Algorithm: sha256WithRSAEncryption
0d:27:e6:64:4c:4f:04:2b:06:02:e2:11:03:39:cc:d5:5b:80:
03:e4:85:83:69:75:e6:53:8c:66:06:de:f8:ec:70:a1:e8:5a:
59:9f:68:8f:e0:24:3e:d7:dd:b8:d8:05:84:84:42:4e:52:f5:
ae:09:fa:7d:e2:e0:ee:25:28:59:d2:f5:1a:97:10:5c:2b:c7:
ef:c1:7f:aa:38:6b:f4:93:1f:f6:fe:52:79:12:93:74:60:17:
cc:d9:0e:fb:46:f7:67:10:fd:4c:65:60:17:c1:2a:c6:07:5c:
f3:96:fc:fa:db:2c:21:c2:fb:dd:45:cc:97:2f:57:ed:08:98:
1b:5a:d5:78:db:d0:5d:65:d6:83:7d:f7:67:1e:e3:af:1d:42:
20:2a:89:0f:94:4f:b8:ce:35:3e:5b:06:e0:ce:bd:a2:9c:4e:
3f:13:48:96:42:0c:ca:1b:9e:52:67:2a:83:76:d4:71:36:57:
86:9e:c1:cc:46:54:34:34:62:c2:8e:46:e9:48:f6:1e:59:ef:
5c:43:aa:f2:52:dc:ae:cf:b7:a3:da:9c:1c:99:f6:2f:8c:41:
74:ac:6e:ee:29:ca:67:04:5f:00:47:86:87:78:9a:51:38:67:
a4:0a:45:02:1d:3b:70:d0:1f:79:00:99:97:91:f8:a8:66:60:
10:59:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:07 2024 by rpki-client on console-ams.rpki-client.org