Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/NLo9QOwncthzgyP7AXOqtKZZ-ik.roa
File: NLo9QOwncthzgyP7AXOqtKZZ-ik.roa (raw, json)
Hash identifier: zbiLn3Jr5gu6OXIHXNL/fhny98CGFN7BTmYxWqHuriU=
Subject key identifier: 34:BA:3D:40:EC:27:72:D8:73:83:23:FB:01:73:AA:B4:A6:59:FA:29
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 01844307B716677F22895D37CE89CC826F27
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/NLo9QOwncthzgyP7AXOqtKZZ-ik.roa
Signing time: Fri 04 Nov 2022 14:24:49 +0000
ROA not before: Fri 04 Nov 2022 14:24:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202613
IP address blocks: 176.107.152.0/21 maxlen: 24
195.231.96.0/19 maxlen: 24
80.73.232.0/21 maxlen: 24
185.58.120.0/22 maxlen: 24
217.198.128.0/20 maxlen: 24
2a00:6d43::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:07:b7:16:67:7f:22:89:5d:37:ce:89:cc:82:6f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Nov 4 14:24:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34ba3d40ec2772d8738323fb0173aab4a659fa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:e6:01:7d:a0:16:c5:10:89:16:70:52:f2:
5f:e5:23:80:7d:7e:a1:99:72:b2:b6:04:54:98:c9:
96:af:ca:92:9e:02:ff:72:cc:81:4a:4c:1d:68:c6:
a3:a5:3d:56:d8:b8:2e:81:f8:f6:5a:9d:25:30:a3:
11:0d:b8:9c:1e:ad:6c:0f:61:bc:c9:ed:17:de:10:
5e:28:4c:94:05:cd:3b:3e:9d:41:ad:4c:ce:61:b0:
68:cc:17:ee:dc:60:05:66:f1:9f:ee:2a:cb:7f:c0:
c4:6b:36:2f:3e:dc:45:e3:eb:44:ef:dd:68:0f:36:
c7:91:fb:03:7c:06:39:dc:ee:54:e1:34:4c:c8:94:
40:a5:12:52:60:9a:87:f7:d2:bb:f8:49:3d:9a:2c:
51:20:5e:65:0d:bc:44:d4:3f:77:07:cd:22:d2:4e:
ec:79:df:bf:d7:5b:21:2f:1a:7a:b9:46:b2:a0:88:
8a:4f:5b:42:47:88:9a:56:78:b8:8e:d1:cb:cb:c0:
0b:85:9a:67:62:b3:47:61:90:cb:8e:21:91:91:30:
88:57:34:03:b0:5d:74:a3:9b:04:a6:8e:e2:7a:47:
62:4d:f7:b1:be:4a:ab:bd:03:b9:64:d9:70:28:ef:
fd:8d:29:17:a7:ae:0f:bd:76:62:59:75:6d:d2:de:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:3D:40:EC:27:72:D8:73:83:23:FB:01:73:AA:B4:A6:59:FA:29
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/NLo9QOwncthzgyP7AXOqtKZZ-ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.232.0/21
176.107.152.0/21
185.58.120.0/22
195.231.96.0/19
217.198.128.0/20
IPv6:
2a00:6d43::/32
Signature Algorithm: sha256WithRSAEncryption
0c:8f:0e:de:7b:1e:6b:82:09:6c:20:c5:8e:a7:c4:a7:c4:fe:
86:02:82:c7:45:ff:93:a0:4c:14:a1:35:7b:b9:cc:b5:ab:8b:
29:74:2d:b1:29:64:e4:fe:02:fe:b2:90:fa:3c:aa:27:56:13:
6b:11:34:40:f9:45:37:94:5f:6b:25:4a:72:d0:3d:dd:9f:cf:
3b:cb:a9:76:54:20:48:a1:d1:38:83:3e:b3:06:e3:ab:58:de:
c2:cf:b2:4c:cd:ad:e7:09:79:42:53:37:f5:8a:8a:49:b3:af:
b8:78:be:84:f1:cc:f8:89:37:93:5c:87:95:d6:59:11:30:59:
28:dd:a7:97:c2:8c:40:14:0d:ea:9f:55:be:5f:31:24:6b:7a:
5d:95:75:38:28:c3:40:b3:86:6a:c3:06:2e:a2:5f:b6:2d:6c:
a8:c9:da:3f:e5:9b:a5:d3:7c:c8:73:ff:0a:bc:fc:f7:b8:6e:
36:f9:5b:f0:ec:11:26:6d:73:4a:7a:e2:64:79:e8:c0:1c:a6:
c8:83:3c:f4:3d:aa:bb:3d:cf:d9:04:9d:af:ec:b6:64:6a:11:
a4:46:dc:8f:40:b6:ec:0c:55:7d:e1:5b:74:6c:10:d4:f6:4b:
d1:a8:98:c8:be:03:7f:12:f0:cd:74:b4:de:d6:4b:e3:b6:a5:
bd:cd:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:11 2025 by rpki-client