Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/nwN2ip3qyFelNyxyCfJefDorSWQ.roa
File: nwN2ip3qyFelNyxyCfJefDorSWQ.roa (raw, json)
Hash identifier: XF99Cl1eZ6LvC6gHrapU14HvNXejDkOnKEsLgdqw53k=
Subject key identifier: 9F:03:76:8A:9D:EA:C8:57:A5:37:2C:72:09:F2:5E:7C:3A:2B:49:64
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: A94D2D
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/nwN2ip3qyFelNyxyCfJefDorSWQ.roa
Signing time: Sat 01 Jan 2022 02:01:46 +0000
ROA not before: Sat 01 Jan 2022 02:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43791
IP address blocks: 185.212.221.0/24 maxlen: 24
185.212.220.0/24 maxlen: 24
185.212.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11095341 (0xa94d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Jan 1 02:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f03768a9deac857a5372c7209f25e7c3a2b4964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:d1:6d:2b:1b:d7:fb:9a:88:14:a1:aa:15:
1d:31:9b:42:86:8f:ef:f2:22:ff:b3:d2:32:d7:d3:
50:c5:77:83:f3:b1:94:0e:dc:ad:cd:0b:d7:0b:3b:
0d:b3:8f:f2:d7:cf:83:11:7f:71:97:72:6a:af:2c:
22:df:ae:9d:74:18:7c:a6:6e:5f:3c:66:b8:65:60:
44:f7:18:bf:d4:38:02:c6:86:70:b5:18:49:bd:13:
e2:cd:15:91:29:e2:54:cf:af:bf:3d:41:e1:99:86:
8b:af:ef:0a:3e:3c:f5:20:08:33:50:65:51:be:c1:
a0:46:11:e6:bb:02:c5:ae:ba:7a:c2:27:ce:12:b0:
78:aa:d7:66:86:65:88:bb:36:a0:1e:33:26:3f:ce:
00:02:c2:8e:98:ef:e0:de:d4:d8:a8:48:ff:0a:99:
37:11:77:4a:79:69:57:0f:e2:9b:43:ec:ee:55:c1:
87:2e:d2:d0:59:96:bb:88:41:3e:4e:8a:92:80:92:
4b:c5:f3:9d:e0:45:c9:4c:24:ce:0e:65:b6:65:73:
49:ae:4d:7d:fb:56:43:d9:46:de:10:43:de:66:a8:
1c:65:8f:3d:3a:36:96:14:ec:af:fd:c9:e0:8e:8c:
ed:28:a0:32:df:21:eb:61:d5:5e:60:85:75:4b:04:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:76:8A:9D:EA:C8:57:A5:37:2C:72:09:F2:5E:7C:3A:2B:49:64
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/nwN2ip3qyFelNyxyCfJefDorSWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.220.0-185.212.222.255
Signature Algorithm: sha256WithRSAEncryption
07:8f:7d:aa:0c:4a:83:42:ca:56:2f:a9:ae:71:3c:77:b5:46:
71:98:c6:6e:d9:29:07:06:cd:0a:06:36:a2:30:20:81:d6:f4:
79:b0:19:5b:16:1e:b3:fe:14:f9:91:a2:98:bc:80:0d:cc:36:
0f:fb:ee:9e:3b:5a:99:41:7a:37:3a:22:b1:32:45:f6:ed:3c:
21:0c:11:4d:30:10:4c:74:66:07:c3:62:5a:c7:f8:79:e9:da:
02:ad:5c:39:94:f0:16:62:2e:63:74:5d:c6:d1:1f:aa:a6:94:
98:d5:11:95:4b:71:dd:0d:aa:69:51:ec:c8:e8:90:35:34:26:
6c:7e:1b:20:6a:7e:5e:e5:11:44:ec:73:3d:6e:7a:09:2a:bd:
ac:14:65:9b:6e:e0:34:e7:80:96:fc:4a:52:b1:7a:b1:74:5e:
a3:12:00:e6:16:8b:92:ff:a6:67:a4:d6:e4:97:9e:76:f7:14:
e6:a0:de:ae:05:73:95:d9:10:c0:2c:5d:9b:97:00:d3:e6:24:
95:a6:66:61:d5:8c:82:3f:0c:86:7a:af:5f:28:02:74:12:59:
a1:6c:3e:10:f0:27:7e:61:a6:7e:07:c0:f2:b3:77:d8:6c:77:
b2:b1:ac:20:48:82:6d:81:15:2f:d7:23:f8:c0:be:15:4b:bc:
87:05:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:56 2024 by rpki-client on console-ams.rpki-client.org