Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NlzbgJWdiVPujiF56vkHPdiL9ZY.roa
File: NlzbgJWdiVPujiF56vkHPdiL9ZY.roa (raw, json)
Hash identifier: isJVaVfmBStQ9YK5u4BhOK2cx5EKVVlgEgyfDg+Bls4=
Subject key identifier: 36:5C:DB:80:95:9D:89:53:EE:8E:21:79:EA:F9:07:3D:D8:8B:F5:96
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182A5FAD3F5993D42D4451BD0E1E201F4FE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NlzbgJWdiVPujiF56vkHPdiL9ZY.roa
Signing time: Tue 16 Aug 2022 09:27:35 +0000
ROA not before: Tue 16 Aug 2022 09:27:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.8.184.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.196.0/22 maxlen: 24
45.8.200.0/22 maxlen: 24
45.8.205.0/24 maxlen: 24
85.208.104.0/22 maxlen: 24
193.168.208.0/22 maxlen: 24
45.66.152.0/22 maxlen: 24
5.180.80.0/22 maxlen: 24
5.180.232.0/22 maxlen: 24
5.180.32.0/22 maxlen: 24
85.209.160.0/22 maxlen: 24
5.180.48.0/22 maxlen: 24
85.208.112.0/22 maxlen: 24
5.253.36.0/22 maxlen: 24
5.253.44.0/22 maxlen: 24
45.8.252.0/22 maxlen: 24
45.9.0.0/22 maxlen: 24
45.9.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:fa:d3:f5:99:3d:42:d4:45:1b:d0:e1:e2:01:f4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 16 09:27:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=365cdb80959d8953ee8e2179eaf9073dd88bf596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:95:f5:e9:c8:8d:fe:3a:ea:c5:3c:fe:c2:
81:14:07:56:43:48:b2:8c:f9:18:ce:97:24:42:b7:
d3:94:58:d7:60:ae:28:71:ea:59:6a:f6:3f:16:95:
70:79:b9:b8:67:d0:3b:6a:9e:f2:60:81:18:36:6f:
38:9a:7e:bf:22:f4:1a:8c:4b:87:6e:74:b4:5a:e7:
33:62:72:4f:f8:fe:18:b7:f5:b8:53:9d:88:c3:20:
51:58:a8:c1:cc:52:e1:b9:95:d8:af:22:55:fd:24:
a5:fd:54:87:c9:18:7b:68:66:e0:4f:e6:76:2f:1b:
f8:c9:f6:52:ca:22:94:cb:93:ba:94:d3:ea:ef:2a:
4a:2e:f5:2a:36:3d:2d:07:7d:ca:37:61:5b:83:d7:
6a:f0:d4:8d:2d:9b:d9:c6:11:05:6c:d6:26:f4:0f:
e4:62:20:75:cf:54:01:66:b7:75:21:a7:18:4b:d5:
27:bc:01:ae:74:bd:9d:8c:5b:39:30:6d:f5:fd:6d:
bd:64:cb:4d:05:a3:19:b0:04:fc:9e:2d:66:fa:d2:
7c:7e:47:33:a2:3a:d3:59:29:1f:96:0e:69:90:49:
83:03:15:c7:a3:ce:ef:f1:18:a4:56:34:33:93:26:
a5:3a:3e:2f:31:ec:a8:09:94:e8:cc:92:49:e3:03:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5C:DB:80:95:9D:89:53:EE:8E:21:79:EA:F9:07:3D:D8:8B:F5:96
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NlzbgJWdiVPujiF56vkHPdiL9ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.48.0/22
5.180.80.0/22
5.180.232.0/22
5.253.36.0/22
5.253.44.0/22
45.8.184.0-45.8.203.255
45.8.205.0/24
45.8.252.0-45.9.7.255
45.66.152.0/22
85.208.104.0/22
85.208.112.0/22
85.209.160.0/22
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:f8:9a:7b:e4:05:18:22:ad:38:f0:03:e2:5d:70:af:f1:00:
0c:0b:c5:80:da:6a:4a:59:7e:43:e1:17:e9:fc:07:88:d0:9c:
38:3d:62:0a:3d:37:1d:d0:de:44:6e:ce:a8:47:9b:40:96:12:
11:f4:5c:b5:d8:0e:f5:af:78:f3:96:9e:52:3d:9c:c5:05:63:
df:b1:16:bf:cf:01:bb:61:0f:5d:c2:40:ee:49:e9:31:db:ae:
b6:a2:01:38:03:19:01:1a:a3:43:fb:b3:d6:05:21:03:fc:14:
a6:f3:e5:fd:89:20:1f:89:ea:04:76:f4:ae:b1:1a:da:1b:da:
4c:d2:ce:d1:83:d0:83:b4:c6:d6:f3:7f:5b:9e:b8:67:9d:f5:
0c:3a:9e:00:37:db:64:48:b5:70:7b:7a:6d:00:bc:91:3f:25:
cd:b3:a7:97:4a:f5:d6:45:e7:4b:f9:ee:f0:48:39:58:bd:cf:
3f:d6:5c:1a:5f:40:eb:84:a0:5c:01:12:2a:dd:ed:ba:cf:eb:
af:e4:59:ea:9f:8b:f0:42:b5:f3:7e:5e:a6:4e:5c:03:14:39:
d8:7a:b0:16:40:b1:e2:1b:62:34:60:2a:d5:8d:2b:16:f9:b9:
53:59:51:14:56:76:9d:05:f0:9b:f2:36:0b:93:79:c4:c0:81:
f9:f6:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:29 2025 by rpki-client