Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/npvQqhGL8BawDWXUBFO-fuGNlok.roa
File: npvQqhGL8BawDWXUBFO-fuGNlok.roa (raw, json)
Hash identifier: ulM+siLLrwfWioaUgzhE2GbUd2P9cU2t6Gqyxg3aSYA=
Subject key identifier: 9E:9B:D0:AA:11:8B:F0:16:B0:0D:65:D4:04:53:BE:7E:E1:8D:96:89
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 12E03188
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/npvQqhGL8BawDWXUBFO-fuGNlok.roa
Signing time: Sat 01 Jan 2022 09:59:54 +0000
ROA not before: Sat 01 Jan 2022 09:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203596
IP address blocks: 185.122.100.0/22 maxlen: 24
185.222.88.0/22 maxlen: 24
2a06:a400::/29 maxlen: 29
2a06:a402::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316682632 (0x12e03188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 09:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e9bd0aa118bf016b00d65d40453be7ee18d9689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:be:91:90:3d:fd:18:3d:51:90:2f:b5:27:
50:db:dc:b8:ca:fa:65:b9:1d:93:26:de:0c:d6:72:
0d:3a:20:77:ab:f1:bd:5b:cf:5d:ac:1b:cd:03:56:
56:ef:32:f2:67:3b:34:16:70:a6:84:df:67:32:c7:
16:3e:d8:b2:4c:ac:af:52:f8:3f:66:9d:55:f6:a3:
71:58:63:c7:9a:df:fc:cc:a4:45:79:76:ae:f7:41:
f1:a9:58:99:e1:44:fc:86:4c:26:1f:fc:ec:fa:03:
4d:91:bc:04:a8:50:35:63:74:1e:67:79:4b:02:09:
81:e0:1e:63:6b:a9:40:e4:20:bb:59:eb:6f:67:c1:
2e:88:e3:b1:24:13:6a:1c:77:8c:73:e4:79:5d:5d:
5f:66:a1:95:c2:b1:01:ab:43:37:13:06:2a:3f:7d:
22:b9:06:74:28:bb:8d:1f:ef:af:d3:d1:70:b5:a3:
1c:2e:df:8a:82:f5:6a:39:50:d0:54:67:51:57:55:
9e:55:0c:85:c0:3a:51:26:31:af:88:f2:14:6a:4a:
06:b9:1b:15:e6:dd:d1:61:9f:c3:25:74:01:5c:be:
c3:f7:11:bc:15:a8:e2:9e:37:20:cf:38:82:c4:c0:
4b:c5:4f:62:25:78:93:8b:9f:bb:80:c6:7f:ef:bf:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:D0:AA:11:8B:F0:16:B0:0D:65:D4:04:53:BE:7E:E1:8D:96:89
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/npvQqhGL8BawDWXUBFO-fuGNlok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.100.0/22
185.222.88.0/22
IPv6:
2a06:a400::/29
Signature Algorithm: sha256WithRSAEncryption
2c:1d:36:94:0c:62:7a:65:3c:fe:40:2b:09:af:a9:76:d0:10:
46:36:6d:4a:41:d0:7f:b3:73:22:83:1c:53:de:8c:22:9a:a3:
d6:09:57:b3:28:45:db:13:ae:a5:6d:a6:22:d4:96:12:e5:70:
4f:22:e9:b7:0b:a0:02:38:14:6c:09:fc:0f:54:55:2f:c9:c4:
49:0a:15:dd:8e:10:dd:4d:5b:b1:b3:55:da:d3:5a:88:d7:2d:
e8:a2:3e:7d:ee:09:3b:bd:d9:c5:b1:ee:7d:7f:2b:d0:7a:12:
fe:c3:d6:ee:fa:68:5d:cc:10:cf:7d:0e:41:e4:c4:60:79:6a:
52:67:ef:9d:8e:e8:3b:36:dd:6c:64:cd:0d:bf:67:b1:51:48:
e1:24:0c:a6:fd:6e:03:40:72:2d:e2:be:e9:4c:55:45:9e:94:
55:73:81:bb:8b:19:2b:55:81:e6:ee:ba:9c:b4:67:aa:a4:fe:
5e:07:4f:13:67:ea:13:c9:bc:71:4c:bb:30:68:48:fb:94:0a:
db:eb:a3:8f:c7:d7:eb:33:9b:d7:28:b9:f5:62:de:2f:27:33:
8a:07:dc:97:e1:4e:32:dc:3f:9a:23:a1:cf:f0:23:aa:be:27:
ed:37:1b:e5:2b:cf:37:8a:54:f9:ae:95:34:7d:42:99:88:84:
ef:81:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org