Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Nh8FrwvIEBgMpPZlmv2lwfA_RJU.roa
File: Nh8FrwvIEBgMpPZlmv2lwfA_RJU.roa (raw, json)
Hash identifier: KiCftY3uIJ1msQ4C1BNYwTMEah0hrH+f+3YE9VBCBz8=
Subject key identifier: 36:1F:05:AF:0B:C8:10:18:0C:A4:F6:65:9A:FD:A5:C1:F0:3F:44:95
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0836C2BE
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Nh8FrwvIEBgMpPZlmv2lwfA_RJU.roa
Signing time: Wed 26 Jan 2022 06:06:57 +0000
ROA not before: Wed 26 Jan 2022 06:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16200
IP address blocks: 91.186.192.0/24 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.218.0/24 maxlen: 24
83.147.192.0/24 maxlen: 24
83.147.193.0/24 maxlen: 24
83.147.194.0/24 maxlen: 24
83.147.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137806526 (0x836c2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 26 06:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=361f05af0bc810180ca4f6659afda5c1f03f4495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:54:0d:89:f0:d3:25:76:20:b0:8b:da:23:
e4:a7:e3:16:5e:51:2b:04:25:6d:46:92:db:36:1b:
54:f5:0c:57:89:98:ed:1e:f0:ce:7b:a7:c2:79:fb:
90:0e:2b:a2:f1:0d:55:eb:08:67:6d:5e:f1:f8:2d:
99:06:45:5c:03:d2:8e:d7:e2:bb:13:57:f4:20:63:
8f:f8:94:90:e7:60:19:d4:de:93:84:6e:e5:30:d5:
f6:68:08:5b:b0:a3:ef:63:58:77:e0:e0:91:86:84:
f5:08:80:88:e2:2d:ec:da:c6:a8:53:a9:67:81:f4:
c9:ec:f7:fd:cb:82:c3:41:9f:c2:f3:4e:05:e1:32:
51:90:5c:2c:02:2f:99:0b:4e:48:5e:f8:b6:2b:93:
6b:5d:11:b1:a1:8b:85:c3:47:d7:01:9f:fa:a4:76:
86:fb:0a:45:3b:a5:d1:87:69:ca:cd:72:c6:70:24:
dd:ec:bf:78:c7:dd:77:f0:77:7e:29:ad:83:64:66:
a1:fe:11:76:4c:2f:93:e8:46:6c:40:07:4b:14:75:
df:09:31:b8:61:2a:b2:4b:26:52:d3:f2:56:45:b0:
35:87:bd:47:28:8f:74:6d:0d:4d:95:0c:82:4b:d1:
92:46:9e:ae:b1:aa:92:a3:21:f9:75:9b:f4:04:a7:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1F:05:AF:0B:C8:10:18:0C:A4:F6:65:9A:FD:A5:C1:F0:3F:44:95
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Nh8FrwvIEBgMpPZlmv2lwfA_RJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0-83.147.194.255
83.147.217.0/24
91.186.192.0/24
91.186.196.0/22
91.186.218.0/24
Signature Algorithm: sha256WithRSAEncryption
99:00:b1:2e:e4:34:ac:da:43:e8:3f:61:d7:0f:a4:89:f4:4e:
bb:9a:cf:29:d1:75:fa:ad:1d:84:ba:4d:35:f3:8e:77:c8:7d:
fd:63:fb:39:b7:76:59:e5:61:3a:3c:a6:00:ee:89:0d:f4:bb:
bb:b8:ec:37:0a:1c:de:a5:93:e1:98:62:c5:e0:43:e1:61:e8:
e9:5e:29:76:ff:08:7f:b1:0d:7f:ac:eb:30:a9:70:b6:79:49:
88:dd:f9:21:dc:b8:7b:2f:5d:a0:57:ba:fa:07:f8:f7:3c:c7:
8a:b3:13:e9:87:79:52:d5:97:92:1d:86:1a:c3:3f:b5:46:81:
f8:c0:95:2d:31:ff:f7:c5:0b:52:b1:e4:7c:66:bb:59:a7:d4:
1b:68:3a:6a:d7:58:49:93:46:3c:00:00:24:25:ec:0d:b9:9e:
74:46:38:3f:c3:69:cf:03:d7:d6:00:3f:fe:d2:8d:b3:58:e6:
c0:f9:86:ff:8a:6d:09:26:c5:5b:dd:13:f6:6e:12:3f:56:ee:
db:92:cb:8c:2d:50:99:90:05:2a:20:d2:0a:d2:2f:a6:24:a1:
c9:1d:07:12:f1:6f:14:b4:d1:26:00:d4:a7:fd:d5:49:b3:5e:
d6:02:09:70:31:d5:13:24:57:25:e4:d4:ce:92:85:9a:ca:8b:
a7:03:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org