Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ns_w9gu7UY4BRRrHCYCg-gjr2tI.roa
File: Ns_w9gu7UY4BRRrHCYCg-gjr2tI.roa (raw, json)
Hash identifier: zp4b28x3W1U7X9BAN+upbURHnVV3vOS0myl0JxABkek=
Subject key identifier: 36:CF:F0:F6:0B:BB:51:8E:01:45:1A:C7:09:80:A0:FA:08:EB:DA:D2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01829409BE5E7B8AC3C0CA7BB5C6443B2B56
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ns_w9gu7UY4BRRrHCYCg-gjr2tI.roa
Signing time: Fri 12 Aug 2022 21:50:42 +0000
ROA not before: Fri 12 Aug 2022 21:50:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 91.186.204.0/22 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:94:09:be:5e:7b:8a:c3:c0:ca:7b:b5:c6:44:3b:2b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 12 21:50:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36cff0f60bbb518e01451ac70980a0fa08ebdad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:4b:70:ff:07:5c:a4:02:ce:64:bc:6e:35:
80:be:82:fb:44:d8:39:e2:82:8d:58:65:73:92:d8:
8c:65:a9:b5:9d:ac:ec:15:96:fd:58:d0:11:62:cd:
4c:51:c4:04:a7:66:be:10:3d:39:08:27:54:b9:c3:
cc:11:a9:0a:37:cc:ec:ac:53:b6:8f:8c:4f:1c:a6:
1d:b8:a8:3e:bd:80:22:cc:29:8e:cc:3c:88:72:84:
95:31:4f:e8:05:f0:cc:10:a4:72:a5:d7:6e:35:c0:
2c:9f:e0:ec:4a:8f:c3:59:12:0b:cc:52:28:fe:ea:
b2:c0:d1:06:cf:eb:7d:91:23:9e:40:cf:21:c1:ba:
68:01:92:e3:4e:95:8d:2e:10:68:05:cb:de:88:b1:
61:64:51:e5:ef:13:25:fe:0c:90:80:10:c2:b4:07:
e0:d9:7f:7a:b2:5c:04:d4:bf:0b:63:f6:3b:b2:de:
9b:65:f2:2b:3a:6f:4f:b4:59:9b:18:a9:0d:3f:47:
a8:b3:0d:a8:6f:56:18:2b:0b:73:fe:6d:4c:3c:b1:
ec:57:c2:76:95:14:99:ba:c3:96:d1:52:3c:58:56:
ab:f0:30:44:3d:c5:e9:52:5c:b0:19:a9:32:57:33:
24:48:32:8a:1d:8a:b3:28:fd:7a:97:95:2e:a3:11:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:F0:F6:0B:BB:51:8E:01:45:1A:C7:09:80:A0:FA:08:EB:DA:D2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Ns_w9gu7UY4BRRrHCYCg-gjr2tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.204.0/22
91.186.216.0/22
94.241.136.0/21
94.241.164.0/22
Signature Algorithm: sha256WithRSAEncryption
40:ca:ae:b6:05:1c:19:67:23:17:89:03:86:ea:5d:43:0d:7d:
67:09:df:11:bc:0d:a8:65:28:a0:56:6d:dd:9b:c7:ac:d8:27:
2b:61:4c:60:30:d9:89:ea:e0:d0:15:44:72:f2:c8:e3:6b:9b:
4f:af:dd:76:a4:d0:a9:fb:5a:aa:32:c2:e7:57:9d:83:e4:74:
e6:e4:5e:71:39:e0:20:03:52:04:02:77:63:56:d4:75:dc:b0:
f3:b9:b2:7b:b1:25:04:67:d3:6b:af:dc:f3:ab:14:a8:de:68:
ff:25:04:ca:88:5e:0f:c6:3e:a6:10:1a:88:00:bc:ae:e7:1a:
33:fa:be:68:f4:23:27:4a:57:ed:4f:70:5b:43:2a:d0:dd:a7:
a3:4b:53:67:78:63:0d:5f:70:2c:2d:52:7c:3e:cb:d3:93:1a:
c5:53:55:c8:6a:ae:87:3b:f3:ba:70:03:02:a9:da:de:13:30:
8b:fe:4b:ee:28:48:46:9d:12:21:a2:48:d3:02:ff:43:fe:6e:
f8:70:cf:83:12:d1:35:16:cd:e1:bc:5a:b8:3d:22:ef:53:7e:
0f:49:90:6b:2d:41:89:ba:fa:6e:95:26:14:96:61:dc:95:b6:
72:d0:e8:3a:39:4b:7e:ca:4f:1b:ca:5c:21:e2:17:de:72:43:
66:0e:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org