Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ng-Bo4G3TnIgKfzcuYJrboJZTaE.roa
File: ng-Bo4G3TnIgKfzcuYJrboJZTaE.roa (raw, json)
Hash identifier: iQxYVZGpZlcDfHHDLFjUmGumr9lFPXZZFjOe1Q/xj1w=
Subject key identifier: 9E:0F:81:A3:81:B7:4E:72:20:29:FC:DC:B9:82:6B:6E:82:59:4D:A1
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0804B51C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ng-Bo4G3TnIgKfzcuYJrboJZTaE.roa
Signing time: Sun 02 Jan 2022 14:47:26 +0000
ROA not before: Sun 02 Jan 2022 14:47:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
94.241.160.0/21 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.12.0/23 maxlen: 24
83.147.212.0/22 maxlen: 24
83.147.216.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
83.147.222.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
178.253.55.0/24 maxlen: 24
83.147.248.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134526236 (0x804b51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 14:47:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e0f81a381b74e722029fcdcb9826b6e82594da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:a1:3a:21:0e:88:c6:dd:18:32:73:1f:4f:
fb:07:32:ca:a7:a1:de:a8:e5:95:99:76:10:da:5c:
b4:50:77:9d:66:d4:1e:10:7d:d3:5f:72:70:86:0a:
50:12:66:16:80:93:ec:ff:a1:c8:c7:5a:a7:45:89:
37:cd:c8:ca:ad:8b:60:0e:23:04:6d:20:54:e4:4e:
66:48:03:8e:f2:fa:f0:bd:1a:2e:c1:16:86:be:0f:
73:ea:f1:b8:94:9d:9e:78:20:6c:e7:26:df:87:8f:
a4:1e:06:31:9f:44:ad:fb:b6:c0:ae:e3:ca:d4:52:
c8:7c:ec:5a:ff:4c:61:2e:b9:3a:68:33:c4:b8:ed:
8e:26:4f:68:f5:e0:6e:9a:e0:aa:04:0f:07:24:e6:
15:44:cf:0f:1e:7b:74:e5:04:32:01:89:a4:57:08:
84:a8:f2:e0:cd:3e:13:bc:fe:86:c8:5e:3c:bd:91:
a0:7b:53:83:2d:8a:93:d6:78:48:52:b9:71:db:eb:
ed:e3:1b:ed:07:8b:23:a4:69:45:43:75:5f:df:3e:
a5:b1:ae:50:79:0c:a0:7f:ee:e6:ac:75:ed:1e:07:
32:73:1c:62:6b:7a:dc:4b:27:9c:7f:23:89:b9:25:
e5:5b:07:ac:62:a7:98:f3:b2:d6:29:91:44:7b:32:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0F:81:A3:81:B7:4E:72:20:29:FC:DC:B9:82:6B:6E:82:59:4D:A1
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ng-Bo4G3TnIgKfzcuYJrboJZTaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0-83.147.217.255
83.147.222.0/23
83.147.232.0/22
83.147.240.0/20
91.186.194.0-91.186.207.255
91.186.212.0-91.186.223.255
94.241.136.0/21
94.241.160.0-94.241.183.255
178.253.12.0/23
178.253.32.0/23
178.253.52.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d0:2e:bf:fd:39:8c:cd:cb:4d:a7:f1:09:37:3a:e5:5e:5a:
32:a0:4f:ed:8d:54:11:f3:e2:dc:60:e8:e3:9e:b8:f7:b0:fa:
6a:9a:77:34:7f:67:4c:9a:d5:e6:c3:57:9a:c5:2b:2c:04:e0:
a5:c7:34:2b:2d:a5:74:80:b0:12:58:78:34:88:bb:4c:d3:38:
df:36:7d:08:f2:97:b0:ad:c0:e3:54:c2:14:05:d2:23:c1:d9:
e0:5f:7a:59:0a:b9:f1:63:a5:65:83:d2:4e:8d:87:d3:72:90:
06:85:55:62:86:3a:d5:8c:62:ad:5a:25:10:38:f1:bc:e9:6e:
60:b1:c7:a3:79:d5:28:7e:13:d8:76:0b:7d:06:ef:34:e9:7c:
26:74:a6:6b:19:a3:f1:c1:ee:86:62:3f:54:2a:b4:62:6c:95:
9c:c4:a1:8a:fe:04:8b:e1:aa:56:2b:c9:ed:f2:ee:ff:3b:5b:
13:3e:03:50:21:ed:09:5c:81:8e:a5:79:32:17:ef:84:de:c0:
03:e8:5a:fd:7a:b8:ac:41:7a:63:4c:73:62:ca:c8:b5:e1:bb:
c1:36:56:b6:5a:42:22:0a:08:65:b6:f4:94:21:d4:86:57:8c:
cb:f9:5a:cb:2f:b0:3c:d5:e7:45:58:fe:44:0a:f2:9f:b6:bb:
df:c2:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org