Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/_e-NREGy7nAeM53jpi6ZA87hoj4.roa
File: _e-NREGy7nAeM53jpi6ZA87hoj4.roa (raw, json)
Hash identifier: PcLOqal67DdfgMNzpaMP1sfcWI3jLeLSpYJe+eH3oqE=
Subject key identifier: FD:EF:8D:44:41:B2:EE:70:1E:33:9D:E3:A6:2E:99:03:CE:E1:A2:3E
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 3CE5CD29
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/_e-NREGy7nAeM53jpi6ZA87hoj4.roa
Signing time: Sun 20 Feb 2022 15:59:10 +0000
ROA not before: Sun 20 Feb 2022 15:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50810
IP address blocks: 93.117.176.0/20 maxlen: 22
93.119.208.0/20 maxlen: 22
188.213.192.0/21 maxlen: 21
188.212.240.0/21 maxlen: 21
37.98.114.0/24 maxlen: 24
188.211.0.0/20 maxlen: 20
94.101.248.0/21 maxlen: 21
178.131.0.0/16 maxlen: 22
37.98.64.0/18 maxlen: 22
62.102.128.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021693225 (0x3ce5cd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Feb 20 15:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdef8d4441b2ee701e339de3a62e9903cee1a23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:d0:34:0c:06:37:a8:72:01:05:4c:28:6f:
f3:03:bc:32:e5:35:be:11:49:57:77:eb:af:f8:43:
39:b9:55:0a:c6:c3:9e:b3:a9:9c:b8:1b:16:83:e4:
97:41:83:f6:2a:95:79:cb:09:ce:79:c6:4c:61:8c:
5f:8a:82:6c:c3:17:9a:a6:23:6d:89:39:d5:9f:24:
3a:30:7c:57:e9:37:3e:da:03:b1:50:27:fd:22:a8:
6a:a0:2b:86:5a:88:1c:5e:f1:f6:5f:83:3e:a5:97:
80:49:10:3f:69:aa:da:54:d1:e1:a0:c1:e2:c6:7d:
02:30:d0:df:44:36:54:18:07:b8:0c:44:5c:b8:3d:
4f:74:70:a0:6b:29:a4:01:ef:91:d5:91:a0:c4:d2:
ee:0c:a5:24:9d:84:33:b9:11:e9:6e:b7:a7:6a:a9:
7a:fe:9f:fc:bb:f6:8a:93:54:b3:36:b8:d1:8b:f3:
40:54:f5:ae:71:9e:39:49:fe:34:34:0e:75:f5:2c:
3e:ab:1a:cc:2e:a6:ef:4b:d9:ca:41:cc:b0:33:89:
3b:c4:b1:a4:74:1c:59:db:9b:bd:80:2c:4c:90:ca:
ff:6f:24:54:75:ef:87:82:45:86:1e:21:5b:e9:9a:
97:eb:75:30:4a:05:2b:de:e0:dd:7f:3e:f0:53:04:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:8D:44:41:B2:EE:70:1E:33:9D:E3:A6:2E:99:03:CE:E1:A2:3E
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/_e-NREGy7nAeM53jpi6ZA87hoj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
62.102.128.0/20
93.117.176.0/20
93.119.208.0/20
94.101.248.0/21
178.131.0.0/16
188.211.0.0/20
188.212.240.0/21
188.213.192.0/21
Signature Algorithm: sha256WithRSAEncryption
85:72:b7:a3:9a:0b:5b:f7:f9:58:8b:5b:ee:0e:be:0a:04:34:
b7:2a:94:cb:c6:1b:5c:05:d5:87:00:6f:62:b2:31:e8:67:b8:
b8:68:23:63:12:59:b5:cf:dd:f6:b3:0e:22:aa:98:71:5d:d2:
4c:bf:2d:31:36:fa:6a:f8:da:7b:5c:5a:a4:27:c6:58:f8:89:
93:7f:b1:8c:c8:53:7f:91:d5:ce:60:ce:d8:dd:8f:81:ab:06:
d0:59:da:b5:cb:74:cc:3e:96:36:df:00:32:6c:a0:b1:72:8d:
f6:4b:6a:ac:8b:c9:de:3e:50:e6:f3:a6:07:95:39:02:18:08:
1a:78:09:41:ae:7c:d1:5d:b5:4b:78:fc:de:41:43:9f:f0:1a:
75:7d:3a:ba:65:41:05:b4:51:44:29:76:2c:44:c6:4a:4a:8f:
b9:23:12:25:1d:12:11:5c:5a:df:87:ad:99:49:8d:ee:90:14:
67:2a:fd:39:f6:19:2e:2f:94:00:f7:2c:37:da:92:79:7a:0f:
e7:22:ae:1e:26:bf:d5:1a:85:c3:7d:21:0a:d2:a0:c0:f6:b8:
f6:a5:f2:7f:52:b0:72:70:04:e4:7e:0b:10:96:ff:c9:28:c6:
c0:6f:c7:e5:40:79:7f:2f:b1:aa:d9:f3:e3:6b:d0:35:83:1f:
9a:21:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:27 2024 by rpki-client on console-ams.rpki-client.org