Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/NHD7ZD2cBYS7tmnehTJX_wZKlEI.roa
File: NHD7ZD2cBYS7tmnehTJX_wZKlEI.roa (raw, json)
Hash identifier: jxHiIi9PC6A4FON8N4pFSCg8yjOR0PG8P47l31sxcII=
Subject key identifier: 34:70:FB:64:3D:9C:05:84:BB:B6:69:DE:85:32:57:FF:06:4A:94:42
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 12296F41
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/NHD7ZD2cBYS7tmnehTJX_wZKlEI.roa
Signing time: Sat 01 Jan 2022 00:58:48 +0000
ROA not before: Sat 01 Jan 2022 00:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202918
IP address blocks: 185.246.28.0/23 maxlen: 23
185.150.156.0/22 maxlen: 22
2a0d:7380::/29 maxlen: 29
2a07:71c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304705345 (0x12296f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jan 1 00:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3470fb643d9c0584bbb669de853257ff064a9442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:e9:e3:e6:85:62:b6:bb:7e:4f:d8:ef:6a:
1e:07:e3:fd:2f:75:54:89:cb:df:51:15:02:36:06:
77:21:ea:7c:2f:a5:d7:f1:57:4a:e4:68:0d:28:7e:
ef:64:0d:e5:ea:f3:f3:4d:84:30:d5:4a:38:e1:42:
54:3a:9d:0d:3c:89:56:20:7a:8f:f5:99:03:e7:ca:
9a:10:99:76:e1:dd:81:9a:bd:e0:2d:e4:c5:4a:ed:
ee:cb:2d:b2:e7:04:f9:aa:d0:a8:ba:97:d7:72:19:
69:d6:70:3b:34:40:51:b5:7c:86:cd:5a:e0:c8:54:
e1:18:50:82:4c:4e:18:9e:fa:96:02:c8:a3:50:da:
aa:28:30:ac:52:b7:58:04:82:8f:98:6c:6d:82:9e:
0d:d6:6b:a5:5d:fd:fd:3a:87:18:6d:90:ad:b7:3b:
24:2e:0f:a8:11:e7:86:15:2a:32:60:49:cc:a9:e2:
76:d7:92:22:ca:69:7a:f6:80:55:8b:9e:e6:26:f1:
b5:8b:02:1e:7e:62:ab:4e:24:9f:59:d3:48:d5:81:
00:cb:1b:ec:13:f0:59:99:af:b3:5b:17:a1:01:aa:
2e:d4:a5:1b:7d:3d:51:f1:89:39:0e:90:b6:e2:8e:
78:1f:2f:5e:5a:e4:3f:23:e1:3e:08:5e:4f:b0:68:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:FB:64:3D:9C:05:84:BB:B6:69:DE:85:32:57:FF:06:4A:94:42
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/NHD7ZD2cBYS7tmnehTJX_wZKlEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.156.0/22
185.246.28.0/23
IPv6:
2a07:71c0::/29
2a0d:7380::/29
Signature Algorithm: sha256WithRSAEncryption
5e:85:c6:26:0b:aa:63:5c:7f:3a:6f:d8:22:ec:01:38:f6:ab:
75:9c:2e:d5:35:3c:55:86:48:9a:93:c8:92:90:31:fa:96:9e:
f8:05:db:7c:5e:96:51:34:01:70:91:be:ca:39:ee:99:af:72:
ce:c3:05:1d:69:13:1b:6d:3f:ae:05:7a:d2:f2:4f:8d:3f:d9:
ec:b0:5e:ff:c3:c2:9e:c3:c8:74:45:eb:62:a8:45:e3:66:f7:
f6:f8:2e:e8:55:f1:00:d9:0b:a3:37:8b:90:b7:9e:a2:a3:48:
72:8e:b2:3e:a0:38:c2:f5:eb:04:65:4b:52:11:3a:8e:c1:87:
34:ea:b5:7b:65:ca:c1:2c:bf:37:66:2a:2e:07:d9:cb:85:b1:
08:eb:93:50:93:6f:93:10:89:a8:e8:23:87:36:a3:a7:5c:48:
09:2d:73:cb:8d:64:4b:33:c3:21:68:9e:ea:90:00:e2:12:8e:
27:20:03:b4:c5:b9:63:77:1a:0f:6c:f0:1f:c0:cd:4a:6d:a2:
5c:c3:8c:32:1d:b0:0e:85:dd:09:20:ab:a3:f4:c6:1a:fd:ee:
1e:ca:95:84:63:aa:83:d8:c3:5a:fe:81:b9:2a:19:28:8c:91:
69:df:d8:77:38:4d:9c:38:bc:f8:34:5d:3d:db:ef:4d:e2:3d:
53:a8:65:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:42 2024 by rpki-client on console-ams.rpki-client.org