Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/mnNHON_9HSj2AdC-u7menoEDF2I.roa
File: mnNHON_9HSj2AdC-u7menoEDF2I.roa (raw, json)
Hash identifier: 0J5fBVx+ic8upjTpW/yb5xtegrCxYvWJoIx57U/ziiw=
Subject key identifier: 9A:73:47:38:DF:FD:1D:28:F6:01:D0:BE:BB:B9:9E:9E:81:03:17:62
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 01843F0AE5C298EC1C13A4AC784CD039AA77
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/mnNHON_9HSj2AdC-u7menoEDF2I.roa
Signing time: Thu 03 Nov 2022 19:49:49 +0000
ROA not before: Thu 03 Nov 2022 19:49:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57031
IP address blocks: 89.22.2.0/24 maxlen: 24
89.22.4.0/24 maxlen: 24
89.22.3.0/24 maxlen: 24
89.22.6.0/24 maxlen: 24
89.22.5.0/24 maxlen: 24
89.22.7.0/24 maxlen: 24
2001:67c:7c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3f:0a:e5:c2:98:ec:1c:13:a4:ac:78:4c:d0:39:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Nov 3 19:49:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a734738dffd1d28f601d0bebbb99e9e81031762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:28:e0:e8:f6:8d:08:b8:65:bd:55:fc:c8:
db:fe:a9:62:ea:1e:cf:16:b6:58:4d:55:ec:65:7a:
b3:35:fc:d3:6a:3c:7b:d2:91:7d:d2:fe:24:fa:de:
17:f2:47:e5:de:ea:eb:7c:97:2c:f6:84:ba:7f:89:
85:d4:7d:45:95:4d:3a:b9:f9:a4:13:18:3a:24:0c:
73:96:d4:bb:5d:6c:5e:4c:48:c8:22:35:a9:18:44:
58:21:7f:58:90:ea:4e:a3:32:22:2a:42:fa:7b:b6:
6f:3d:53:57:16:1c:27:18:15:e7:15:51:05:19:f4:
c1:d6:4d:20:46:fe:05:fc:ac:06:63:1f:2e:19:2d:
d4:43:3c:f5:8b:1c:cb:65:ec:e6:05:e2:f3:57:9b:
c2:88:5c:d1:04:68:b5:99:2e:51:fe:5d:40:4e:ee:
1d:db:d6:a7:bf:c9:62:92:82:c8:6e:21:27:bc:cd:
cb:ed:c0:e8:81:a2:23:bf:e7:e9:af:7d:9f:78:84:
3c:9a:c0:25:04:55:34:82:79:e7:75:bd:fd:a9:50:
e3:ff:98:93:85:46:cc:da:a3:18:ba:2d:14:0c:a7:
4e:2a:7f:6f:75:0e:29:aa:83:50:71:28:a4:3a:76:
9b:81:57:0a:25:8f:5d:59:6e:dc:a9:dd:8b:6b:47:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:47:38:DF:FD:1D:28:F6:01:D0:BE:BB:B9:9E:9E:81:03:17:62
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/mnNHON_9HSj2AdC-u7menoEDF2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.2.0-89.22.7.255
IPv6:
2001:67c:7c2::/48
Signature Algorithm: sha256WithRSAEncryption
2a:10:b9:a0:8e:87:85:86:90:c9:62:fd:fd:98:e6:a6:a6:e3:
eb:fd:32:1d:84:09:f0:9f:70:02:33:e9:3c:c2:64:c7:5c:88:
1a:79:dc:3d:a5:7f:78:09:ae:1e:88:ff:8d:46:60:1b:71:48:
63:1a:0d:b1:08:1e:e8:33:02:7a:e1:b8:a2:cb:d3:be:95:56:
5f:23:fc:41:81:3f:cd:96:ed:57:7f:a9:61:93:59:fa:e3:f3:
2f:fc:ca:30:6e:79:7e:78:bb:3c:79:66:17:c1:7d:95:f7:31:
76:55:bb:ee:59:0a:b3:a1:76:a8:58:bd:5e:7e:58:48:7a:36:
87:c2:52:81:01:ac:02:0f:41:ef:51:d5:b3:d7:15:92:cb:a2:
34:ff:94:7b:20:50:85:cf:18:85:83:13:45:f8:ed:19:42:77:
94:d6:b7:e6:bd:19:a1:68:35:7b:64:07:97:d1:16:e4:88:ea:
9a:c9:fe:a1:7f:b1:0c:3c:b6:4d:de:a6:a1:12:44:69:e7:0e:
4d:8e:d4:1d:4d:a3:12:ff:d5:98:91:26:22:57:97:c2:0b:ce:
b5:2e:82:ea:82:37:f8:5f:b5:ef:d5:8e:3f:61:a9:14:f5:43:
7d:c4:68:86:d5:dd:e0:5d:b7:27:8a:1d:06:3e:c0:ce:bf:19:
58:f5:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:51 2023 by rpki-client on console-fra.rpki-client.org