Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ngfnTc1zLUo-eVTUPULaErYMi74.roa
File: ngfnTc1zLUo-eVTUPULaErYMi74.roa (raw, json)
Hash identifier: SRzokZrGMCyEdoXu4s5e3tvo/HTjhaAEJ1otOveDNfI=
Subject key identifier: 9E:07:E7:4D:CD:73:2D:4A:3E:79:54:D4:3D:42:DA:12:B6:0C:8B:BE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CAB8691
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ngfnTc1zLUo-eVTUPULaErYMi74.roa
Signing time: Sat 01 Jan 2022 05:04:53 +0000
ROA not before: Sat 01 Jan 2022 05:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25596
IP address blocks: 82.197.192.0/19 maxlen: 19
185.6.48.0/22 maxlen: 22
185.227.72.0/22 maxlen: 22
84.245.0.0/20 maxlen: 20
87.101.0.0/21 maxlen: 21
84.245.32.0/20 maxlen: 20
217.19.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212567697 (0xcab8691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e07e74dcd732d4a3e7954d43d42da12b60c8bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:b8:81:15:10:56:2b:94:71:32:77:96:d0:
ab:4e:9b:bb:96:d2:ca:25:85:4d:e1:ed:8e:2a:30:
84:c3:cf:bf:df:c9:31:b4:df:01:3a:a2:b7:ac:82:
e7:75:10:45:0e:8d:8f:35:68:6c:26:fc:82:9c:d9:
dc:14:55:ba:81:50:4a:55:3b:82:61:77:e5:7b:f8:
73:16:f8:eb:c6:69:35:53:b7:e5:9b:34:00:4c:26:
ef:3d:1f:a7:0a:8d:68:5f:35:f5:00:25:da:51:dd:
31:7a:34:ff:78:72:f5:e6:b3:d9:5d:4f:49:d9:da:
8b:9b:62:1c:95:47:9a:21:66:70:1f:06:5d:29:c9:
fa:dd:48:b0:78:73:22:5c:ed:60:dd:23:50:77:5b:
5c:ee:41:23:f5:be:cb:94:65:6f:67:59:e9:c3:9c:
e3:b7:ac:4c:da:37:85:e8:bd:66:09:14:8e:c1:43:
34:f3:81:db:ea:73:84:53:ec:d4:8f:37:6c:24:1d:
57:5d:42:49:70:3b:d0:a8:4d:c0:6a:df:0b:52:a4:
bf:d4:78:bb:0d:d8:6c:09:5d:a3:59:82:1a:ad:6a:
b7:f2:d7:f4:65:f8:ec:e3:d6:55:3e:d2:3b:8b:4e:
4e:1e:ad:e9:60:b4:04:22:4e:fa:6b:a6:0d:92:76:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:E7:4D:CD:73:2D:4A:3E:79:54:D4:3D:42:DA:12:B6:0C:8B:BE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ngfnTc1zLUo-eVTUPULaErYMi74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.192.0/19
84.245.0.0/20
84.245.32.0/20
87.101.0.0/21
185.6.48.0/22
185.227.72.0/22
217.19.16.0/20
Signature Algorithm: sha256WithRSAEncryption
27:0d:f3:8f:21:2b:dd:0e:64:24:76:cc:d4:c9:23:27:14:88:
96:9a:31:6b:fa:49:e3:74:81:54:ba:97:05:c5:d0:e3:2d:23:
08:d8:08:d7:90:7f:37:d2:80:88:f6:b3:e1:7b:b9:a6:7f:a4:
52:81:9e:b0:2b:ac:8b:79:aa:f7:8b:97:0a:7e:ea:92:75:99:
b6:75:95:15:12:e2:4a:3b:8d:17:03:fe:0d:d9:e6:97:84:7d:
fa:e3:8d:a2:1e:ab:21:2b:fa:52:3a:8a:c6:1d:46:7c:95:18:
12:3a:24:ff:5d:63:40:8a:80:dd:fe:2c:74:9b:cf:0c:57:d5:
86:86:50:6e:e5:89:ea:42:1a:aa:3f:b9:d0:30:4b:9a:eb:67:
0b:0b:65:d0:8f:fc:18:55:53:48:9e:fb:f8:46:dc:e6:54:8b:
58:a5:be:6c:56:cb:48:a6:85:24:6e:20:0d:48:0f:a0:69:23:
2c:52:7f:60:c6:ce:76:50:96:33:2c:eb:2d:32:1b:68:90:bf:
01:f7:7b:97:ac:0d:86:aa:21:40:31:88:10:ad:2c:d0:e8:7d:
d7:78:66:d1:7d:ae:a5:04:23:93:4d:7e:4d:c9:75:c1:15:13:
bf:55:7a:1c:ce:30:2a:b1:64:f3:13:30:87:de:0d:b0:7e:d5:
83:70:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org