Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/NmL0RCHUW8A3G0JTlYvOiD_uBNI.roa
File: NmL0RCHUW8A3G0JTlYvOiD_uBNI.roa (raw, json)
Hash identifier: 4fg5wm65zbemA4ZJd+nE+e1menUd2wRyIZAVrSyr27g=
Subject key identifier: 36:62:F4:44:21:D4:5B:C0:37:1B:42:53:95:8B:CE:88:3F:EE:04:D2
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 03835208
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/NmL0RCHUW8A3G0JTlYvOiD_uBNI.roa
Signing time: Sat 01 Jan 2022 10:56:54 +0000
ROA not before: Sat 01 Jan 2022 10:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49262
IP address blocks: 185.107.236.0/24 maxlen: 24
2a06:1140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58937864 (0x3835208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Jan 1 10:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3662f44421d45bc0371b4253958bce883fee04d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:66:af:7c:9e:a6:72:a0:93:20:d0:9b:33:
d6:10:da:d4:dc:32:fc:57:7e:28:65:00:4e:8a:b3:
1a:45:34:75:46:47:ca:94:d6:e3:4a:7c:68:80:9c:
7f:c9:bf:e6:34:82:47:a8:55:62:87:a6:47:ad:e1:
15:28:b9:69:4c:a9:71:91:ef:c5:5a:e0:ed:fd:09:
a9:4f:ef:70:76:74:c4:db:33:24:98:fd:97:b3:25:
57:ab:e2:51:63:2f:15:3e:8f:0e:b6:e1:b0:81:cc:
32:29:f5:16:96:94:77:8e:72:12:15:f2:cb:67:69:
4e:28:5d:3d:b9:a7:25:ef:08:1d:50:5f:27:73:84:
39:72:af:57:34:77:f9:43:05:29:b0:81:ef:9c:aa:
ce:46:ad:4f:bc:01:36:55:25:c6:9c:77:d7:78:87:
25:23:65:99:09:23:a9:ab:00:1b:a5:1f:94:6c:24:
88:ed:b9:dd:f6:41:d7:8c:bf:1f:e5:0d:43:ee:7a:
55:e7:16:3f:0e:93:a3:49:1f:6f:cc:a5:67:71:f6:
17:3e:46:b8:3d:b8:74:6d:fa:04:01:9a:b7:29:68:
f6:93:1f:99:7c:a0:4f:da:26:53:c6:31:70:ec:f6:
af:8d:ea:12:9f:88:4e:40:4e:d6:b0:e3:4d:7b:d1:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:F4:44:21:D4:5B:C0:37:1B:42:53:95:8B:CE:88:3F:EE:04:D2
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/NmL0RCHUW8A3G0JTlYvOiD_uBNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.236.0/24
IPv6:
2a06:1140::/29
Signature Algorithm: sha256WithRSAEncryption
4e:c6:6e:0a:97:76:e3:6a:22:95:50:96:21:5c:a5:fc:6a:ec:
4a:19:dd:54:21:57:07:f0:42:05:10:24:18:ea:24:24:65:69:
b1:35:94:3a:f3:ee:b6:ae:b1:c9:94:72:33:26:d1:53:04:9f:
23:6b:56:f6:74:84:b4:52:e7:e6:bf:9e:11:d9:7c:fb:e8:95:
ad:9f:d9:c8:e8:78:05:44:09:ef:a1:ae:01:5b:5b:28:78:20:
e2:54:c3:b3:57:58:c7:7b:92:03:4a:e8:9c:aa:1f:13:80:3c:
da:6d:1b:65:92:41:51:2a:af:66:1d:3b:e0:17:98:3b:fc:69:
8f:49:3b:9e:e5:44:12:02:bf:9e:2e:c6:db:3b:11:61:06:dd:
04:ab:4d:60:9f:96:1a:52:fc:51:ae:53:2e:ce:8c:3d:7a:37:
b5:d2:01:af:2a:3a:43:49:c2:56:7f:0a:3a:73:c4:69:f9:49:
12:55:3e:cb:d1:20:9f:c4:cd:9a:18:38:21:01:5a:ee:0e:c2:
56:65:d8:95:6a:94:6c:d9:15:1a:69:59:84:08:38:44:94:f6:
59:9d:5d:f1:5b:07:72:9b:37:86:e7:eb:fe:f1:5c:65:5d:61:
bf:c9:f6:ee:bf:14:c7:8a:2b:cc:9b:a1:32:dc:b9:50:0e:26:
fa:07:9f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:01 2024 by rpki-client on console-fra.rpki-client.org