Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/NlE2J7xwS8DTA9z5YIlWmT131uI.roa
File: NlE2J7xwS8DTA9z5YIlWmT131uI.roa (raw, json)
Hash identifier: MZ0Sgynw0clLDcszN2EaIkGybvQ+XXOoPvIo1pIe4HI=
Subject key identifier: 36:51:36:27:BC:70:4B:C0:D3:03:DC:F9:60:89:56:99:3D:77:D6:E2
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 018C9690742491D8DA6C092C179C622A1CB8
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/NlE2J7xwS8DTA9z5YIlWmT131uI.roa
Signing time: Sat 23 Dec 2023 12:04:58 +0000
ROA not before: Sat 23 Dec 2023 12:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 213.109.76.0/23 maxlen: 23
91.239.43.0/24 maxlen: 24
195.191.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:90:74:24:91:d8:da:6c:09:2c:17:9c:62:2a:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Dec 23 12:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36513627bc704bc0d303dcf9608956993d77d6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:60:b2:8e:54:a7:39:d9:15:67:15:05:7b:
f0:4c:fd:e5:06:72:58:fe:37:ab:7f:f3:d5:49:c4:
51:40:e0:1a:1c:19:3d:ca:ee:c2:be:1f:58:b7:23:
06:26:b3:4f:57:52:ae:e0:7c:f2:40:57:f9:9e:3a:
23:0a:dc:7a:3b:99:cf:c0:ec:f0:55:ab:70:08:85:
04:b4:aa:e0:a1:39:72:c7:a1:c5:fb:59:df:2c:35:
01:d3:ea:c0:62:20:08:9a:2a:93:39:b2:60:67:34:
f5:da:b0:a4:0d:0c:8f:30:a0:4c:be:f7:ab:32:f9:
0b:4f:d7:72:95:e9:c0:0c:b0:f8:cd:2d:b8:8c:9a:
31:c6:fa:6d:3d:35:c8:3a:e6:33:ea:d6:0a:13:68:
c0:20:a7:2a:23:0b:c4:ff:e5:d3:0e:b6:6b:5d:cb:
f1:c7:f2:5f:d6:54:94:b5:15:43:ba:ce:b0:5f:07:
fb:cd:af:a9:5e:a5:94:53:3e:3c:cf:96:e4:d0:b2:
76:2e:50:ab:df:66:3e:89:f3:02:9e:3b:83:96:06:
bc:b7:f3:64:fd:87:13:5f:61:bf:d9:28:dd:72:84:
94:99:bd:d3:43:35:c2:3c:27:7d:5d:4e:e1:d4:da:
60:13:03:64:1e:76:99:3f:8c:0a:bb:f5:51:3a:5a:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:51:36:27:BC:70:4B:C0:D3:03:DC:F9:60:89:56:99:3D:77:D6:E2
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/NlE2J7xwS8DTA9z5YIlWmT131uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
195.191.65.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
56:17:00:8e:a9:ae:ad:21:12:0f:39:7b:6d:58:7c:4f:ad:4a:
e6:f4:27:46:8c:41:46:83:17:93:e0:07:1a:f8:94:4a:90:64:
ef:85:03:ac:dd:a0:4b:bf:46:6f:a0:06:f8:02:70:58:52:d9:
06:0f:55:bd:0c:b5:fd:39:03:bb:6f:cf:df:c9:22:d9:81:83:
49:55:fd:de:b7:21:24:de:22:5f:75:17:a2:e9:f0:6c:22:5c:
9e:ca:7c:c2:a0:39:b0:86:42:1b:96:2d:c2:7f:9d:73:8a:d4:
2a:e6:8e:f9:a6:44:31:7d:78:75:89:f5:7d:ba:90:8c:f3:c7:
66:3b:fa:91:45:f1:f1:09:9b:9c:24:08:d5:7d:d2:35:c4:88:
5e:49:72:ab:0a:9f:a7:1f:3c:78:c6:8d:9d:e2:08:91:3d:b5:
06:ea:63:df:91:c9:f4:e2:f2:2e:75:0f:68:75:b3:3e:c2:58:
71:9b:1f:80:66:f1:29:fb:6c:80:e8:78:b2:53:a5:2d:83:ed:
94:fd:1c:df:31:e8:22:cf:a6:73:9a:d0:8d:6a:d2:0a:cc:5a:
6a:fe:d6:d1:e5:c8:33:59:c0:23:0a:0c:be:a9:35:02:3e:a9:
28:d1:8d:3d:18:f6:47:3d:f9:04:d2:ae:18:b0:45:d1:82:44:
a5:39:2f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:13 2025 by rpki-client