Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/2vGuqiwJKn6DQACVRyI_NJFITHE.roa
File: 2vGuqiwJKn6DQACVRyI_NJFITHE.roa (raw, json)
Hash identifier: 1XiMRJjVDt4C/dNYiK+oYJswbrkU2K/9AOykx/ebU6M=
Subject key identifier: DA:F1:AE:AA:2C:09:2A:7E:83:40:00:95:47:22:3F:34:91:48:4C:71
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 0332B94D
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/2vGuqiwJKn6DQACVRyI_NJFITHE.roa
Signing time: Wed 19 Jan 2022 15:07:50 +0000
ROA not before: Wed 19 Jan 2022 15:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206123
IP address blocks: 45.131.168.0/22 maxlen: 24
109.106.16.0/23 maxlen: 24
185.195.196.0/22 maxlen: 24
109.106.18.0/23 maxlen: 24
93.115.211.0/24 maxlen: 24
185.254.118.0/23 maxlen: 24
93.115.253.0/24 maxlen: 24
2a0a:5ec0::/29 maxlen: 29
2a0d:c340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53655885 (0x332b94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Jan 19 15:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daf1aeaa2c092a7e8340009547223f3491484c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:88:ba:a5:f4:9c:23:8e:68:da:af:0d:07:
c6:e9:4c:28:90:2e:8e:c4:a1:2d:23:91:dd:73:7d:
41:d2:1d:af:e4:ef:bb:ab:1e:e6:e2:b9:49:e5:37:
1f:10:60:3c:5e:ee:f1:e3:ea:f3:b5:ad:08:9f:40:
1c:2c:22:ec:38:60:7b:e0:ef:9a:cc:41:5f:d2:4f:
f5:0f:1c:cf:4f:05:c6:2f:52:78:b4:ca:10:b6:02:
fb:17:90:60:6f:36:93:2c:7f:ad:f2:b0:ed:9d:25:
55:8f:15:08:6e:cf:e0:44:28:14:03:33:8c:86:0a:
30:82:24:a4:1d:07:a9:2a:5d:1a:ae:38:a4:0f:9a:
69:89:53:61:3a:5a:ef:f1:a3:f8:4b:3e:53:d7:2d:
39:c2:69:dd:4a:ec:d5:c0:80:24:fb:57:8a:97:36:
13:81:35:fa:23:2b:90:2b:33:52:de:c4:0b:40:36:
f9:a8:2c:54:75:f5:6f:45:ae:4c:0b:c4:c9:ec:3a:
ab:e7:e2:48:42:9d:ae:08:82:12:8b:9e:15:4a:6b:
6e:cd:f1:1b:89:12:2e:de:d6:f4:07:b9:f7:fa:39:
30:39:6e:17:e3:c8:0b:25:b5:d1:a3:36:4e:33:06:
05:c8:ea:1d:e3:15:08:38:3a:07:18:36:d5:23:d3:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F1:AE:AA:2C:09:2A:7E:83:40:00:95:47:22:3F:34:91:48:4C:71
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/2vGuqiwJKn6DQACVRyI_NJFITHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.168.0/22
93.115.211.0/24
93.115.253.0/24
109.106.16.0/22
185.195.196.0/22
185.254.118.0/23
IPv6:
2a0a:5ec0::/29
2a0d:c340::/29
Signature Algorithm: sha256WithRSAEncryption
5b:6f:ba:7d:20:ea:cd:cf:84:a6:91:ce:0a:a2:23:2c:fd:ba:
d7:fe:59:37:01:da:8f:ce:40:58:11:7c:6b:86:d4:3a:7d:fa:
d2:4b:e6:f2:d3:81:5d:71:ec:48:ee:43:11:97:9f:c3:15:be:
73:53:1b:3a:f6:92:d3:87:e8:86:1f:11:38:3c:c9:b1:89:08:
30:7d:6e:8e:eb:fd:47:b9:ea:17:bb:85:96:e5:9b:0f:32:b4:
18:0c:d4:bd:3a:28:1c:b8:d6:3c:91:ca:ae:42:af:39:85:0e:
de:0c:26:44:5a:40:59:40:38:92:b7:04:c9:4d:88:c4:67:8d:
1c:a7:be:0c:d9:d3:02:b9:bc:34:69:14:cc:ac:29:d0:f3:e6:
65:b8:df:0f:21:7e:5a:28:d9:b9:dd:2e:d1:9f:81:c4:7f:24:
ef:6a:56:2f:2b:0e:43:08:98:e7:d6:ca:b7:f2:32:8f:e0:00:
cc:79:59:8c:5a:a6:3d:97:dc:92:ca:66:72:97:30:89:79:d9:
22:79:f4:0f:5d:5f:fb:10:c1:c8:19:6d:8d:d0:44:90:e2:26:
9c:39:68:c1:29:08:a1:16:ab:93:8f:5d:82:6e:05:e4:a2:60:
36:ab:e8:e3:68:70:c5:3a:bd:4e:22:ca:28:09:5f:0c:59:bc:
7e:fe:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:44 2024 by rpki-client on console-ams.rpki-client.org