Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/NwVXyOyVZmi1_jxDJys82P754BI.roa
File: NwVXyOyVZmi1_jxDJys82P754BI.roa (raw, json)
Hash identifier: hI0p3ETICyohHfJWi9dpHZBSERStZdKpXdA9fBn9MkU=
Subject key identifier: 37:05:57:C8:EC:95:66:68:B5:FE:3C:43:27:2B:3C:D8:FE:F9:E0:12
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 281999D5
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/NwVXyOyVZmi1_jxDJys82P754BI.roa
Signing time: Tue 12 Apr 2022 06:51:19 +0000
ROA not before: Tue 12 Apr 2022 06:51:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 193.92.8.0/24 maxlen: 24
193.92.8.0/22 maxlen: 22
193.92.10.0/24 maxlen: 24
193.92.9.0/24 maxlen: 24
193.92.11.0/24 maxlen: 24
213.16.192.0/20 maxlen: 20
185.4.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672766421 (0x281999d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Apr 12 06:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=370557c8ec956668b5fe3c43272b3cd8fef9e012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:b0:22:e2:c7:da:50:5d:29:29:1f:64:20:
d4:fb:b4:f0:c6:e8:c0:0e:74:8c:ac:fb:cb:5a:ce:
65:13:bb:03:1d:4b:46:ef:43:6a:6c:72:7c:12:2d:
43:c5:62:8e:6a:54:96:61:09:cb:ac:e8:c0:bf:f2:
a3:d9:5b:9d:7a:f9:95:cb:88:58:84:cc:d8:5f:39:
15:43:22:13:39:87:1d:a7:26:58:24:8b:f3:23:f4:
41:53:d7:b5:9f:20:eb:86:6e:91:47:a0:6f:8e:9d:
28:da:2d:2c:f2:30:99:92:3d:74:6a:ee:32:a8:b9:
eb:e7:11:22:1e:d3:44:6c:06:dd:37:bd:69:4e:aa:
93:d3:13:21:db:8b:64:8f:1d:0a:29:1c:f6:c3:65:
97:82:c8:fa:3e:57:51:97:59:13:52:90:c6:49:64:
d3:8e:c1:67:13:42:dc:92:34:36:89:67:2f:ff:98:
82:82:7b:84:81:d4:28:49:0d:e4:db:8d:4a:79:78:
ec:1c:11:d8:27:d4:cf:81:8c:03:12:7f:b7:80:32:
4b:51:85:85:a9:e6:e3:0e:f6:3a:84:9e:5e:b2:83:
2c:32:e3:c1:f3:51:61:4f:e6:fd:84:e0:6a:d3:f0:
97:4c:2c:cd:a5:9a:cc:d7:24:87:44:58:64:65:48:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:57:C8:EC:95:66:68:B5:FE:3C:43:27:2B:3C:D8:FE:F9:E0:12
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/NwVXyOyVZmi1_jxDJys82P754BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.88.0/22
193.92.8.0/22
213.16.192.0/20
Signature Algorithm: sha256WithRSAEncryption
03:8f:0c:75:0f:37:f7:db:d6:31:1d:34:00:20:bb:e3:51:82:
22:79:f4:a7:b1:59:73:0e:06:c2:7c:71:20:f3:2d:0e:bd:fc:
99:d6:27:c6:bd:da:90:9c:f7:dd:5f:f9:8c:68:ae:fd:ca:67:
69:45:59:b9:ea:7e:d9:1d:8c:1d:b4:27:98:bf:57:3f:b9:1d:
14:69:b6:ad:a4:d5:ff:73:96:53:d6:ad:a1:d5:55:91:89:66:
9e:0b:56:af:4f:b1:e0:33:3f:56:74:fd:4f:68:fc:ba:a9:16:
c2:42:18:06:ff:db:6e:30:fa:58:c3:94:39:25:3e:48:df:6c:
f0:37:39:13:aa:26:a9:b8:2b:b1:74:4c:40:e2:35:b2:2c:46:
44:bc:eb:7c:c3:d3:31:4f:09:bf:02:fe:33:cb:30:19:a5:eb:
7d:54:57:93:ec:4c:60:12:6a:cd:12:33:7e:f3:8d:66:e5:e4:
16:a9:3e:df:03:44:1c:cd:0e:9f:64:f7:f2:ad:5d:e4:15:2f:
56:71:6c:33:fb:16:c6:1b:06:d1:db:87:1b:f3:5f:92:f2:0d:
3b:f3:fe:6d:9a:b7:b7:b2:67:4b:e9:65:22:9b:91:7f:8e:43:
96:eb:0e:84:77:68:a8:d1:c7:b4:07:4a:d1:2c:f6:b7:1a:8b:
0b:18:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org