Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NNp6Cu7tRalmjy4XJkJ3EligOMQ.roa
File: NNp6Cu7tRalmjy4XJkJ3EligOMQ.roa (raw, json)
Hash identifier: xyIDyQ8UOHsGVADO8feS/nvqhyMVEeNGWtpruT2ox6c=
Subject key identifier: 34:DA:7A:0A:EE:ED:45:A9:66:8F:2E:17:26:42:77:12:58:A0:38:C4
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17C63ED1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NNp6Cu7tRalmjy4XJkJ3EligOMQ.roa
Signing time: Sat 01 Jan 2022 04:54:24 +0000
ROA not before: Sat 01 Jan 2022 04:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60945
IP address blocks: 185.133.73.0/24 maxlen: 24
45.85.194.0/24 maxlen: 24
194.156.159.0/24 maxlen: 24
185.137.181.0/24 maxlen: 32
185.226.72.0/24 maxlen: 32
2a06:7a03::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398868177 (0x17c63ed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34da7a0aeeed45a9668f2e172642771258a038c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:32:47:2e:18:63:fc:68:ea:e2:62:d3:da:
62:61:66:22:1c:51:36:9f:7d:45:93:1f:4c:55:3b:
b6:67:6a:ea:44:3e:3d:5f:d5:5f:44:8c:dd:b1:76:
9e:26:78:c0:55:08:82:83:9b:30:39:54:a9:26:50:
da:56:ff:67:74:96:a6:01:c6:d6:bc:28:19:c0:ef:
3b:5c:6d:c4:e8:e0:c3:3b:33:9d:12:1c:a8:cf:0d:
be:7e:d6:e2:cf:44:8a:af:88:ce:9e:21:d0:f6:36:
7a:55:19:f2:3f:66:46:87:44:56:91:ee:90:92:87:
81:d6:0e:87:d8:0f:fa:76:fc:fc:18:7d:8d:6b:58:
51:02:0d:28:eb:af:f0:3b:eb:83:14:6a:3c:b4:ef:
0e:29:bb:85:7a:90:90:5f:14:5d:14:dc:a2:9b:83:
39:f1:d9:cc:da:bf:8f:48:d4:cc:04:93:54:c2:d5:
6c:72:c5:26:29:6f:e0:50:4f:02:4c:c6:07:30:02:
e6:ef:97:e9:4c:6d:36:9e:bf:7f:44:10:3e:d9:f8:
d7:c5:9b:8d:c0:ef:bd:d8:df:7b:9e:82:20:05:dc:
bd:36:3e:f3:ff:a9:4f:4a:df:f8:cf:9e:79:8e:44:
49:db:18:b9:ab:2e:7d:15:af:3e:4b:2f:9b:70:14:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:7A:0A:EE:ED:45:A9:66:8F:2E:17:26:42:77:12:58:A0:38:C4
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/NNp6Cu7tRalmjy4XJkJ3EligOMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.194.0/24
185.133.73.0/24
185.137.181.0/24
185.226.72.0/24
194.156.159.0/24
IPv6:
2a06:7a03::/48
Signature Algorithm: sha256WithRSAEncryption
75:17:40:4e:be:e3:a2:db:f8:1d:ed:96:4a:d5:cb:64:ef:02:
97:7a:6b:f2:4e:f8:3d:72:d1:16:2e:81:06:ee:25:d1:b3:b3:
a6:41:0d:32:9a:9c:0b:d3:27:e6:36:7f:c8:5d:c8:8c:7d:b3:
fa:84:69:0f:c9:8a:67:83:95:33:61:cb:61:5d:fa:09:f4:8d:
26:fd:18:01:56:3b:de:18:40:f0:1d:8a:67:5c:8c:e2:56:e0:
64:7c:4f:b5:ef:b3:69:e0:40:67:06:27:a9:55:03:f6:b8:b7:
11:66:76:6b:93:7c:0f:91:53:8a:ac:f9:43:59:84:67:ac:1d:
26:18:ad:fa:07:ec:d3:b4:51:9c:52:e5:1e:19:bf:8c:38:3f:
f8:a2:74:89:ae:00:81:83:77:2c:31:e5:76:bf:76:1a:09:52:
41:ea:97:30:da:5e:cc:da:80:cf:85:e7:cb:cb:eb:14:18:07:
f0:0d:c9:3b:8a:eb:11:6a:36:c5:df:47:c5:00:61:f8:44:25:
2f:91:27:49:b2:d4:9e:0c:d9:2d:0c:d9:e5:c7:31:4d:0e:8d:
cf:d5:56:31:79:a5:44:03:2f:a4:7b:fa:a4:46:11:dc:d9:4c:
69:b1:9c:4a:5d:f6:0a:8b:91:33:c4:c8:f3:0e:c8:a0:c9:9c:
de:33:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org