Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nOtz-pwsASbbMdQhObMb339-EoU.roa
File: nOtz-pwsASbbMdQhObMb339-EoU.roa (raw, json)
Hash identifier: FaBpzEjVVJmsDXVtNhNDqcs4djhkDANxXD7DGZckkuk=
Subject key identifier: 9C:EB:73:FA:9C:2C:01:26:DB:31:D4:21:39:B3:1B:DF:7F:7E:12:85
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42579E48
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nOtz-pwsASbbMdQhObMb339-EoU.roa
Signing time: Sat 01 Jan 2022 14:03:00 +0000
ROA not before: Sat 01 Jan 2022 14:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9201
IP address blocks: 193.182.30.0/23 maxlen: 23
193.182.28.0/23 maxlen: 23
193.182.26.0/23 maxlen: 23
193.182.36.0/23 maxlen: 23
193.182.34.0/23 maxlen: 23
193.182.32.0/23 maxlen: 23
193.182.38.0/23 maxlen: 23
193.182.42.0/23 maxlen: 23
193.182.40.0/23 maxlen: 23
192.36.55.0/24 maxlen: 24
193.182.24.0/23 maxlen: 23
192.36.7.0/24 maxlen: 24
192.165.184.0/24 maxlen: 24
192.121.27.0/24 maxlen: 24
192.36.251.0/24 maxlen: 24
192.71.136.0/24 maxlen: 24
192.165.141.0/24 maxlen: 24
192.165.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113038408 (0x42579e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ceb73fa9c2c0126db31d42139b31bdf7f7e1285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:50:81:b2:b6:f3:f8:c4:36:f3:4d:e9:49:
8c:3b:49:ce:c1:ea:9c:13:65:a8:7d:b5:53:15:d3:
b5:e0:e9:00:f6:a1:03:14:2e:c0:5e:85:51:ba:11:
86:d7:08:cd:c4:90:a2:4c:cc:83:8a:2b:9a:a5:02:
c1:79:dd:ea:6b:f5:9f:5a:40:f7:14:c6:c9:1b:74:
0b:c3:c1:70:76:50:f0:65:04:66:2a:29:3b:c8:17:
6a:9c:e1:ad:7c:0b:57:f5:ad:0b:bd:86:56:97:f3:
19:dd:0a:22:98:93:41:2c:42:98:f8:fb:30:2d:27:
df:b1:a7:af:41:6a:d4:64:a0:53:67:1e:5b:3f:33:
83:7c:86:1c:e2:fd:1e:f5:f6:ce:7b:26:c8:6b:d5:
d0:f8:35:35:95:67:10:93:dd:35:b0:08:bf:7d:3d:
9f:7b:2c:a9:5e:31:55:cc:50:ab:97:fe:d1:02:89:
4a:b2:7c:95:a1:a1:d8:7b:dd:a2:d3:82:79:c3:13:
cb:86:3c:83:b9:93:37:4c:8b:b4:34:32:46:90:c6:
25:5a:f8:19:57:af:10:ba:b3:5d:e5:1f:01:65:49:
14:56:34:18:a1:6f:ed:39:16:3e:eb:81:49:35:a0:
f7:72:c6:22:6e:18:49:ab:e4:a1:c4:5f:41:87:48:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EB:73:FA:9C:2C:01:26:DB:31:D4:21:39:B3:1B:DF:7F:7E:12:85
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nOtz-pwsASbbMdQhObMb339-EoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.7.0/24
192.36.55.0/24
192.36.251.0/24
192.71.136.0/24
192.121.27.0/24
192.165.140.0/23
192.165.184.0/24
193.182.24.0-193.182.43.255
Signature Algorithm: sha256WithRSAEncryption
01:b5:fd:77:6f:f2:ca:5a:2f:f9:e5:0b:05:f3:aa:11:24:a7:
c9:e4:0e:d1:91:71:48:89:c6:5e:64:9e:3a:e8:8a:35:95:79:
2a:8b:66:47:15:94:29:b2:64:5a:79:23:2a:eb:2c:b3:30:f1:
e2:3d:7a:94:4e:69:1e:4f:52:69:69:3c:7e:59:79:2e:de:c0:
21:6d:12:b6:8e:b8:8c:4b:13:48:ad:ad:97:e2:a6:e8:5c:8c:
06:50:3f:f5:4e:96:ed:b9:99:09:f5:d5:89:e4:42:6c:50:47:
4e:6f:c5:ba:b3:4e:fd:ad:43:cf:c2:46:4f:ec:a2:a6:2d:0a:
5f:2e:ae:d6:b2:fd:74:bf:c8:84:39:dd:ea:35:ac:f9:b5:3f:
5a:e8:bd:6a:96:ad:6b:d5:99:fb:fd:13:c9:8b:1e:b1:e7:2f:
ac:c1:be:96:48:2a:86:c3:66:bc:17:07:fa:b5:da:e9:e9:09:
09:5d:d7:d5:13:87:6e:b6:b9:4a:75:bb:30:17:bd:7b:32:71:
bc:20:f2:d9:79:67:14:0c:0d:c1:cf:d8:1e:07:63:7a:03:75:
b9:f8:5b:5a:c1:58:c1:57:5c:de:b2:6e:81:e2:e9:38:d6:c7:
01:84:a6:e2:9e:a5:2c:c0:9a:50:ca:b4:a7:55:55:90:5d:b5:
bd:09:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org