Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nwdM2LYRofViXFkf6FZ3w6WI-Q0.roa
File: nwdM2LYRofViXFkf6FZ3w6WI-Q0.roa (raw, json)
Hash identifier: ewI9qW+PCY67P87euucIXA0dJBvYoSH+fQXQ9efc6Vo=
Subject key identifier: 9F:07:4C:D8:B6:11:A1:F5:62:5C:59:1F:E8:56:77:C3:A5:88:F9:0D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4273ADC0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nwdM2LYRofViXFkf6FZ3w6WI-Q0.roa
Signing time: Sat 01 Jan 2022 14:03:17 +0000
ROA not before: Sat 01 Jan 2022 14:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50572
IP address blocks: 193.180.0.0/24 maxlen: 24
193.182.253.0/24 maxlen: 24
193.182.251.0/24 maxlen: 24
193.182.252.0/24 maxlen: 24
194.68.229.0/24 maxlen: 24
194.103.228.0/22 maxlen: 22
192.36.242.0/24 maxlen: 24
194.14.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114877376 (0x4273adc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f074cd8b611a1f5625c591fe85677c3a588f90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:c4:15:21:07:97:de:3e:48:3a:7a:b0:6b:
7d:65:05:d7:52:e6:4a:35:d5:61:b9:bd:e7:36:fa:
89:6c:a6:bc:1b:6e:34:21:9a:35:11:4e:c4:7c:fc:
55:cb:c1:0f:6e:df:86:c4:72:a0:0c:34:29:ca:da:
f7:e1:9c:f9:27:24:41:dc:32:4e:25:56:fa:24:b1:
26:95:8c:dd:20:2a:32:37:25:2a:68:2e:71:51:60:
8b:85:d0:5e:1c:5d:08:dc:3f:21:a0:fc:ca:fb:e9:
4c:fb:58:9e:0d:40:0c:d8:dc:7b:1b:80:c9:7c:a7:
35:bb:9a:78:f8:e1:7c:c5:2a:d7:25:2c:17:bf:fd:
67:13:4d:23:95:2a:4c:c5:b0:5f:46:01:6e:71:c5:
77:0b:ce:14:72:d0:38:14:f5:08:b5:0f:86:9a:c4:
79:cb:22:99:43:6f:15:9d:94:ce:35:e5:91:7c:4d:
bd:fa:92:46:13:68:18:23:b7:3f:7f:d3:e7:3f:09:
97:80:d9:c2:8a:64:b6:3b:f5:7c:8a:1e:33:bc:ac:
29:43:67:7c:b5:4b:d7:34:25:31:37:c1:92:34:6e:
43:e1:5e:26:5b:60:fb:fa:0f:e7:71:77:45:a2:87:
89:ee:bf:44:d8:56:c2:42:ed:d3:7c:35:2a:d3:f9:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:4C:D8:B6:11:A1:F5:62:5C:59:1F:E8:56:77:C3:A5:88:F9:0D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nwdM2LYRofViXFkf6FZ3w6WI-Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.242.0/24
193.180.0.0/24
193.182.251.0-193.182.253.255
194.14.104.0/24
194.68.229.0/24
194.103.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:c2:a9:20:21:70:a2:e0:bf:cd:ce:dc:ef:8d:34:18:bc:1e:
7b:b9:74:26:2b:ae:1e:c2:3f:bb:26:5e:ae:57:fb:11:7a:33:
33:17:b5:7b:d8:f2:5a:4c:ed:95:7c:30:96:d5:e6:a7:0f:d2:
36:67:1a:e2:0f:7d:4d:2d:3a:cf:a3:09:67:81:26:76:26:ac:
92:4f:99:ba:99:0f:24:47:8e:e5:c6:14:01:c1:3b:2f:90:4f:
99:38:8e:f5:82:ff:4b:9e:dc:7d:0a:98:a7:58:9f:05:52:3e:
77:b5:95:cd:1c:46:2c:c9:bd:2a:2e:dd:49:3c:1a:ef:55:4d:
25:db:ed:b4:f2:32:10:d8:85:7d:43:e8:ee:03:59:21:42:33:
5a:ef:20:c5:4b:19:3b:86:d3:e7:ad:8e:79:bb:21:70:4b:4c:
ea:02:72:f7:23:04:2d:d7:13:51:00:68:6d:f4:fc:52:8b:7f:
16:85:5d:8d:4c:53:5e:d1:46:1c:19:cc:b3:ce:02:69:c8:8a:
7b:8b:ad:be:24:98:80:10:22:79:43:a4:72:d5:d4:2d:43:37:
04:f3:3e:2c:97:2e:a5:8e:c7:f2:d2:39:a5:99:17:61:55:9e:
45:76:50:a5:1d:11:16:95:0c:f4:b5:3e:2a:c0:88:15:b5:ab:
da:d4:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org