Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NMvPWmDg3FG9zS4MlV4TwPjMmt4.roa
File: NMvPWmDg3FG9zS4MlV4TwPjMmt4.roa (raw, json)
Hash identifier: ljlN3lovydWRdKVd3YMCAay24O0nXVRdcgFvCcSVumc=
Subject key identifier: 34:CB:CF:5A:60:E0:DC:51:BD:CD:2E:0C:95:5E:13:C0:F8:CC:9A:DE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01823A8E09401BE3FD18D33BB4B2E5A1FF90
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NMvPWmDg3FG9zS4MlV4TwPjMmt4.roa
Signing time: Tue 26 Jul 2022 12:49:23 +0000
ROA not before: Tue 26 Jul 2022 12:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 88.209.232.0/22 maxlen: 22
83.137.152.0/24 maxlen: 24
83.137.154.0/23 maxlen: 24
88.209.204.0/22 maxlen: 32
88.209.204.0/24 maxlen: 32
88.209.200.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3a:8e:09:40:1b:e3:fd:18:d3:3b:b4:b2:e5:a1:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 26 12:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34cbcf5a60e0dc51bdcd2e0c955e13c0f8cc9ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:1e:f3:28:a6:45:c0:d8:b4:2e:1b:d6:f1:
99:50:af:dd:a7:3d:0f:45:0a:a4:ec:2d:88:d8:fb:
71:17:10:4c:00:4b:00:e0:8d:99:2c:bc:bb:56:6b:
d2:d7:2c:bf:48:a9:6d:0c:81:13:76:7a:7a:60:57:
5a:46:20:4e:a6:fd:86:d3:ed:60:61:d0:1c:39:9d:
07:f2:a1:36:00:09:5f:94:7f:3b:1f:2f:65:96:f0:
68:cf:f0:b7:57:d4:0e:a8:c7:45:08:99:91:e6:99:
1b:8f:75:3f:bf:c7:62:b0:c2:4c:eb:68:9e:95:1b:
bc:d2:9a:66:95:c8:35:60:7e:61:f5:3c:4b:08:27:
ca:eb:5f:b4:2f:7d:2a:25:73:2a:91:6a:66:c0:a2:
2e:5f:e5:70:63:73:0d:2a:7a:26:7e:1c:a9:01:8d:
e2:cb:67:f4:fa:6c:dc:ac:64:d0:56:b7:38:aa:6b:
58:36:f4:4c:3b:84:fc:fa:65:82:eb:9c:b8:dc:23:
73:51:cc:fa:5d:3f:d3:c2:fb:36:7a:99:4a:4f:5c:
30:21:01:63:24:fb:0e:ab:fd:0a:70:cc:64:52:d0:
4d:43:08:f4:50:72:ba:64:64:d6:18:b0:08:5c:35:
7a:13:24:4d:d9:7e:9b:82:53:95:d4:d7:d9:0a:63:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:CF:5A:60:E0:DC:51:BD:CD:2E:0C:95:5E:13:C0:F8:CC:9A:DE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/NMvPWmDg3FG9zS4MlV4TwPjMmt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
83.137.154.0/23
88.209.200.0/21
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
53:d7:65:81:e0:19:ca:1e:55:17:0c:52:79:bb:da:0b:9a:fd:
75:6b:4e:22:10:29:bc:60:b0:65:52:e4:3d:a5:a6:73:43:1d:
cc:7b:a8:ed:a2:e4:5e:2c:15:93:ab:17:e1:24:98:b1:d2:97:
29:be:8c:c7:f5:dc:ef:96:c5:be:95:46:d1:30:46:bf:90:ed:
79:27:0f:0f:d0:42:b7:9b:a4:10:15:6b:18:61:c6:b0:ef:0d:
e5:8c:ee:d7:ed:32:d0:b4:90:61:51:e9:86:ef:41:cd:6e:14:
9c:d3:50:1e:e6:11:2b:ee:f8:61:b4:d0:ed:be:54:e3:b8:3c:
bf:2b:62:a3:8c:d6:8b:00:32:44:4e:be:e2:b6:ee:e5:53:2c:
c6:f9:64:6c:dc:a7:87:2e:5d:af:2a:e0:90:0a:53:57:3a:d9:
bc:4b:01:6d:8a:9d:79:b1:f0:8b:59:14:dd:bd:d8:22:78:b9:
e5:61:1f:1d:d5:fb:31:9f:3e:8a:30:8f:77:db:e2:6d:22:f3:
81:3d:c3:5f:dd:dc:8b:3d:6a:72:45:35:41:35:02:e4:4e:d4:
1b:f8:76:56:87:1f:94:89:bc:75:0b:fa:cb:7d:86:9a:ed:59:
82:2c:0f:a8:40:ee:3b:b5:08:ce:9e:0b:b2:c1:5b:71:c5:97:
5a:c0:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org