Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nvB9BHGQTsD0jwV4ltGwa1gsWSI.roa
File: nvB9BHGQTsD0jwV4ltGwa1gsWSI.roa (raw, json)
Hash identifier: TUOOuhhyYqEym/gCcdIhxUWE71m6YSC8HM0O/6nLmL4=
Subject key identifier: 9E:F0:7D:04:71:90:4E:C0:F4:8F:05:78:96:D1:B0:6B:58:2C:59:22
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018205E2DD8D4568642DC5AD84AF96A39255
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nvB9BHGQTsD0jwV4ltGwa1gsWSI.roa
Signing time: Sat 16 Jul 2022 07:22:10 +0000
ROA not before: Sat 16 Jul 2022 07:22:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 92.52.218.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:e2:dd:8d:45:68:64:2d:c5:ad:84:af:96:a3:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 16 07:22:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ef07d0471904ec0f48f057896d1b06b582c5922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:ee:bf:4c:91:29:c5:a0:7a:97:a6:32:1a:
b7:81:cf:cd:ad:ab:b1:76:ec:44:b4:be:d3:e3:a7:
3e:48:87:7b:cd:32:7c:c2:24:44:2f:09:75:ff:61:
8d:32:30:8f:b6:ba:e3:80:20:1c:de:d1:06:96:64:
f1:06:57:28:4d:ad:d0:43:0e:90:97:07:66:7d:62:
66:68:96:fb:db:61:c7:02:29:c4:1a:84:53:f2:df:
36:4f:1a:62:fd:59:72:d1:01:b6:fb:da:89:a8:79:
a1:01:a9:ca:8b:13:c6:da:00:7d:51:b7:61:0c:20:
f5:47:47:28:a3:7b:83:7e:30:b2:f8:46:d7:0d:ae:
21:c3:14:42:88:73:b4:f1:b4:b1:e2:0d:ad:b3:85:
b3:e7:ac:1e:68:1f:56:86:fd:62:bc:4d:c5:e3:07:
1e:0b:7c:b9:c8:fc:d4:8d:37:a4:06:e1:13:d3:ea:
03:42:f5:58:70:06:4a:5e:4d:58:44:b5:59:c7:04:
81:ae:0f:5b:ec:a9:4f:d4:f5:98:b1:26:a5:83:94:
3a:71:86:34:0f:b4:8c:ea:90:38:1e:1d:02:26:de:
29:b0:06:7a:e0:ec:73:fe:12:08:af:dc:fc:8f:5d:
3e:f5:e2:ad:10:ca:ae:29:79:9a:d7:5f:a0:72:e5:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:7D:04:71:90:4E:C0:F4:8F:05:78:96:D1:B0:6B:58:2C:59:22
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/nvB9BHGQTsD0jwV4ltGwa1gsWSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
92.52.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d9:52:e0:76:f0:e6:69:57:63:80:c8:56:dd:7a:77:6e:6d:
7a:d1:18:5e:75:e4:2f:ae:3c:97:09:25:df:04:ee:a3:a0:9c:
47:73:81:ee:f4:62:bb:5f:7f:d1:9e:f3:0d:3c:cb:53:ad:b1:
c0:a5:67:1c:43:4f:c5:7b:d8:4e:9a:07:61:ee:b0:2d:4b:33:
3e:fb:8d:3f:af:a9:8c:58:bd:58:8e:ff:c3:7d:70:d6:66:f2:
b2:7d:11:dd:27:43:27:cf:da:e3:41:e6:97:0f:ac:38:28:02:
a6:28:28:37:97:ab:73:3b:86:8e:4b:cd:09:94:2b:a6:06:8a:
15:b7:db:5e:22:06:d0:65:2e:29:5d:5b:2c:33:8d:11:4d:e0:
5c:62:c7:c4:3d:8e:14:7b:6a:8a:38:55:fc:63:c9:c9:a5:b8:
3e:5b:b9:78:fb:05:39:1d:92:36:68:2e:f8:bd:57:bd:0c:ca:
41:37:97:44:cb:e8:00:c3:30:11:d8:29:30:af:a0:db:84:dc:
c5:be:fa:8a:cb:d3:e2:fe:aa:62:d5:8f:46:c6:7f:5e:65:9c:
8d:85:82:c0:fd:89:c9:0e:e3:4d:9f:c5:67:0c:89:2d:bc:82:
8a:ab:0c:21:8d:fa:cb:5f:9a:18:0b:62:fe:4d:a4:56:fa:41:
fa:dc:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org