Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/nDPJ-b4G8hbQ0qRHLYXHROgwWT0.roa
File: nDPJ-b4G8hbQ0qRHLYXHROgwWT0.roa (raw, json)
Hash identifier: p71DcCt0OPUCKGQlE3KJ12gc8T2KH4j4CeHnzfsXTcE=
Subject key identifier: 9C:33:C9:F9:BE:06:F2:16:D0:D2:A4:47:2D:85:C7:44:E8:30:59:3D
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0C8693C0
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/nDPJ-b4G8hbQ0qRHLYXHROgwWT0.roa
Signing time: Wed 09 Mar 2022 10:38:04 +0000
ROA not before: Wed 09 Mar 2022 10:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210146240 (0xc8693c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Mar 9 10:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c33c9f9be06f216d0d2a4472d85c744e830593d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:8f:44:fb:81:69:dc:e6:2c:fc:f1:16:f0:
79:33:a5:25:f9:8a:a8:97:40:7e:28:1b:98:34:d5:
48:06:0c:97:03:be:02:3f:57:de:1c:1a:9e:74:f1:
e4:34:93:40:28:0f:db:ab:54:ba:72:1b:66:bd:29:
0d:e9:b0:17:19:e9:9f:0d:1b:5d:8e:61:e2:e2:0e:
85:af:a9:38:1b:04:9a:70:12:f2:3e:e5:ae:32:52:
9e:d5:b8:e6:2b:d0:41:dd:6a:c2:b3:85:0e:78:1d:
c0:ab:50:42:b3:af:bc:d2:fe:3d:c4:18:f1:05:88:
85:76:8b:8e:26:77:01:ae:2f:6f:05:33:27:6a:03:
54:ce:a1:68:41:d5:64:27:bb:03:c9:20:1e:17:d7:
0d:a6:4e:9f:2d:5d:b9:f3:eb:74:96:1b:90:af:e2:
4c:e4:88:fb:49:ed:47:07:05:1f:3d:46:67:6e:d3:
4b:3c:45:f7:6e:58:52:47:b0:c2:23:07:0e:be:57:
b6:15:c6:a7:bb:94:c3:56:63:59:e7:d1:fe:cd:e8:
6f:7b:02:71:29:4f:33:3a:fa:a8:21:46:9f:a4:ea:
e5:f6:37:7d:48:6a:6e:19:1e:81:34:dd:f2:72:31:
47:98:11:58:3a:f1:7a:56:2f:5c:7d:67:82:b8:8f:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:33:C9:F9:BE:06:F2:16:D0:D2:A4:47:2D:85:C7:44:E8:30:59:3D
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/nDPJ-b4G8hbQ0qRHLYXHROgwWT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
9a:e9:18:f0:02:78:f5:84:fe:64:c3:35:bb:79:d7:45:7b:ea:
13:f6:a8:ba:d3:60:e6:a7:d8:d6:1b:0c:54:d3:10:fb:87:d4:
b2:a0:ec:1c:5d:41:c2:d8:9c:11:63:fd:b7:95:59:e7:a6:d4:
4c:29:c5:d9:08:d8:cb:02:80:a2:37:f8:d9:2f:a2:9d:40:b0:
af:b4:62:9e:c7:25:50:87:79:1d:53:b4:c7:a3:f4:7a:d0:9e:
35:1e:b0:12:b8:47:fd:21:5e:5b:ce:82:f7:88:e4:cd:3f:98:
0d:08:75:e0:9e:13:0f:51:10:2a:29:5e:e5:b3:27:b4:65:e1:
71:ed:e9:6e:c5:7e:d6:7b:d7:82:5b:e6:cf:91:14:ac:9b:c2:
4b:22:0c:cd:62:ae:e2:6f:65:c3:2a:2d:30:f9:26:be:66:80:
82:6a:9a:6b:31:71:df:73:43:90:46:12:27:c2:9d:3f:05:0b:
10:db:6c:f1:b5:c0:93:a8:29:cb:df:a1:f1:0b:cb:75:ec:a8:
86:c4:bd:56:9a:71:b4:1e:1b:6c:51:82:eb:64:07:ea:28:17:
67:6c:1b:a3:64:f8:16:5a:43:a5:27:6e:37:b8:73:19:0f:d8:
4c:39:24:d9:d7:e7:ce:7d:72:34:d9:c9:28:55:42:80:66:af:
a5:af:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org