Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/njGxp3H-kmLNqfm4LF9fWNiKEsI.roa
File: njGxp3H-kmLNqfm4LF9fWNiKEsI.roa (raw, json)
Hash identifier: JicOer0ncQ2zv4MT6qxnxINzJ++3SrnrMImTBgNCM1Y=
Subject key identifier: 9E:31:B1:A7:71:FE:92:62:CD:A9:F9:B8:2C:5F:5F:58:D8:8A:12:C2
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0D49E5A6
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/njGxp3H-kmLNqfm4LF9fWNiKEsI.roa
Signing time: Tue 31 May 2022 07:21:13 +0000
ROA not before: Tue 31 May 2022 07:21:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202468
IP address blocks: 37.152.176.0/20 maxlen: 24
37.152.184.0/24 maxlen: 24
185.206.92.0/22 maxlen: 22
185.231.180.0/22 maxlen: 22
185.228.238.0/24 maxlen: 24
185.228.239.0/24 maxlen: 24
185.228.236.0/24 maxlen: 24
185.228.236.0/22 maxlen: 22
185.228.237.0/24 maxlen: 24
185.97.116.0/22 maxlen: 22
188.121.120.0/21 maxlen: 24
185.239.104.0/24 maxlen: 24
185.239.105.0/24 maxlen: 24
185.220.224.0/24 maxlen: 24
185.220.224.0/22 maxlen: 22
185.220.225.0/24 maxlen: 24
185.220.226.0/24 maxlen: 24
185.239.106.0/23 maxlen: 23
185.220.227.0/24 maxlen: 24
193.176.240.0/22 maxlen: 24
37.32.28.0/22 maxlen: 24
193.176.242.0/23 maxlen: 23
188.121.96.0/19 maxlen: 24
94.101.176.0/20 maxlen: 24
94.101.184.0/21 maxlen: 24
94.101.180.0/23 maxlen: 23
94.101.180.0/24 maxlen: 24
94.101.182.0/24 maxlen: 24
185.143.232.0/22 maxlen: 24
185.226.116.0/22 maxlen: 22
2a0c:a7c0:1::/48 maxlen: 48
2a0c:a7c0:3::/48 maxlen: 48
2a0c:a7c0::/48 maxlen: 48
2a07:3900::/29 maxlen: 29
2a0c:a7c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222946726 (0xd49e5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: May 31 07:21:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e31b1a771fe9262cda9f9b82c5f5f58d88a12c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:13:14:74:66:6a:24:0e:34:31:35:32:fd:
36:00:cf:a6:9d:78:73:83:16:3a:45:ad:cf:3b:03:
77:b2:3b:81:87:15:26:28:97:ae:8a:96:24:4f:5b:
78:cb:40:b7:a5:64:fd:4b:7b:20:5c:2a:e3:6b:4e:
b3:6e:d7:27:d6:5e:8b:36:16:10:ca:8c:43:d4:26:
f3:01:54:70:f6:ea:a5:47:5f:a4:3f:02:ef:4f:8c:
49:9e:d6:10:9a:23:04:8f:90:f5:00:6a:8f:61:4a:
3b:aa:73:c4:0b:1d:d9:5f:85:45:eb:4a:ed:f7:2e:
8d:19:a4:6d:d1:87:9f:d9:2f:e2:8a:3c:95:cf:76:
b9:38:29:66:c2:66:9d:25:90:10:5c:fe:3d:b4:96:
af:78:a6:f6:2a:b9:3c:d3:ad:34:58:d8:41:de:48:
c5:dc:d4:43:2f:cc:f7:c3:34:de:1d:da:ed:d8:4e:
ac:36:52:a2:d5:53:79:8a:46:e9:ed:a6:8e:4a:dd:
07:d7:02:d6:38:47:24:e6:60:8e:94:6f:c1:e6:0f:
75:62:0f:b5:d8:45:a8:0d:49:02:27:69:36:10:de:
5f:b4:55:ea:f9:d9:b0:30:7c:61:ce:0a:1a:85:c0:
bd:fd:96:dc:4e:df:b1:bd:0a:a3:1b:e6:72:1e:99:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:B1:A7:71:FE:92:62:CD:A9:F9:B8:2C:5F:5F:58:D8:8A:12:C2
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/njGxp3H-kmLNqfm4LF9fWNiKEsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.28.0/22
37.152.176.0/20
94.101.176.0/20
185.97.116.0/22
185.143.232.0/22
185.206.92.0/22
185.220.224.0/22
185.226.116.0/22
185.228.236.0/22
185.231.180.0/22
185.239.104.0/22
188.121.96.0/19
193.176.240.0/22
IPv6:
2a07:3900::/29
2a0c:a7c0::/46
Signature Algorithm: sha256WithRSAEncryption
22:67:a2:51:22:96:75:03:e6:ad:7d:6e:f4:0e:a6:87:53:4a:
57:3a:d1:ee:e0:58:2b:a8:d3:f5:56:08:43:45:d9:ff:c2:91:
db:eb:f2:ee:2f:24:d1:13:50:e5:3b:c5:41:6a:7c:46:d3:7d:
9a:51:2f:6a:09:9e:21:b0:77:1f:74:54:fa:16:0e:3b:95:83:
74:4d:59:83:c4:e1:0e:d2:40:ec:a1:72:6c:83:cd:26:69:25:
7e:9a:de:ea:e6:66:5d:a8:40:9e:97:0f:a5:66:06:99:7a:5d:
57:ae:13:85:08:38:d7:f1:56:d9:42:ac:5a:b6:5f:07:6e:23:
7a:b0:e0:87:44:35:a9:2d:fa:31:58:f2:ac:a3:7c:be:af:1e:
0f:0e:99:a8:fa:90:62:7b:54:1a:89:77:f9:cf:d1:1f:0b:cf:
51:15:c9:02:08:7f:a6:9a:e1:d1:01:3b:27:72:a2:24:ab:e5:
eb:09:f1:1d:bc:40:e3:27:3c:a3:a2:64:49:0e:65:e8:1d:69:
d9:82:80:b6:ba:8d:2d:42:68:c9:55:c0:cc:51:81:e8:97:32:
eb:cf:98:bf:47:38:59:9e:ea:50:a9:af:5a:5d:2e:32:26:f2:
fe:2f:58:80:06:2d:4f:98:c4:ae:75:8a:84:60:0e:66:50:74:
30:8c:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org