Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/N6wQaE44Fc80Hbr2Ivz6wXGn4co.roa
File: N6wQaE44Fc80Hbr2Ivz6wXGn4co.roa (raw, json)
Hash identifier: Vk43WeyZRVA+l2PEvCtnPEEJbqN6qA6QNobmrn+jX7E=
Subject key identifier: 37:AC:10:68:4E:38:15:CF:34:1D:BA:F6:22:FC:FA:C1:71:A7:E1:CA
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 200941
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/N6wQaE44Fc80Hbr2Ivz6wXGn4co.roa
Signing time: Mon 13 Jun 2022 14:42:44 +0000
ROA not before: Mon 13 Jun 2022 14:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1820
IP address blocks: 185.170.192.0/22 maxlen: 32
195.66.93.0/24 maxlen: 32
91.226.1.0/24 maxlen: 32
185.45.244.0/22 maxlen: 32
193.16.47.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099521 (0x200941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jun 13 14:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ac10684e3815cf341dbaf622fcfac171a7e1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:eb:53:07:02:bd:08:02:d8:13:ad:33:e7:
90:3a:11:b5:8b:e5:82:13:fa:8d:5b:04:56:f0:81:
d9:14:a1:68:9d:cc:c2:ef:4f:39:a8:f0:7c:6b:40:
41:e6:63:35:e2:83:4f:0d:f5:0e:c6:40:f1:dc:4d:
7c:81:4d:e0:39:61:64:8d:19:e5:c7:65:dc:02:52:
14:a7:96:3a:e8:ab:3d:57:33:3b:51:e3:b4:de:7b:
cd:30:ae:91:59:11:d9:d4:ac:bf:6b:55:6d:11:c7:
21:a8:29:f9:b6:ab:06:9e:2d:a0:93:7b:cd:14:22:
c8:be:98:8a:15:ba:fa:2d:90:77:33:71:cf:92:5f:
25:f7:2f:77:7f:9f:0a:7a:fa:91:24:4c:63:14:90:
b3:c3:8b:85:aa:84:64:a6:19:53:92:79:30:15:95:
f3:8f:10:a8:e2:ce:5c:df:d6:a5:90:1d:1e:1d:72:
4f:0d:87:83:b4:31:35:0f:d0:2e:d1:0f:6a:36:06:
60:5c:69:96:3e:d5:90:83:9f:70:e2:8b:70:5c:d1:
76:a5:93:bf:b3:5c:7f:2d:e3:1c:9b:90:ee:1b:02:
15:69:8e:72:e8:b2:7b:da:71:21:e8:8b:82:65:b0:
4b:f1:65:88:50:15:eb:33:9e:ba:78:ca:55:ce:fd:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:10:68:4E:38:15:CF:34:1D:BA:F6:22:FC:FA:C1:71:A7:E1:CA
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/N6wQaE44Fc80Hbr2Ivz6wXGn4co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.1.0/24
185.45.244.0/22
185.170.192.0/22
193.16.47.0/24
195.66.93.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9c:b5:0d:5c:4c:75:e7:26:d4:6b:ad:72:9c:25:1e:01:65:
58:91:51:92:8c:b4:0b:39:a4:97:a9:18:1d:70:8d:60:fc:5f:
15:b6:2d:61:1d:72:f6:56:6e:d9:62:1b:0f:5c:09:32:3e:05:
cd:a1:ef:06:80:00:00:68:3a:d7:4d:23:6f:c8:62:18:da:22:
45:2c:97:72:14:72:96:14:cd:0b:bc:56:16:87:0f:e5:37:f5:
ac:ad:83:54:aa:19:b1:f3:13:b2:68:7e:f5:63:de:b2:47:31:
59:e6:36:25:e8:0a:0d:ec:3e:e1:13:9b:5f:65:d3:5b:8f:72:
86:63:36:b3:0a:2a:1f:e2:0b:19:b0:f4:3c:9e:96:6b:28:58:
c3:e1:13:50:14:49:4c:05:a0:be:84:fc:c7:c7:0a:3c:96:9d:
c8:2e:2e:e8:6c:82:60:97:b9:e2:01:19:9f:01:86:a1:d6:26:
a0:4c:e3:39:b7:3e:05:88:ec:ed:a1:50:c1:cb:2e:2f:9f:64:
95:78:c5:53:6d:13:68:b5:50:87:13:4a:89:4a:de:d3:0c:7b:
c2:c3:b2:34:8d:80:b2:4c:b8:23:e1:20:a6:3f:2f:57:d1:5f:
c1:d8:3f:66:24:f1:8f:ad:bf:17:ae:ec:ab:9f:25:9e:77:c0:
d0:03:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org