Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/NmCRzR4nItqUD16goCF-obcUTws.roa
File: NmCRzR4nItqUD16goCF-obcUTws.roa (raw, json)
Hash identifier: uUnffKo9Q6Y17Q0DiI5BJLmwjx+OzBoT1N9WcjcZXcY=
Subject key identifier: 36:60:91:CD:1E:27:22:DA:94:0F:5E:A0:A0:21:7E:A1:B7:14:4F:0B
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 19FB2D04
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/NmCRzR4nItqUD16goCF-obcUTws.roa
Signing time: Tue 10 May 2022 14:37:03 +0000
ROA not before: Tue 10 May 2022 14:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6584
IP address blocks: 194.69.96.0/19 maxlen: 19
194.69.96.0/22 maxlen: 24
194.69.100.0/22 maxlen: 22
194.69.126.0/23 maxlen: 24
2a01:110:8012::/48 maxlen: 48
2a01:110::/32 maxlen: 32
2a01:110:e050::/48 maxlen: 48
2a01:110:8008::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435891460 (0x19fb2d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 10 14:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=366091cd1e2722da940f5ea0a0217ea1b7144f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:c1:bf:de:ae:84:fd:16:66:98:06:bb:a6:
13:f1:31:d8:ba:63:1f:ef:67:b3:e6:d9:ae:b5:eb:
56:57:09:54:8a:f7:10:21:ca:09:1c:25:47:09:71:
df:52:fd:89:90:0d:25:67:d4:11:89:8a:61:91:fb:
52:0c:0c:cd:6a:c4:6b:51:ff:fa:20:53:df:07:d2:
98:0d:83:71:23:72:47:9b:7e:cc:aa:64:73:94:d5:
31:48:0b:3f:94:c3:b5:2b:b6:e2:4f:97:70:bf:3b:
ca:54:9b:d3:34:a5:1e:76:85:8f:ed:ca:aa:36:d5:
4a:7b:55:74:59:88:84:7d:55:bd:c6:d5:f6:c7:dd:
3e:66:43:a4:4a:12:b4:70:f3:93:5e:b4:1b:bd:85:
63:b9:e1:6f:64:b3:c5:c6:c9:76:1c:66:a0:a6:bc:
bd:81:2d:20:13:05:25:86:94:03:18:c8:5e:a6:aa:
57:dd:f5:3c:cd:03:0e:66:24:85:4a:7c:14:0e:6e:
fb:e5:d2:ad:a2:15:01:5d:58:7f:07:60:83:2e:eb:
ba:2f:74:f6:c0:ca:d4:d2:ae:bb:29:c1:42:a9:8b:
df:f5:35:bc:7f:6f:eb:74:47:f1:02:40:fc:d6:90:
63:73:60:85:42:7f:3f:e4:2d:16:eb:3b:c3:ae:0b:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:91:CD:1E:27:22:DA:94:0F:5E:A0:A0:21:7E:A1:B7:14:4F:0B
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/NmCRzR4nItqUD16goCF-obcUTws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.96.0/19
IPv6:
2a01:110::/32
Signature Algorithm: sha256WithRSAEncryption
64:5a:16:e6:00:82:4a:27:fb:6f:c1:dd:d2:25:28:ee:ab:83:
a3:18:95:f4:e6:e9:4d:f0:43:01:42:5e:0b:b2:33:0f:54:aa:
b3:78:c4:55:89:66:dd:cb:b2:82:0d:b5:bf:37:1a:7c:22:f3:
ae:7d:f3:bc:ee:40:70:ef:7d:a7:00:ce:fb:5d:36:72:7f:b5:
87:ff:ba:99:21:3c:ca:f7:7e:d7:ba:73:d5:a8:27:0e:a8:0c:
54:d0:35:30:ed:49:fc:60:07:72:40:8c:a2:45:3f:79:5c:69:
6b:a8:bd:b3:b7:4d:c2:8b:97:13:e0:1c:fb:b3:85:a1:fb:46:
8b:4d:96:2b:58:18:44:94:d0:2c:25:42:8e:de:17:b0:8c:ee:
80:60:db:d9:c0:2c:9b:ef:6a:27:05:f8:87:6c:21:c8:71:49:
c3:16:35:fe:c3:05:e3:7c:a5:cc:24:6b:a8:6f:f1:66:ce:a6:
bb:63:0e:07:77:b0:df:06:9a:ab:9d:9a:41:09:2e:d7:b9:b9:
29:d8:66:07:86:ef:d0:2b:e4:90:11:88:25:8f:67:12:c0:8d:
fc:03:3e:76:e2:88:bd:22:f4:6f:b6:2b:60:48:5a:eb:40:71:
86:98:97:26:42:73:eb:7b:35:f6:c4:fa:2b:f9:1a:9d:92:7f:
76:53:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org