Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/Njefu78svV_sD-D0pRSYayA4UtI.roa
File: Njefu78svV_sD-D0pRSYayA4UtI.roa (raw, json)
Hash identifier: CsARMuXZtglPMWIH9VI29ZA2N9EKOOERWObAaGSRUQQ=
Subject key identifier: 36:37:9F:BB:BF:2C:BD:5F:EC:0F:E0:F4:A5:14:98:6B:20:38:52:D2
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 0182455BDF148B4B996D98671772183FEAB6
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/Njefu78svV_sD-D0pRSYayA4UtI.roa
Signing time: Thu 28 Jul 2022 15:10:24 +0000
ROA not before: Thu 28 Jul 2022 15:10:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48158
IP address blocks: 176.58.41.0/24 maxlen: 24
176.58.40.0/23 maxlen: 24
176.58.39.0/24 maxlen: 24
176.58.38.0/23 maxlen: 24
176.58.43.0/24 maxlen: 24
176.58.42.0/24 maxlen: 24
176.58.48.0/23 maxlen: 23
176.58.47.0/24 maxlen: 24
176.58.46.0/24 maxlen: 24
176.58.45.0/24 maxlen: 24
176.58.50.0/24 maxlen: 24
176.58.55.0/24 maxlen: 24
176.58.54.0/24 maxlen: 24
176.58.53.0/24 maxlen: 24
176.58.52.0/24 maxlen: 24
176.58.57.0/24 maxlen: 24
185.190.190.0/24 maxlen: 24
212.124.96.0/22 maxlen: 24
212.124.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:5b:df:14:8b:4b:99:6d:98:67:17:72:18:3f:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jul 28 15:10:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36379fbbbf2cbd5fec0fe0f4a514986b203852d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:20:a8:76:c4:8a:9c:da:c2:70:ab:28:d6:49:
9f:69:39:05:dd:8f:25:da:b6:3e:83:2c:d3:ca:7c:
dd:2b:6f:aa:09:ae:7f:6f:7f:ac:20:dc:dd:1c:77:
6e:31:0f:ae:6a:62:44:7a:ba:2f:d2:da:64:ca:c3:
06:10:dc:b9:5f:00:f6:d5:dd:12:d4:10:ba:14:e1:
f0:18:b7:43:c0:19:0b:39:a4:ea:62:fe:9c:1a:0d:
be:be:fe:bf:d0:c5:27:14:0e:ab:35:12:63:3a:ee:
5b:be:70:4b:34:6c:9e:e0:ea:db:92:a1:1f:f0:86:
18:a5:2f:0a:64:02:fc:8d:e4:52:70:06:1c:56:8e:
9a:63:7a:9e:83:96:8f:82:05:3f:c2:41:89:bb:d4:
66:8a:8d:cf:fc:c0:3c:b0:e9:fd:65:d4:38:69:53:
ce:48:ab:94:a7:58:54:ff:3b:54:00:f5:f3:f7:48:
4b:6a:d8:b4:0b:85:a3:16:43:00:42:23:5d:d1:ee:
f6:35:e7:3b:10:3e:c1:e7:47:70:f1:37:ae:e8:03:
14:46:75:3d:72:90:96:dc:ba:ec:fe:84:19:c1:7b:
24:16:7b:34:50:64:d1:5a:ff:b1:ed:64:72:12:fd:
e5:3a:ec:bb:90:92:83:26:72:bc:ac:03:19:0b:dc:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:9F:BB:BF:2C:BD:5F:EC:0F:E0:F4:A5:14:98:6B:20:38:52:D2
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/Njefu78svV_sD-D0pRSYayA4UtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.38.0-176.58.43.255
176.58.45.0-176.58.50.255
176.58.52.0/22
176.58.57.0/24
185.190.190.0/24
212.124.96.0/21
Signature Algorithm: sha256WithRSAEncryption
73:70:fa:66:55:19:fe:97:72:c9:4e:eb:09:d1:48:75:f9:aa:
70:e9:5e:85:7b:4b:4e:9d:35:ca:77:86:47:f3:09:16:f1:7a:
06:bf:b7:69:8a:c4:a7:df:56:2e:c5:2c:20:11:7b:07:e4:4d:
48:5c:e8:8f:9b:95:1c:9d:2c:64:8d:8d:96:6e:28:2d:d3:de:
91:13:dd:20:3d:a5:2a:f9:65:5a:3c:97:fc:9b:ac:a0:d9:4b:
c6:41:8c:4f:88:67:a2:29:80:24:39:46:41:21:f0:29:e5:20:
8a:24:ff:7f:73:c5:70:2a:53:95:73:17:30:51:73:48:84:62:
0b:da:2c:03:ac:df:57:a4:46:1f:65:fd:43:4f:48:5a:4e:13:
38:ce:bf:59:a1:76:6f:69:66:ad:52:54:15:49:4f:98:2a:8f:
fb:52:5f:28:aa:f0:71:bc:63:7f:d1:95:53:1f:32:5e:86:7a:
3c:8e:6a:e6:17:ba:53:7e:1a:46:83:62:70:42:73:88:b8:28:
3d:e0:5e:af:34:31:66:fb:0a:31:e5:85:30:4b:c3:89:0e:30:
7d:a9:0d:c0:53:12:71:78:b7:da:bc:aa:67:93:ea:07:1e:b0:
17:77:b2:f8:b1:2d:02:77:7c:68:d6:d5:39:11:fe:e9:4d:63:
c1:f2:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org