Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/8NgoncXGyx5ZByG8nmf5QLK8Qsg.roa
File: 8NgoncXGyx5ZByG8nmf5QLK8Qsg.roa (raw, json)
Hash identifier: RNGG/HaFz/wLUqvcwkQM1DvWbc0YbF3f4IYtQ8DEsoU=
Subject key identifier: F0:D8:28:9D:C5:C6:CB:1E:59:07:21:BC:9E:67:F9:40:B2:BC:42:C8
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 1801D4A4
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/8NgoncXGyx5ZByG8nmf5QLK8Qsg.roa
Signing time: Sat 01 Jan 2022 10:03:52 +0000
ROA not before: Sat 01 Jan 2022 10:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59891
IP address blocks: 185.150.31.0/24 maxlen: 24
185.150.28.0/24 maxlen: 24
185.150.29.0/24 maxlen: 24
185.150.30.0/24 maxlen: 24
185.32.124.0/24 maxlen: 24
185.32.125.0/24 maxlen: 24
185.32.127.0/24 maxlen: 24
185.32.126.0/24 maxlen: 24
2a07:6d81::/32 maxlen: 32
2a07:6d85::/32 maxlen: 32
2a00:c1e2::/32 maxlen: 32
2a07:6d84::/32 maxlen: 32
2a00:c1e5::/32 maxlen: 32
2a07:6d82::/32 maxlen: 32
2a00:c1e1::/32 maxlen: 32
2a00:c1e4::/32 maxlen: 32
2a00:c1e7::/32 maxlen: 32
2a07:6d83::/32 maxlen: 32
2a07:6d87::/32 maxlen: 32
2a07:6d80::/32 maxlen: 32
2a00:c1e6::/32 maxlen: 32
2a00:c1e3::/32 maxlen: 32
2a07:6d86::/32 maxlen: 32
2a00:c1e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402773156 (0x1801d4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Jan 1 10:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d8289dc5c6cb1e590721bc9e67f940b2bc42c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:b1:1f:3b:30:2a:29:21:a4:a7:2e:c5:3f:
0b:c7:6e:5d:c5:97:a3:04:82:8a:d0:44:92:99:32:
fb:d9:d4:56:38:2d:24:25:36:fc:35:e1:96:d8:bb:
13:f9:23:3e:0e:3f:4c:a8:25:4b:18:ab:bf:71:0b:
ff:1f:5b:43:d0:03:1b:0a:c4:f2:66:16:c9:54:c3:
02:9a:38:ea:04:29:90:1e:93:ef:9e:e4:35:5c:39:
0e:59:e0:3a:a7:7e:01:fe:a5:22:a8:36:91:4d:c9:
d3:5d:0d:d1:a7:4f:42:5c:42:ac:00:aa:8f:07:32:
06:9e:86:6c:47:39:42:ea:dc:17:db:d7:05:ee:6d:
97:87:d4:67:c1:8f:bb:6c:b7:e0:3b:51:3b:5b:8a:
ef:4f:70:92:d5:e1:16:a9:96:cb:01:64:0c:11:4d:
8a:8f:0b:f6:82:74:ee:52:b5:08:b1:5b:26:e4:ea:
30:99:7c:36:92:d3:80:f9:03:0a:03:7a:6b:8f:82:
0a:8b:12:9a:f6:02:dd:79:db:d5:61:6a:ad:5e:f4:
63:a4:68:5f:e9:98:37:46:ec:4b:d2:e3:c1:46:ee:
66:56:fe:de:af:2d:79:3a:97:58:57:86:c7:88:6d:
86:b3:f8:81:00:3e:4e:b5:84:53:d1:f0:ff:95:46:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D8:28:9D:C5:C6:CB:1E:59:07:21:BC:9E:67:F9:40:B2:BC:42:C8
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/8NgoncXGyx5ZByG8nmf5QLK8Qsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.124.0/22
185.150.28.0/22
IPv6:
2a00:c1e0::/29
2a07:6d80::/29
Signature Algorithm: sha256WithRSAEncryption
43:10:34:de:93:af:a3:08:93:8d:37:7b:23:6f:7a:83:f2:8d:
ca:b3:31:f6:20:8a:a2:ff:13:ee:42:78:a0:48:7c:46:fd:d0:
b9:0a:8f:0e:7b:e8:67:af:b5:2e:ca:e0:eb:46:65:fc:89:fa:
ae:71:d8:4a:b7:a8:78:dc:ce:65:7b:8e:91:58:67:a6:18:c9:
ae:d7:78:ce:9d:ed:8d:e1:f9:15:bc:22:ac:9f:19:f9:5e:d3:
ad:8d:ca:9f:1d:b1:7a:e2:9b:fd:8e:54:69:cd:b4:29:6d:60:
e3:2e:1f:ff:01:34:9b:f6:fe:76:fd:4a:75:1f:57:06:98:0a:
50:56:3e:d9:0d:85:fb:ae:25:80:a3:58:bb:02:d8:38:42:f0:
7d:1e:dd:12:96:fd:d0:03:b8:3b:9b:9b:57:d1:29:10:cc:f2:
c1:da:10:d0:27:8e:06:26:a1:63:ce:29:9e:7a:8a:d8:cb:f0:
40:1e:ee:ac:e8:81:9b:70:15:ed:a8:31:8a:75:60:d6:d7:32:
4b:16:37:6f:ef:4d:c0:fc:fb:a3:8c:82:40:9e:39:52:e1:c5:
21:41:f6:3d:ce:45:04:c3:ec:96:ee:09:72:4e:14:f7:8c:6a:
54:d3:08:4c:f3:7b:fd:b1:cd:0a:cb:9f:7d:f2:17:85:d1:a6:
b8:d6:e2:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org