Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/NUb4UTma5sCzMktea5Q7hhSmrVU.roa
File: NUb4UTma5sCzMktea5Q7hhSmrVU.roa (raw, json)
Hash identifier: 9l5IN4IZPKR7QMA9cMESSosf0aIgjPEzChltQfGRcGE=
Subject key identifier: 35:46:F8:51:39:9A:E6:C0:B3:32:4B:5E:6B:94:3B:86:14:A6:AD:55
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 12CE04
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/NUb4UTma5sCzMktea5Q7hhSmrVU.roa
Signing time: Fri 08 Apr 2022 12:14:46 +0000
ROA not before: Fri 08 Apr 2022 12:14:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60764
IP address blocks: 185.174.192.0/24 maxlen: 32
185.174.195.0/24 maxlen: 32
185.174.193.0/24 maxlen: 32
185.174.194.0/24 maxlen: 32
86.62.14.0/24 maxlen: 32
86.62.15.0/24 maxlen: 32
86.62.12.0/24 maxlen: 32
86.62.13.0/24 maxlen: 32
2a0b:b500:f800::/48 maxlen: 48
2a0b:b500::/31 maxlen: 31
2a0b:b500:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232388 (0x12ce04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Apr 8 12:14:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3546f851399ae6c0b3324b5e6b943b8614a6ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:1c:57:7b:89:9a:e3:1c:d0:f2:04:b4:11:
35:06:5f:34:b8:7c:d7:8e:55:3a:e3:03:cf:1d:96:
85:8e:92:2f:d1:bb:2e:f9:6e:fa:eb:82:55:63:1c:
d6:15:29:a8:88:bc:59:e4:2d:dd:3a:32:3e:5a:f2:
1a:55:df:49:6d:97:88:e7:b0:c4:15:cb:38:51:49:
36:eb:c0:75:68:6b:86:d2:6d:28:a6:15:da:5a:b0:
2c:bd:dd:63:3d:f9:84:de:3f:1b:07:04:aa:97:11:
4b:3d:c7:58:0f:e4:89:26:b7:f8:a9:41:ac:0d:d3:
b5:7a:95:1c:51:26:4a:07:f9:6d:a6:93:0d:30:42:
34:da:66:1c:7e:00:e9:48:01:a9:97:2a:5f:d8:c1:
68:f9:28:5d:69:b5:e3:e2:b9:4b:d0:de:55:aa:12:
93:87:bf:3a:ef:ba:9d:f5:d1:d3:d3:35:61:a3:4a:
90:57:56:08:46:75:cc:1c:a5:df:85:ea:24:e6:b6:
b8:95:8f:b3:62:4e:8f:4a:34:31:25:e1:9e:6f:97:
4f:cf:7b:83:ea:87:64:1b:57:49:44:0f:d4:1d:2e:
23:5a:c3:31:e6:a9:8d:e2:eb:82:24:44:8d:40:d4:
e9:e7:6c:3b:af:3f:45:db:c9:b2:95:84:3d:f1:bd:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:F8:51:39:9A:E6:C0:B3:32:4B:5E:6B:94:3B:86:14:A6:AD:55
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/NUb4UTma5sCzMktea5Q7hhSmrVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.12.0/22
185.174.192.0/22
IPv6:
2a0b:b500::/31
Signature Algorithm: sha256WithRSAEncryption
4a:a3:d1:da:de:ac:3a:3f:af:7e:2f:80:7e:82:ca:94:e4:f3:
ce:ab:32:4d:ab:d6:e0:1a:1c:52:f8:63:d9:42:79:a8:5b:67:
dd:02:ef:55:be:77:14:a7:e1:a4:27:d2:89:46:c3:28:d2:0b:
ce:02:30:22:97:94:b7:76:fd:be:90:25:ea:92:1e:6c:c5:e1:
22:fc:48:ce:90:5a:6c:ea:5e:69:be:70:7f:f4:81:e6:d2:c6:
05:ec:9d:25:04:ee:e6:31:6c:19:49:03:76:9f:47:76:ca:27:
a8:07:c8:06:fa:1d:67:1c:9b:d6:8c:11:32:76:4b:23:24:4f:
ca:8e:8e:8c:a2:98:e3:3f:b2:fa:cc:d0:58:33:56:3c:1e:61:
4b:fb:2f:c8:6a:42:34:e8:90:5b:df:a4:40:15:ef:4a:1b:1f:
7b:dc:9f:c4:1e:07:91:4a:9d:34:1d:e9:2d:bc:18:55:44:0d:
65:8c:21:98:a7:6f:40:ea:42:ae:e9:10:99:a7:f6:5c:8b:80:
80:77:55:d8:e1:13:25:60:20:71:95:71:63:62:d5:b1:8f:61:
ff:89:0a:df:04:3c:c1:dc:ad:3e:cb:d3:39:32:bf:dc:1f:7f:
d1:45:e4:ba:3d:66:ea:79:9c:44:7c:63:ab:87:42:9d:3a:28:
b0:f1:f8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:44 2023 by rpki-client on console-fra.rpki-client.org