Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/Nps5fsGpt8L4pbCTXk38MzKe-ps.roa
File: Nps5fsGpt8L4pbCTXk38MzKe-ps.roa (raw, json)
Hash identifier: l7NfgwkM3Qh1S/pN+5itfHDJqhX+bW/l0psJ73o9/lQ=
Subject key identifier: 36:9B:39:7E:C1:A9:B7:C2:F8:A5:B0:93:5E:4D:FC:33:32:9E:FA:9B
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 0236CA19
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/Nps5fsGpt8L4pbCTXk38MzKe-ps.roa
Signing time: Sat 01 Jan 2022 14:03:45 +0000
ROA not before: Sat 01 Jan 2022 14:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207023
IP address blocks: 185.115.64.0/22 maxlen: 22
185.126.72.0/22 maxlen: 24
185.126.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37145113 (0x236ca19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Jan 1 14:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=369b397ec1a9b7c2f8a5b0935e4dfc33329efa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:e2:10:df:08:0e:ee:8d:9c:f0:91:35:63:
70:ff:1d:40:16:3f:60:86:22:7a:4f:62:40:ef:a4:
2f:6d:df:c9:d2:11:cf:44:5b:ca:c3:21:16:97:bd:
e2:1d:08:e6:9e:7a:cf:7a:34:76:33:a3:d2:85:33:
84:c7:c2:54:f9:9f:a2:46:ee:13:20:9e:86:fe:93:
9c:3a:47:3e:01:18:2e:2b:d0:fe:db:d5:3e:25:fd:
d2:d6:e3:5b:55:1a:a6:be:36:74:f5:12:9e:7e:1f:
19:ef:06:60:d0:bb:ef:0a:bf:6e:e9:9b:bb:25:80:
3b:c8:6a:9c:32:3c:4d:cb:62:db:53:96:6f:a6:cb:
1d:4f:31:52:70:8c:af:c7:6e:5f:52:ff:04:5b:4f:
9b:8e:30:e2:2b:bf:3d:c7:e9:67:91:37:65:ac:ce:
07:f7:cf:a3:4e:1a:2e:87:ba:9e:cc:8f:9d:84:80:
8a:03:c3:57:3f:a6:cd:94:32:f6:d9:ae:2f:d0:de:
f8:df:9f:f5:38:38:35:03:90:41:fa:e9:26:49:46:
3f:76:8c:84:e2:88:46:6c:f4:a7:46:bb:1f:d5:e5:
79:12:49:96:03:10:5a:0c:aa:09:3d:5b:86:38:25:
1b:80:56:c2:49:ad:03:a5:dc:5e:8c:e9:53:27:4a:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:39:7E:C1:A9:B7:C2:F8:A5:B0:93:5E:4D:FC:33:32:9E:FA:9B
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/Nps5fsGpt8L4pbCTXk38MzKe-ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.64.0/22
185.126.72.0/21
Signature Algorithm: sha256WithRSAEncryption
57:5d:98:92:52:fe:0f:8e:d9:b5:c9:a7:d3:8b:db:73:db:6c:
5d:b1:19:41:5d:ce:19:97:41:56:b9:bd:cd:fb:c6:d4:67:20:
01:81:f0:54:63:63:c6:d3:62:e0:a4:0a:03:a8:5f:02:48:c6:
29:60:0e:14:34:af:15:ea:33:a2:05:d1:12:e6:59:f2:3d:2e:
4e:6f:45:ad:b5:0a:91:ea:d0:e1:ab:b1:c0:ac:ed:22:21:c3:
80:12:c4:e7:ad:86:42:53:32:3c:c3:3f:19:dc:b8:91:75:b7:
a9:43:59:0a:92:88:78:20:85:64:01:bc:65:92:86:f2:e1:a4:
1d:29:31:54:99:3f:6b:38:ee:93:e6:2b:cb:77:b7:92:b8:b5:
9b:db:5b:02:f6:50:cf:8f:ad:a7:a9:a7:00:f5:1b:d6:0b:fa:
28:01:3f:46:fc:cd:d8:94:67:ea:e3:d1:56:a3:7f:a4:75:c7:
31:b1:07:8a:01:15:0a:86:e0:83:93:16:1a:22:85:82:e2:dd:
4c:18:06:de:64:90:11:dd:3b:65:cc:09:74:dc:c9:74:0b:e4:
0c:b3:29:a9:6e:dd:e3:1d:e1:9c:32:a2:a1:41:51:93:d2:50:
a0:d4:a8:8a:5a:b3:5f:35:5c:ea:4e:bc:58:fa:4b:c8:14:c0:
3d:d2:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:29 2024 by rpki-client on console-fra.rpki-client.org