Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/nEjow-_KgtKE_PCqQ81f8KK2pIs.roa
File: nEjow-_KgtKE_PCqQ81f8KK2pIs.roa (raw, json)
Hash identifier: g9+MOzU+0VDb8Na51h5y0rS27ORg776XcRPj/Ybu7sg=
Subject key identifier: 9C:48:E8:C3:EF:CA:82:D2:84:FC:F0:AA:43:CD:5F:F0:A2:B6:A4:8B
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 07E4B3D1
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/nEjow-_KgtKE_PCqQ81f8KK2pIs.roa
Signing time: Sat 01 Jan 2022 02:52:25 +0000
ROA not before: Sat 01 Jan 2022 02:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 212.64.211.0/24 maxlen: 32
212.64.210.0/24 maxlen: 32
212.64.214.0/24 maxlen: 32
212.64.216.0/24 maxlen: 32
212.64.215.0/24 maxlen: 32
212.64.217.0/24 maxlen: 32
212.64.223.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132428753 (0x7e4b3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 1 02:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c48e8c3efca82d284fcf0aa43cd5ff0a2b6a48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:bd:9f:9c:d6:9b:e8:c9:a6:bd:c4:91:26:
4c:64:ce:da:49:d7:07:7f:05:0b:91:32:5c:06:0c:
2d:21:d0:86:6f:30:3d:51:7c:4f:44:29:03:37:db:
13:e5:33:dc:18:3e:11:f0:8f:84:61:f0:4b:5f:b1:
5d:8b:7c:ae:ae:09:da:7d:37:2d:cc:ac:f1:41:d6:
09:1f:c3:2d:34:70:8e:7e:ca:fc:ef:2d:b6:c5:1a:
35:76:1b:2d:b7:86:53:ed:bc:f4:31:50:ab:08:66:
bb:ae:2d:a0:28:85:87:36:a3:39:0d:2f:57:5e:6c:
6a:5a:04:34:a4:5b:c3:2f:b7:d3:20:77:dd:6e:82:
dd:c6:60:dd:ad:c9:13:0b:11:f6:df:38:b8:17:c6:
49:f2:e0:f0:a1:e6:68:cf:0a:d3:96:f3:9c:ce:f1:
5f:0d:be:dc:f8:fa:26:77:14:6a:d8:06:3a:69:e0:
5b:6b:bf:87:09:2e:30:32:da:7f:5a:48:65:30:1a:
1c:90:1e:8b:3d:9a:b6:50:bb:8b:a8:00:f0:f9:2b:
44:9c:4e:f8:fe:8f:6a:2f:d0:00:6e:6a:81:5d:5f:
77:d0:7f:56:f8:14:82:25:f2:73:4e:c6:c6:41:79:
3b:a9:cd:28:aa:94:55:9e:1f:fc:65:54:35:4d:51:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:E8:C3:EF:CA:82:D2:84:FC:F0:AA:43:CD:5F:F0:A2:B6:A4:8B
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/nEjow-_KgtKE_PCqQ81f8KK2pIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.210.0/23
212.64.214.0-212.64.217.255
212.64.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cc:7e:28:d7:4a:7d:0a:90:2b:92:4e:a9:5b:b0:d1:16:c6:
01:1a:ba:3b:ab:6f:75:e3:9e:38:aa:bc:c6:b5:ba:0d:57:08:
a5:bf:81:97:58:bf:34:4e:11:fd:cd:95:89:60:fd:bb:4d:86:
07:35:f7:e7:59:87:87:ba:e1:0b:e8:e7:c4:43:69:e6:70:37:
aa:9f:89:41:66:ed:39:28:c0:5a:db:32:f4:11:68:89:9e:59:
df:d4:0d:e5:25:c6:4c:61:b7:f1:8a:e5:67:a7:87:06:f5:6f:
54:d5:5b:54:e6:20:5e:b6:c7:4b:e6:45:67:2c:a0:8c:87:09:
71:af:9e:e9:fc:9d:2b:a5:ab:25:37:84:ee:b7:d8:e4:81:aa:
ed:8d:0a:0c:32:bf:ef:aa:39:e7:55:a4:d7:eb:21:95:4e:84:
a2:f0:3a:7b:7b:1f:67:0e:d1:62:74:92:f7:d4:6a:09:74:3c:
0d:b1:ef:1b:2b:50:53:07:08:7a:dd:e8:2e:8a:61:63:fd:6c:
db:8c:4e:ff:69:55:a4:51:a1:74:84:43:bf:3f:05:cd:04:14:
2e:55:30:40:f3:46:82:ce:54:34:c5:02:66:38:e8:ee:e4:ad:
95:63:2a:20:77:85:8d:c0:0d:57:fd:c0:f9:e5:9d:09:6d:61:
22:3b:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org