Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/3I7eyT7RUrDn85CNKmfwBJhTQVA.roa
File: 3I7eyT7RUrDn85CNKmfwBJhTQVA.roa (raw, json)
Hash identifier: m6xe4spzVqssIr6NeC6r1VK8fYTy+3yM1CeLD7d10jM=
Subject key identifier: DC:8E:DE:C9:3E:D1:52:B0:E7:F3:90:8D:2A:67:F0:04:98:53:41:50
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 2FEE0ABD
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/3I7eyT7RUrDn85CNKmfwBJhTQVA.roa
Signing time: Sat 01 Jan 2022 09:56:27 +0000
ROA not before: Sat 01 Jan 2022 09:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8661
IP address blocks: 213.163.96.0/19 maxlen: 19
213.163.96.0/22 maxlen: 22
213.163.97.0/24 maxlen: 24
213.163.96.0/24 maxlen: 24
213.163.98.0/24 maxlen: 24
213.163.99.0/24 maxlen: 24
213.163.100.0/22 maxlen: 22
213.163.104.0/21 maxlen: 21
213.163.112.0/20 maxlen: 20
178.175.64.0/18 maxlen: 18
213.163.121.0/24 maxlen: 24
178.175.0.0/17 maxlen: 17
178.175.0.0/18 maxlen: 18
185.47.188.0/22 maxlen: 22
2a02:e540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804129469 (0x2fee0abd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Jan 1 09:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc8edec93ed152b0e7f3908d2a67f00498534150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:3b:cb:5b:39:31:5f:aa:0e:da:c1:c0:aa:
59:79:9b:f3:c2:37:d7:3e:c4:3e:55:0e:0d:29:93:
a0:6d:46:3b:69:6f:57:b2:64:56:e7:69:de:71:c9:
44:9a:c7:8b:74:3f:43:00:29:b6:e7:ba:3c:f4:af:
e5:98:33:5a:51:5a:90:65:cb:fe:df:f8:64:76:01:
74:12:9c:43:25:98:8c:9a:82:d3:71:e7:fa:d0:c9:
7c:28:c6:03:99:5d:5d:0e:91:ec:62:f7:59:69:8d:
5e:bc:f3:9a:5f:f7:a6:80:01:25:df:20:75:89:1f:
e2:73:95:c3:9e:ad:48:11:8f:1d:5c:3a:94:ef:5c:
2f:5d:32:0f:4a:d0:35:24:21:ce:f6:c0:e2:cf:bb:
b5:0d:94:02:f1:13:58:04:ea:6f:94:b7:3f:45:b2:
2c:64:26:ad:5e:8e:42:b4:b3:03:bf:20:93:6d:1e:
73:a8:ec:f1:22:4b:0d:47:2c:cb:c6:e9:7a:e1:38:
3d:8d:1d:f9:26:7f:52:65:eb:50:c2:d7:43:7c:f6:
d0:79:4f:ef:4a:95:44:a0:18:a2:c7:90:a4:0c:b5:
cb:5c:d9:a6:de:26:39:9f:4d:45:88:9f:b9:ac:a1:
b3:60:b0:98:2a:06:9a:a6:53:d0:1b:71:cb:2a:c9:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:DE:C9:3E:D1:52:B0:E7:F3:90:8D:2A:67:F0:04:98:53:41:50
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/3I7eyT7RUrDn85CNKmfwBJhTQVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.0.0/17
185.47.188.0/22
213.163.96.0/19
IPv6:
2a02:e540::/29
Signature Algorithm: sha256WithRSAEncryption
31:ae:95:94:2b:1d:60:36:cd:2b:4f:2c:79:ae:79:c8:75:fe:
32:3c:aa:79:0f:b8:2c:59:ff:92:0d:2f:b2:7e:60:06:40:4c:
c5:cf:94:8b:e3:6a:ce:5b:9d:6d:93:2e:57:11:0b:5c:d0:5e:
f4:70:53:ec:4f:69:d0:22:60:9b:25:1b:43:56:56:2e:cd:e3:
78:3a:12:49:ac:04:4b:18:68:12:9b:31:1f:71:59:2b:d0:ab:
1f:91:37:61:5c:e7:e8:43:ff:24:a5:b2:50:bb:e5:b7:d9:99:
cb:db:7a:a8:d6:25:c9:ab:9d:de:72:86:c4:d9:7f:6b:69:34:
17:e7:34:ad:2c:57:7f:f2:34:76:04:2d:56:22:60:0f:5e:1f:
17:25:90:0f:8c:4c:0e:ea:f6:06:47:d9:15:94:99:21:81:dd:
bb:3f:bb:ea:07:7e:11:e0:24:6a:7a:28:72:8c:d0:0a:48:4c:
8a:b2:25:17:72:f8:34:e6:bb:19:b4:5b:e1:c2:b8:63:bf:cc:
94:d5:26:45:64:e8:29:93:d7:0b:49:4f:9d:a1:43:cb:24:f2:
0d:40:71:b9:9b:f7:dd:14:1d:a5:03:ea:e4:c0:a2:a7:14:68:
f6:04:7b:1c:92:f2:92:a7:06:bb:93:c9:10:3c:9d:c9:2b:de:
fa:39:cc:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:24 2024 by rpki-client on console-ams.rpki-client.org