Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/39Igc3wVZjrsTR_tLB-98YMaLoE.roa
File: 39Igc3wVZjrsTR_tLB-98YMaLoE.roa (raw, json)
Hash identifier: gU4k4MSbfRDJz68C0KAJgZ7v8LdllPkeUKML+/LSll0=
Subject key identifier: DF:D2:20:73:7C:15:66:3A:EC:4D:1F:ED:2C:1F:BD:F1:83:1A:2E:81
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 35B57ABD
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/39Igc3wVZjrsTR_tLB-98YMaLoE.roa
Signing time: Sat 01 Jan 2022 16:06:28 +0000
ROA not before: Sat 01 Jan 2022 16:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39835
IP address blocks: 81.20.112.0/20 maxlen: 20
188.74.36.0/24 maxlen: 24
188.74.37.0/24 maxlen: 24
2a03:6880::/32 maxlen: 32
2a03:4b22::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901085885 (0x35b57abd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 16:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfd220737c15663aec4d1fed2c1fbdf1831a2e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:88:fb:0d:ea:b7:ef:84:ad:2d:d2:39:8a:
44:05:b5:70:e4:31:c4:a6:89:2c:45:20:b3:ad:36:
21:9c:36:21:c3:9a:f3:87:7a:24:91:a2:19:ca:a9:
e4:b3:1f:fd:e0:3b:c2:54:ec:67:6d:4d:9a:6e:38:
b8:80:47:5a:a9:bf:a9:77:47:1a:a3:2e:89:4f:c1:
4e:25:ce:ae:3d:50:79:c5:13:2b:5b:21:a5:43:db:
90:8b:fa:66:b4:3d:ac:2c:95:3c:63:24:62:ff:2c:
de:c0:93:a0:38:60:73:30:0c:90:67:91:f0:34:c3:
7f:aa:6a:6f:dc:4a:1a:61:66:0a:c5:3c:c9:03:03:
1a:c9:79:21:bb:8f:85:e7:a5:c7:39:94:7a:b7:0f:
ec:e6:c6:27:d1:06:76:1a:95:fb:53:9b:c8:cb:81:
0b:8f:ef:aa:5f:85:d3:b2:95:c2:19:41:b4:07:9c:
2e:0e:6a:6b:08:09:fe:f4:4f:11:76:87:99:8e:6d:
09:10:66:fe:0b:f2:0b:24:f2:46:cf:ec:de:43:1d:
67:cc:a0:df:86:ea:29:10:bd:96:ab:53:af:b9:e8:
c8:46:cc:16:c8:88:ae:09:58:43:30:ef:7c:28:57:
b6:ae:72:03:cf:5a:d2:9d:c7:4c:36:8e:1e:24:36:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:20:73:7C:15:66:3A:EC:4D:1F:ED:2C:1F:BD:F1:83:1A:2E:81
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/39Igc3wVZjrsTR_tLB-98YMaLoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.112.0/20
188.74.36.0/23
IPv6:
2a03:4b22::/32
2a03:6880::/32
Signature Algorithm: sha256WithRSAEncryption
38:b1:64:19:a3:d3:28:a4:f6:11:b9:dd:93:3e:85:0d:4b:ed:
b5:0e:41:11:15:27:42:e0:8b:da:0b:1b:48:04:bf:84:6f:c1:
d1:e3:c0:25:fa:bd:f8:c4:62:8e:3e:cd:89:b5:de:3a:20:64:
34:ea:93:d0:b5:20:58:25:43:77:c9:ba:85:61:a5:69:ce:30:
14:6b:b2:94:22:b9:73:3b:e0:96:26:20:5b:ef:a0:6b:3e:d4:
74:92:81:c9:4a:8d:77:ad:b9:9f:54:db:51:8f:7e:15:28:e8:
3f:ed:c2:e9:73:59:63:4a:57:c9:86:2b:e7:c4:f3:16:3b:c0:
e0:bb:ae:92:40:ef:2e:4e:eb:ed:66:f2:70:ed:d1:a0:71:54:
6c:db:1f:77:31:de:81:a2:86:5d:92:38:47:b2:79:a6:ec:6d:
db:1b:da:df:f5:8d:a8:f9:42:55:57:4c:07:83:91:43:ce:fb:
b5:f2:ba:6b:10:2d:12:ed:47:7a:e7:0c:fb:44:41:76:ac:86:
45:03:e4:a2:c9:65:f1:4b:14:56:9a:4a:1b:8e:a4:81:f5:29:
75:d6:5e:dd:f6:80:fd:a9:3f:49:9f:d0:9c:f9:1d:c7:e8:8a:
4a:65:61:63:ab:30:91:15:70:6c:1f:b6:5d:6a:54:33:1c:71:
0e:28:30:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org