Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/iJ8yoKaAUBggvS2WYV33B0CMzGg.roa
File: iJ8yoKaAUBggvS2WYV33B0CMzGg.roa (raw, json)
Hash identifier: uSp1JywGPilHIGH0W5iKf+xCZEqSvtn1hkXWGpgbBzI=
Subject key identifier: 88:9F:32:A0:A6:80:50:18:20:BD:2D:96:61:5D:F7:07:40:8C:CC:68
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 01821556DB4908976BC85411EF5489E26E10
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/iJ8yoKaAUBggvS2WYV33B0CMzGg.roa
Signing time: Tue 19 Jul 2022 07:23:09 +0000
ROA not before: Tue 19 Jul 2022 07:23:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39835
IP address blocks: 185.75.150.0/24 maxlen: 24
185.75.149.0/24 maxlen: 24
81.20.112.0/20 maxlen: 20
5.34.224.0/21 maxlen: 21
188.74.32.0/22 maxlen: 22
188.74.36.0/24 maxlen: 24
188.74.37.0/24 maxlen: 24
188.74.38.0/24 maxlen: 24
2a03:6880::/32 maxlen: 32
2a03:4b20:f000::/36 maxlen: 36
2a03:4b20::/32 maxlen: 32
2a03:4b22::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:56:db:49:08:97:6b:c8:54:11:ef:54:89:e2:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jul 19 07:23:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=889f32a0a680501820bd2d96615df707408ccc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:35:7c:11:28:37:3f:5f:50:7a:85:3e:59:
a2:2f:f2:f1:22:79:f9:7c:0b:e9:1f:eb:46:4d:2b:
53:64:23:dc:1f:ac:6d:d3:3b:10:84:2a:40:e3:a9:
6d:d1:c5:74:ae:04:04:62:b4:fe:5a:90:69:93:16:
23:cb:28:7c:99:7d:ca:0b:4e:20:ca:09:20:3f:84:
63:e9:29:e8:0d:f5:40:74:de:a8:7a:09:1f:31:45:
d7:8a:ae:ed:5d:c6:bf:53:aa:51:a5:8a:b0:03:07:
23:6f:4f:fb:74:4c:27:71:dd:39:dd:82:a7:d0:c3:
a5:d3:da:32:f5:ec:82:95:1f:23:73:a2:00:21:64:
d2:b8:ef:d7:c8:eb:5a:40:d7:4e:5d:ff:5c:88:f3:
ad:71:be:3f:80:f3:2e:f9:47:f5:c3:13:92:1d:bf:
c7:a2:cf:4a:69:6c:24:b0:d2:56:10:b1:f1:13:b0:
6b:94:d8:78:e2:a5:f1:c0:7c:ed:c7:b2:7d:00:28:
d4:83:b5:b9:29:31:2e:f8:b6:67:05:ea:fc:5d:fd:
77:82:fe:25:f2:c9:9f:79:11:62:96:d6:cf:8b:e7:
62:f5:fb:7b:2b:f4:41:33:55:76:6f:c3:3d:b2:fa:
88:d8:96:03:a6:a8:9b:3e:6c:ac:0e:08:ac:cf:d0:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:32:A0:A6:80:50:18:20:BD:2D:96:61:5D:F7:07:40:8C:CC:68
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/iJ8yoKaAUBggvS2WYV33B0CMzGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.224.0/21
81.20.112.0/20
185.75.149.0-185.75.150.255
188.74.32.0-188.74.38.255
IPv6:
2a03:4b20::/32
2a03:4b22::/32
2a03:6880::/32
Signature Algorithm: sha256WithRSAEncryption
79:5b:2d:e8:54:c7:84:16:fe:67:39:07:1e:5a:18:33:ff:68:
4b:9f:f6:c7:1d:d9:88:fa:77:36:4c:43:c8:17:ec:5a:eb:ae:
a3:62:a8:b1:22:2a:b3:0a:7c:aa:05:be:0b:19:8b:0a:88:47:
d5:f8:6d:20:ad:dc:5a:6b:d1:bb:c4:e1:61:31:0f:f4:a8:6b:
2a:9c:d9:94:b2:0b:da:e3:2d:e4:bf:d5:75:b6:98:bf:dc:5f:
89:44:ef:95:92:20:f3:ae:0e:32:6a:aa:86:b2:a4:a8:67:96:
66:56:0d:9e:72:cd:f3:4d:41:98:2c:89:90:9a:55:57:3e:1c:
7f:29:8c:58:30:9f:bc:dc:7f:8d:92:2c:6e:88:bb:df:39:47:
99:52:92:5e:7b:11:d7:f1:ab:fe:17:7c:52:5d:9b:c6:7a:1c:
cf:7d:03:cc:d8:e9:8c:ea:bf:4f:e5:15:25:43:f3:e0:7f:20:
ba:a8:93:f4:5b:64:0c:d2:80:d4:1e:3c:ea:86:ec:ef:7c:1e:
fc:8b:3f:8c:06:44:64:ec:82:d8:ff:ab:30:d5:ad:8a:5a:53:
d9:33:87:5d:80:ef:65:4a:35:cb:82:f2:9d:58:59:37:94:e8:
71:5b:d7:33:b3:e3:df:ca:ea:fb:da:f5:37:8a:0c:27:a7:4f:
2d:b3:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org