Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/zFj_vMTTQDNVx0IC9S2nroKwddE.roa
File: zFj_vMTTQDNVx0IC9S2nroKwddE.roa (raw, json)
Hash identifier: DSTclD3GoyelBNUAqMxGf5g3W5DG3y0iNMTHOJur9C4=
Subject key identifier: CC:58:FF:BC:C4:D3:40:33:55:C7:42:02:F5:2D:A7:AE:82:B0:75:D1
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 0181EBA22EAA5E7E9C3D6442123C00594BA2
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/zFj_vMTTQDNVx0IC9S2nroKwddE.roa
Signing time: Mon 11 Jul 2022 05:01:23 +0000
ROA not before: Mon 11 Jul 2022 05:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39835
IP address blocks: 81.20.112.0/20 maxlen: 20
5.34.224.0/21 maxlen: 21
188.74.36.0/24 maxlen: 24
188.74.37.0/24 maxlen: 24
188.74.38.0/24 maxlen: 24
2a03:6880::/32 maxlen: 32
2a03:4b20:f000::/36 maxlen: 36
2a03:4b22::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:a2:2e:aa:5e:7e:9c:3d:64:42:12:3c:00:59:4b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jul 11 05:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc58ffbcc4d3403355c74202f52da7ae82b075d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:96:a9:4f:a2:49:b5:d0:e3:8d:b9:f8:8b:
0a:d7:eb:db:21:73:65:ae:d1:33:a6:8d:2f:4b:0d:
66:20:57:fb:07:41:c5:a3:20:4b:20:8f:74:e3:20:
85:13:db:55:12:6b:28:9f:d6:d4:60:70:91:c0:99:
f0:5f:c2:db:bd:56:bb:b9:4d:8e:11:73:59:ab:e5:
c2:85:81:21:c1:cc:cb:46:07:83:c5:47:91:15:2e:
55:9a:44:3a:5b:66:bb:76:e8:1d:0e:5a:5f:e6:93:
48:10:d1:5b:87:3c:dd:d4:21:b0:a7:46:dc:42:22:
44:b3:31:de:dc:aa:28:74:aa:f5:82:b4:b3:5c:60:
4d:ed:92:93:c4:3e:81:25:da:05:ea:12:c4:64:a7:
fe:41:35:1c:5a:5e:ba:29:52:fc:23:24:a7:4d:47:
f2:a2:0e:d8:86:02:16:5d:49:24:3b:1b:5e:e3:a5:
c8:88:32:b2:a7:9c:31:ee:94:e2:8d:1b:bc:3e:c2:
06:af:f1:3b:13:0c:80:df:d0:bf:9a:cb:a2:53:a7:
d1:5b:97:9d:02:3f:d8:ce:06:0a:ae:59:be:e2:8c:
d0:ea:08:20:e7:63:06:5f:06:7c:f3:9f:c5:e4:e1:
68:46:31:8d:98:cb:62:60:64:82:59:1e:e2:a1:6f:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:58:FF:BC:C4:D3:40:33:55:C7:42:02:F5:2D:A7:AE:82:B0:75:D1
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/zFj_vMTTQDNVx0IC9S2nroKwddE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.224.0/21
81.20.112.0/20
188.74.36.0-188.74.38.255
IPv6:
2a03:4b20:f000::/36
2a03:4b22::/32
2a03:6880::/32
Signature Algorithm: sha256WithRSAEncryption
74:67:b0:83:84:0f:9f:b6:ff:f9:ca:00:60:25:01:3b:34:89:
4e:b4:b4:44:4a:91:b6:74:bd:dc:f4:3a:0a:ea:d1:29:1f:c1:
49:4b:e5:4f:23:b5:9a:21:19:20:5c:1c:10:1e:25:2e:3e:bc:
6a:61:84:62:3a:6a:23:36:b7:eb:c4:65:59:cb:15:d6:98:6d:
cc:b9:77:f2:2b:77:e8:db:b7:30:cf:77:94:78:9e:71:3d:29:
e1:60:3e:dd:b0:4a:d9:4b:be:94:67:17:12:04:e8:26:e5:13:
32:5d:7a:48:85:9c:a9:cb:50:93:77:46:9f:b6:ac:bb:f2:81:
46:c2:56:db:78:ae:52:3d:72:ef:50:02:6d:01:19:0b:e0:5b:
41:6f:e4:54:68:30:1d:d0:21:37:21:e1:f5:8d:f6:56:87:7c:
62:41:0e:46:4a:09:f4:d4:b2:95:bf:2f:31:16:28:a7:ef:52:
0c:be:cf:05:52:f8:47:d8:b3:9e:f2:21:10:bf:55:9c:dc:64:
ab:76:eb:4b:0d:62:7d:fb:5c:bc:52:ca:93:34:24:13:8e:44:
6d:d3:ce:28:c6:f7:92:dc:ea:4f:cc:74:53:3e:99:b3:de:55:
db:95:f6:cf:08:6b:19:09:16:6a:ea:65:b3:fe:60:3b:b5:5f:
6d:1c:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org