Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/1eI4YZbdT1A3xK3WkY-EdpTVN-Y.roa
File: 1eI4YZbdT1A3xK3WkY-EdpTVN-Y.roa (raw, json)
Hash identifier: fbMXiHF62OPZstI/XJYqCURkBp3ZbUcnv625X0rXNDc=
Subject key identifier: D5:E2:38:61:96:DD:4F:50:37:C4:AD:D6:91:8F:84:76:94:D5:37:E6
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 19457E
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/1eI4YZbdT1A3xK3WkY-EdpTVN-Y.roa
Signing time: Sat 01 Jan 2022 01:53:45 +0000
ROA not before: Sat 01 Jan 2022 01:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 185.15.32.0/22 maxlen: 22
37.1.168.0/21 maxlen: 21
37.252.200.0/21 maxlen: 21
2a03:b7c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656190 (0x19457e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jan 1 01:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5e2386196dd4f5037c4add6918f847694d537e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:4c:f4:9c:a0:cd:68:90:ea:4c:8b:7a:93:
be:32:5c:42:9c:c6:78:37:8a:b2:77:58:be:46:a0:
d1:db:fa:ed:f4:00:b7:3d:e5:18:ce:ff:58:88:92:
56:70:61:2f:1e:2c:12:dc:09:68:4e:64:9f:11:ba:
f9:d6:66:8c:48:b7:0e:ad:d5:eb:b5:ce:7c:06:7c:
0c:3a:02:05:a5:eb:7e:1f:7e:30:2d:13:66:73:41:
ae:bf:c9:ca:4f:7c:38:a3:0f:6f:1a:5e:e6:a9:d2:
a2:f5:c2:2c:b0:fb:f6:35:1c:ff:d2:9f:12:cf:5c:
3e:4b:f0:11:af:b2:ee:08:b1:19:c5:1c:b2:bc:31:
f0:1d:f0:6d:e2:8f:87:c2:3d:62:51:69:3c:f5:9a:
1c:a8:17:74:40:e6:a0:a5:cd:9e:86:3c:7b:e9:83:
21:7a:43:8f:f8:48:ed:75:a3:df:d1:65:7e:f1:77:
be:21:5c:4c:24:24:79:dd:a3:f0:b3:23:96:06:cc:
02:fd:c6:37:29:c0:03:5c:11:84:dd:1c:3e:61:17:
7e:b2:56:6a:a5:bb:c7:a0:c2:af:da:11:cb:b3:26:
da:4f:cb:ff:2a:a1:08:fb:a5:e8:fb:2b:4a:5d:b1:
ae:5f:e3:d6:6e:9b:4c:51:ba:e5:2d:30:ec:31:ab:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:38:61:96:DD:4F:50:37:C4:AD:D6:91:8F:84:76:94:D5:37:E6
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/1eI4YZbdT1A3xK3WkY-EdpTVN-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.168.0/21
37.252.200.0/21
185.15.32.0/22
IPv6:
2a03:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:5e:be:b5:ed:c1:9a:b6:e4:cd:5c:22:68:19:cc:bc:79:bd:
4a:61:08:46:30:62:2b:4a:07:df:79:7b:7f:7a:ea:a8:56:1d:
8f:a4:a3:08:fb:68:65:48:c1:b8:74:09:74:32:fc:95:1c:c0:
39:cb:f0:86:1d:e7:e7:88:27:54:58:f4:5c:97:7a:6a:47:1b:
5c:0f:5e:96:22:a2:65:cf:a7:ae:67:e9:87:dd:b5:8d:dc:64:
ae:b3:69:ae:2f:fc:bf:93:68:b3:6a:4b:89:9d:4a:67:67:bd:
c0:d2:98:25:09:36:a3:75:f5:ad:14:cd:4a:e8:ae:44:8f:5c:
54:b0:24:a1:59:ac:ea:bf:cd:bc:2c:d1:ee:c1:4b:f1:2b:cb:
75:e4:a2:60:f5:7f:19:2f:e9:f2:53:20:a7:e8:c5:a4:5f:b3:
79:e0:b6:01:b1:46:f1:c4:e8:c8:48:33:4e:58:ea:32:5a:dc:
45:e9:15:fa:23:b0:e1:50:63:a2:8d:fb:34:8b:41:85:cf:c2:
08:fb:05:eb:1b:65:b3:10:5d:44:31:25:a8:ff:f1:62:df:0f:
d4:9a:40:80:c8:3e:6b:40:f9:64:43:c8:2a:a5:6a:79:84:dc:
66:1e:7f:1a:8c:29:cf:f9:05:8a:8c:e9:03:24:74:0e:9e:5e:
5a:9a:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:58 2024 by rpki-client on console-fra.rpki-client.org