Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/jtXD5urhDfpgiUVHujQJw9xabWI.roa
File: jtXD5urhDfpgiUVHujQJw9xabWI.roa (raw, json)
Hash identifier: z7XP51yGj5tW+lO9+KsIZ4Ds4gABDgIwaft1aOdShzc=
Subject key identifier: 8E:D5:C3:E6:EA:E1:0D:FA:60:89:45:47:BA:34:09:C3:DC:5A:6D:62
Certificate issuer: /CN=cfa2b0160ba0d3407cdd0ed6e319f2f436af7f0e
Certificate serial: 11CDD3EA
Authority key identifier: CF:A2:B0:16:0B:A0:D3:40:7C:DD:0E:D6:E3:19:F2:F4:36:AF:7F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6KwFgug00B83Q7W4xny9Davfw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/jtXD5urhDfpgiUVHujQJw9xabWI.roa
Signing time: Sat 01 Jan 2022 14:08:41 +0000
ROA not before: Sat 01 Jan 2022 14:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42560
IP address blocks: 188.127.96.0/19 maxlen: 19
77.238.192.0/19 maxlen: 19
37.205.24.0/21 maxlen: 21
185.13.240.0/22 maxlen: 22
217.197.136.0/21 maxlen: 21
80.80.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298701802 (0x11cdd3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa2b0160ba0d3407cdd0ed6e319f2f436af7f0e
Validity
Not Before: Jan 1 14:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ed5c3e6eae10dfa60894547ba3409c3dc5a6d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:18:d2:0d:5b:da:c4:34:29:d1:01:34:4c:
4f:2a:22:20:f5:b6:68:8d:07:9f:a4:9e:46:d9:e5:
3a:15:e0:01:55:27:8c:90:ec:96:10:e0:6b:60:45:
c3:15:2d:9a:b8:6a:bd:db:68:10:75:fb:b7:f0:72:
40:5f:2c:6c:c9:ca:ab:c3:09:3d:d0:3d:0c:d7:fd:
04:61:b9:8d:b6:c8:e9:f9:fe:78:92:7f:18:fb:21:
de:c0:da:eb:70:4a:4b:0e:05:b2:10:42:a7:62:b4:
72:fa:56:f4:e8:31:92:e7:fc:de:30:16:42:70:c4:
b2:c7:84:d7:70:53:4b:5d:54:09:b8:68:39:5b:c2:
cb:f0:7e:c1:70:ff:31:ca:91:09:2f:ad:b5:34:e8:
d6:f3:45:ea:82:2a:d2:37:2c:dd:92:9f:ff:7e:67:
d0:62:78:0f:dc:96:dc:32:e6:41:60:ed:d9:18:a8:
bd:6f:b7:24:4f:20:1c:eb:7c:42:39:19:33:77:44:
a2:eb:d1:37:84:73:e5:30:dc:1a:74:8c:b7:eb:d5:
88:f3:9b:f5:67:a0:90:19:a1:c1:a2:4d:ce:9a:15:
4d:09:fa:b0:ed:29:3b:3f:ed:c2:b6:b1:0e:73:58:
5f:9a:85:8e:32:f0:27:ac:27:fd:62:5e:53:67:69:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:C3:E6:EA:E1:0D:FA:60:89:45:47:BA:34:09:C3:DC:5A:6D:62
X509v3 Authority Key Identifier:
keyid:CF:A2:B0:16:0B:A0:D3:40:7C:DD:0E:D6:E3:19:F2:F4:36:AF:7F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6KwFgug00B83Q7W4xny9Davfw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/jtXD5urhDfpgiUVHujQJw9xabWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/192711-fe5e-4a9d-8227-834021adede5/1/z6KwFgug00B83Q7W4xny9Davfw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.24.0/21
77.238.192.0/19
80.80.32.0/20
185.13.240.0/22
188.127.96.0/19
217.197.136.0/21
Signature Algorithm: sha256WithRSAEncryption
36:81:8d:da:f4:aa:a2:bd:12:eb:1f:25:48:7e:92:c8:f6:99:
d9:49:ee:89:ba:32:2b:80:19:97:68:fa:7f:16:f6:83:61:a9:
0a:49:a6:c1:e7:e6:b6:f7:49:b3:99:7d:c3:f1:f2:b7:95:68:
68:55:73:5e:e6:66:47:55:8c:4c:8f:c3:07:58:b8:dc:fb:67:
11:20:a8:69:55:57:46:d5:a0:66:4c:79:26:05:ae:1d:f9:ce:
a0:e8:6e:c2:49:20:d0:48:4d:48:a8:f7:51:92:7e:b0:cd:92:
b0:9e:56:ff:5b:3c:80:b2:f6:28:6c:88:62:e3:79:46:ab:74:
ec:ad:f7:7f:45:74:df:c0:9e:74:9c:7d:16:ab:fe:1a:c4:ef:
02:7d:a4:4f:f7:43:19:9f:b8:20:0d:51:cf:73:0b:32:66:ec:
1d:0a:20:78:19:58:d1:43:a8:6b:54:8d:e4:ee:af:d5:db:d5:
26:4f:69:b6:be:a8:10:bd:4d:13:81:bd:da:54:d7:35:da:5e:
b9:8e:9f:9c:e8:5a:c1:ae:05:d7:8b:86:a4:f5:0a:7a:11:d3:
1d:47:d8:41:db:4c:26:28:1f:6a:41:d4:83:4d:bd:dc:a5:de:
1f:b5:39:f1:9f:b4:de:d3:ce:ab:5c:f5:84:d0:2a:1a:14:e9:
d1:44:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:04 2024 by rpki-client on console-fra.rpki-client.org