Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/Czf0X2EsptyoWITthJXDkC5El4w.roa
File: Czf0X2EsptyoWITthJXDkC5El4w.roa (raw, json)
Hash identifier: RMLWBtil88LU4ermjkMiGLmveFCOK46wRGDfjnCBPUg=
Subject key identifier: 0B:37:F4:5F:61:2C:A6:DC:A8:58:84:ED:84:95:C3:90:2E:44:97:8C
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 09413299
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/Czf0X2EsptyoWITthJXDkC5El4w.roa
Signing time: Sat 01 Jan 2022 16:02:39 +0000
ROA not before: Sat 01 Jan 2022 16:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 157.167.134.0/24 maxlen: 24
157.167.135.0/24 maxlen: 24
157.167.136.0/21 maxlen: 21
157.167.144.0/21 maxlen: 21
157.167.152.0/24 maxlen: 24
157.167.155.0/24 maxlen: 24
157.167.156.0/24 maxlen: 24
157.167.153.0/24 maxlen: 24
157.167.184.0/21 maxlen: 21
85.115.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155267737 (0x9413299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Jan 1 16:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b37f45f612ca6dca85884ed8495c3902e44978c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:5f:ae:bd:1a:a2:f5:e4:f2:60:b8:af:95:
07:a9:36:2c:90:76:0e:4c:9b:0a:e5:65:8b:66:f9:
58:26:24:7d:58:d1:28:d8:b6:5a:c7:3b:72:05:1a:
4f:39:fe:53:3e:e3:24:65:4f:0b:2b:a1:ec:e7:52:
c3:2a:f7:37:3f:69:9e:6a:4d:4c:88:e3:de:b0:15:
71:57:7a:86:8c:40:c5:18:2f:79:3d:78:b4:3c:a2:
70:4d:3f:35:08:62:87:78:fa:18:a1:2e:33:2f:5f:
ef:66:6e:f7:83:b1:d5:7e:ce:64:60:b5:63:62:4a:
cb:ea:b1:c0:cb:ea:c1:2c:85:19:0f:95:b5:7b:57:
5e:56:fa:06:fb:69:5c:18:67:f6:71:98:b8:99:aa:
6f:9d:b5:13:4e:c9:55:83:67:de:78:80:7d:d6:09:
5c:95:7c:38:5a:9e:14:3e:fb:34:7b:5e:6c:b4:a7:
44:47:99:70:a6:db:d3:5f:a2:00:e8:9e:47:37:d6:
ac:99:06:45:3b:5a:c9:68:a6:b3:7c:86:a2:50:ee:
a1:6c:0b:65:43:4e:14:52:a8:d7:eb:3d:ca:eb:79:
c0:22:0b:a8:38:e2:2a:a5:9e:73:d5:f7:04:25:e2:
86:60:b7:17:cf:c6:89:ac:f0:fe:61:16:3f:2d:95:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:37:F4:5F:61:2C:A6:DC:A8:58:84:ED:84:95:C3:90:2E:44:97:8C
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/Czf0X2EsptyoWITthJXDkC5El4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.38.0/24
157.167.134.0-157.167.153.255
157.167.155.0-157.167.156.255
157.167.184.0/21
Signature Algorithm: sha256WithRSAEncryption
80:7b:39:72:47:73:d4:cd:c2:b5:d4:f6:8a:f7:fd:c8:a8:fa:
75:63:26:d7:8f:40:f5:38:74:aa:55:7a:37:0c:18:e9:96:4d:
7d:c6:58:9e:8e:34:3a:bc:6a:ef:73:82:25:4a:9a:5f:41:44:
93:ea:8d:b8:42:53:49:3f:6b:4e:14:a6:af:ca:5a:67:ad:bb:
8b:b9:93:58:96:c8:40:ec:0d:fe:bc:38:ac:61:51:bb:d3:13:
94:b7:a7:5c:25:0d:11:91:31:3b:dd:d3:3a:b0:35:2f:62:d3:
b8:1b:c8:f3:51:0f:e2:0d:b9:d9:4c:d9:46:fc:47:67:49:ab:
e1:69:b5:90:eb:2f:99:ee:19:b3:5b:0b:4b:85:c6:f5:14:4d:
9c:4b:9a:cc:8c:a5:06:ca:0d:58:88:c2:75:44:5d:40:21:33:
02:96:69:cb:28:86:47:aa:20:c3:7a:da:35:29:0d:59:e8:92:
d1:48:8f:f8:b4:be:08:eb:39:79:c1:86:58:0b:da:e3:b2:70:
45:e8:29:10:10:f7:30:b2:3a:0d:65:1f:01:1d:99:eb:20:fa:
2e:fc:97:df:0f:c0:08:de:96:8c:35:fd:db:77:3e:bf:0e:d1:
c3:7a:6b:c1:af:fe:6e:84:8f:bc:f4:5b:18:21:bb:18:35:0c:
1f:75:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:27 2024 by rpki-client on console-ams.rpki-client.org