Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/fnNtbJA0wRcJpRkAfTarwkqna3M.roa
File: fnNtbJA0wRcJpRkAfTarwkqna3M.roa (raw, json)
Hash identifier: Hi9iVvMUZbzS3A7pp8eIDOYOMHelsu653x6FndvshZg=
Subject key identifier: 7E:73:6D:6C:90:34:C1:17:09:A5:19:00:7D:36:AB:C2:4A:A7:6B:73
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 0A3F2CBA
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/fnNtbJA0wRcJpRkAfTarwkqna3M.roa
Signing time: Wed 20 Apr 2022 14:42:37 +0000
ROA not before: Wed 20 Apr 2022 14:42:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 157.167.231.0/24 maxlen: 24
157.167.134.0/24 maxlen: 24
157.167.136.0/21 maxlen: 21
157.167.135.0/24 maxlen: 24
157.167.144.0/21 maxlen: 21
157.167.152.0/24 maxlen: 24
157.167.155.0/24 maxlen: 24
157.167.156.0/24 maxlen: 24
157.167.153.0/24 maxlen: 24
157.167.184.0/21 maxlen: 21
85.115.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171912378 (0xa3f2cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Apr 20 14:42:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e736d6c9034c11709a519007d36abc24aa76b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:92:7e:d3:65:34:d1:7f:f0:1f:2f:f3:5f:
15:46:f3:7d:f9:9d:0d:99:34:e5:aa:d5:24:f9:37:
30:84:dc:2c:88:72:df:55:02:91:be:38:d7:ad:5b:
42:7b:75:9c:c1:5c:3b:25:c7:fb:7c:e8:e1:70:18:
25:8d:81:e8:56:43:aa:fb:a6:8b:88:02:f9:70:8b:
8e:b2:01:a2:53:62:4c:5e:a9:f9:f5:7c:df:94:27:
13:12:8c:f9:0c:ed:5d:04:f0:7b:77:5b:1a:da:8f:
5b:0a:1c:05:c1:cc:96:bf:d1:f1:dc:88:7f:3b:9b:
a1:2b:f5:b8:6f:67:12:9d:b0:7e:9b:13:52:ce:8a:
1f:51:53:d2:64:d2:7f:fb:63:d7:24:49:bd:d8:41:
a0:53:d0:fa:9a:c2:c0:c1:92:02:1b:d1:75:ed:93:
a9:c3:32:17:0b:20:00:0f:4a:1d:5b:d6:53:15:25:
2c:3d:54:a5:23:9f:fc:d5:10:6b:a2:37:3d:93:d4:
2b:00:3b:40:24:dc:56:ed:bf:6b:41:b6:11:d1:76:
65:72:28:b7:9a:22:97:8f:82:a3:b0:a8:46:6f:3a:
28:5e:9a:db:23:e8:89:dd:d1:b3:19:d6:5b:ef:59:
82:69:35:cb:58:e1:53:5b:0c:4b:b6:38:82:3a:17:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:6D:6C:90:34:C1:17:09:A5:19:00:7D:36:AB:C2:4A:A7:6B:73
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/fnNtbJA0wRcJpRkAfTarwkqna3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.38.0/24
157.167.134.0-157.167.153.255
157.167.155.0-157.167.156.255
157.167.184.0/21
157.167.231.0/24
Signature Algorithm: sha256WithRSAEncryption
61:02:29:a4:52:60:61:aa:ac:26:3d:f6:28:4d:58:c8:ad:ba:
29:1f:c9:8b:34:c6:6b:77:39:c3:7c:04:e5:66:d4:22:d0:47:
9e:fa:02:70:f9:55:84:7b:3c:7c:8a:fe:81:e0:a5:0d:f7:ad:
f8:1f:8f:79:90:60:f1:40:c7:5b:3c:4c:c5:53:fe:d6:72:3a:
f3:8d:1b:7b:b0:ae:86:f1:aa:8c:e2:95:89:16:34:76:fa:18:
c6:9f:f6:5c:4a:6a:b7:8a:91:26:c5:81:be:e0:67:2f:f1:99:
87:f4:5c:6d:47:ed:5c:83:43:3f:f2:86:39:90:fc:10:57:b6:
7d:ee:53:7d:34:e9:2d:1e:99:7e:0d:c1:90:09:20:e2:86:cd:
7d:97:1f:f1:45:a9:c0:ad:5a:8c:8d:b7:64:bd:d6:2c:75:eb:
f1:70:cd:e2:13:b6:88:06:43:0d:a0:b1:ef:8c:dc:ee:9e:00:
56:6c:f3:f3:8e:c8:84:bf:f3:ce:85:90:a8:e6:f5:fe:0b:9d:
f1:af:0b:b4:2d:e0:6c:86:a3:f8:30:34:94:39:5d:db:68:ae:
f0:69:6a:4e:fd:f0:83:06:33:f9:0c:34:4a:4d:28:ee:75:c7:
f2:43:fe:aa:3f:eb:02:11:2a:c7:50:a8:f5:e6:30:8a:2a:70:
13:ea:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org