Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LX42lHkzD1iig7oCAdDm2XEKIio.roa
File: LX42lHkzD1iig7oCAdDm2XEKIio.roa (raw, json)
Hash identifier: GEKna/RLTxjrySfGoriuD7Wl5fLQmC4QnCm1KYvB1aU=
Subject key identifier: 2D:7E:36:94:79:33:0F:58:A2:83:BA:02:01:D0:E6:D9:71:0A:22:2A
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 37F02F5B
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LX42lHkzD1iig7oCAdDm2XEKIio.roa
Signing time: Sat 01 Jan 2022 06:01:02 +0000
ROA not before: Sat 01 Jan 2022 06:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201476
IP address blocks: 217.75.216.0/23 maxlen: 32
217.75.214.0/23 maxlen: 32
185.167.184.0/22 maxlen: 32
185.73.104.0/22 maxlen: 32
185.73.100.0/22 maxlen: 32
185.73.108.0/22 maxlen: 32
2a03:4260::/32 maxlen: 48
2a03:4260::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938487643 (0x37f02f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 06:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d7e369479330f58a283ba0201d0e6d9710a222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:cc:82:74:e4:7b:e1:db:b5:a0:44:2a:ab:
69:e6:f6:cf:ee:c9:2e:e5:40:12:50:16:1b:a4:cb:
ca:10:6f:0b:8f:97:76:71:2b:5d:bf:86:78:6a:76:
38:64:e4:7f:ff:c1:6d:65:43:87:64:01:72:52:1f:
41:59:eb:c0:d2:4e:2b:dd:66:bc:dc:82:64:dc:18:
85:b4:ba:a0:87:c8:2e:04:eb:23:f6:45:c4:f8:5f:
55:72:b0:42:92:81:f6:3c:15:06:47:5b:10:40:5e:
eb:01:79:d2:2f:35:29:89:f1:05:c6:bc:72:c9:8a:
22:dc:13:22:04:17:08:e5:b0:21:3b:aa:2a:1a:e3:
2a:49:b8:e7:6e:29:e4:48:ab:d2:45:da:14:21:2d:
d8:ba:bd:f3:62:19:c5:6a:49:7b:0d:9e:4c:97:5b:
66:fc:f1:4b:e9:1a:33:e9:80:ab:fc:25:7f:a4:fc:
9a:f4:12:6f:6b:ad:85:41:fd:f8:6f:f7:66:fe:6b:
6d:b0:4f:d8:6d:02:36:72:02:3c:6d:01:e4:62:ea:
25:72:26:7b:48:1c:f4:f2:b8:78:cf:94:75:17:17:
95:d9:b8:3a:ee:39:0b:68:3e:c9:75:b2:b2:9e:17:
21:23:9b:00:fa:2b:45:9a:ca:0e:11:b3:cb:51:a9:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:36:94:79:33:0F:58:A2:83:BA:02:01:D0:E6:D9:71:0A:22:2A
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LX42lHkzD1iig7oCAdDm2XEKIio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.100.0-185.73.111.255
185.167.184.0/22
217.75.214.0-217.75.217.255
IPv6:
2a03:4260::/29
Signature Algorithm: sha256WithRSAEncryption
7a:e8:d0:61:8d:15:b1:0c:75:ce:09:c5:7c:0c:4f:fb:53:3e:
a8:2b:b1:f5:dd:ce:66:a2:8f:c1:f4:d9:0d:b3:b2:e2:a4:2b:
f4:c0:2b:a6:98:21:45:6c:fa:fd:9f:be:ea:cb:1d:71:97:ac:
0d:25:25:e1:1d:2e:87:69:97:c8:99:6b:03:20:83:2d:37:f1:
f1:b8:44:f8:93:1d:48:8f:7e:46:4d:15:be:db:60:8c:1f:b1:
48:7b:3c:c3:1e:a0:f9:87:fb:21:6f:16:a0:66:7d:fa:62:9e:
da:66:c3:96:40:29:12:b6:b9:2e:d9:f0:0c:6c:bf:bf:31:ce:
37:bf:c9:82:5b:01:1a:e2:a9:bc:4f:57:10:92:85:e5:31:1f:
58:2e:48:cd:a4:78:ab:25:99:95:d5:c4:82:05:1e:11:1c:3a:
5a:71:e1:59:03:20:88:8c:d5:93:1c:d5:7c:b5:f3:bf:71:ab:
23:e1:37:27:04:88:3e:02:07:5b:2a:10:12:6c:16:a3:2a:9c:
d0:b5:d9:c9:db:21:f4:a5:60:9e:37:92:2f:20:62:d2:d5:d6:
81:a7:62:9a:e2:a5:46:b5:ac:27:dc:f6:e7:8b:f8:f8:57:4c:
d2:79:88:d0:44:78:87:75:c7:53:3e:a4:ca:2d:65:cd:09:6c:
dc:3b:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:32 2024 by rpki-client on console-fra.rpki-client.org