Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/79G43N4QAnN98VwGDvSavK8bqXE.roa
File: 79G43N4QAnN98VwGDvSavK8bqXE.roa (raw, json)
Hash identifier: 2+XZBBvLZSlYt9BFoRkXkekcEOEXWpPReWLbmIkoJxg=
Subject key identifier: EF:D1:B8:DC:DE:10:02:73:7D:F1:5C:06:0E:F4:9A:BC:AF:1B:A9:71
Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial: 0EAF54C4
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/79G43N4QAnN98VwGDvSavK8bqXE.roa
Signing time: Sat 01 Jan 2022 14:00:48 +0000
ROA not before: Sat 01 Jan 2022 14:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12843
IP address blocks: 37.16.64.0/21 maxlen: 21
109.109.200.0/21 maxlen: 21
46.167.16.0/21 maxlen: 21
88.214.60.0/22 maxlen: 22
213.144.0.0/19 maxlen: 19
93.189.152.0/21 maxlen: 21
109.109.201.200/30 maxlen: 30
185.106.0.0/21 maxlen: 21
185.9.176.0/22 maxlen: 22
37.228.160.0/20 maxlen: 20
46.232.224.0/21 maxlen: 21
85.115.0.0/19 maxlen: 19
81.26.160.0/20 maxlen: 20
2a02:788:1::18/128 maxlen: 128
2a02:788::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246371524 (0xeaf54c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Validity
Not Before: Jan 1 14:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efd1b8dcde1002737df15c060ef49abcaf1ba971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:c3:bd:58:00:1f:10:14:83:4f:3d:c9:c8:
61:0a:d8:0b:67:2a:ad:8b:7c:3b:41:19:dc:18:a7:
fe:47:f5:e7:3a:ac:3d:58:97:48:64:47:94:be:4e:
bf:11:9e:77:13:3f:8f:c6:e9:59:2a:f4:15:b7:75:
38:20:8a:5e:3c:32:67:63:7c:e3:08:38:4d:bb:d1:
fc:a2:bc:1d:4d:f9:18:de:95:6b:c7:20:08:50:ec:
58:0b:5f:e5:26:d6:0c:4d:fa:3f:97:46:d8:e5:ec:
61:4e:15:fd:38:70:00:be:67:19:ab:f6:cc:16:9e:
56:08:c4:7c:63:1d:64:8e:09:95:42:ec:fd:29:0a:
bc:6d:68:b1:1d:9b:aa:3d:df:17:63:4e:c8:ab:03:
c1:29:6c:37:e0:13:57:22:f2:24:0c:fd:4e:b8:37:
e7:0d:19:ed:6f:c7:a1:fb:b3:df:3d:ca:d2:c7:f7:
72:3b:ad:2b:56:09:58:21:0b:8a:41:36:b2:db:7f:
48:9e:ed:6e:1f:13:97:1c:b6:53:f1:7b:4e:51:13:
77:81:8b:f2:08:ca:d3:80:6e:b4:5d:21:83:ec:be:
50:a2:80:e6:fc:8b:e0:4d:4b:98:b9:8c:a5:54:bc:
be:c2:6d:d1:1a:49:68:a4:bc:aa:6c:18:e8:5f:6e:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:B8:DC:DE:10:02:73:7D:F1:5C:06:0E:F4:9A:BC:AF:1B:A9:71
X509v3 Authority Key Identifier:
keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/79G43N4QAnN98VwGDvSavK8bqXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.64.0/21
37.228.160.0/20
46.167.16.0/21
46.232.224.0/21
81.26.160.0/20
85.115.0.0/19
88.214.60.0/22
93.189.152.0/21
109.109.200.0/21
185.9.176.0/22
185.106.0.0/21
213.144.0.0/19
IPv6:
2a02:788::/29
Signature Algorithm: sha256WithRSAEncryption
8f:d6:c1:d8:61:31:77:c5:81:26:be:53:80:eb:65:7c:62:76:
e2:69:c3:e1:f9:be:84:2b:01:8f:ba:3d:b6:55:1e:7c:47:a7:
66:50:25:75:92:ce:96:35:df:c0:f5:52:75:87:50:ca:1a:1a:
60:5d:33:9a:65:d5:50:24:be:10:33:5b:ce:58:a3:2f:c4:61:
bc:a6:15:46:6e:7c:a1:11:18:8a:ae:c8:cb:b6:ad:50:66:74:
cf:f8:68:5b:d0:e2:ae:52:be:16:47:da:59:36:c5:13:66:5c:
3f:5b:05:a9:19:bc:1b:55:af:d5:ec:83:ca:34:aa:47:56:09:
88:7e:cb:91:fa:81:f0:7a:c6:70:9b:0a:4b:65:48:8d:31:cc:
f9:68:f1:9c:00:23:c8:65:16:a9:8a:4e:0d:09:6f:a5:37:e7:
9c:cd:6b:bd:5a:92:d9:80:4f:24:1c:12:d1:0c:00:a5:9f:4b:
92:9c:88:a3:7d:00:50:13:29:41:28:d2:e8:4a:ee:23:ae:07:
36:fd:5e:63:ea:02:ad:f4:86:b4:e7:c7:fe:d7:c5:99:97:3c:
c3:c4:31:61:df:78:94:22:f9:e6:d0:8e:18:f9:28:36:d0:2c:
1a:36:66:73:96:98:86:71:37:f9:ca:41:36:35:dc:2b:ec:d2:
b0:38:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:30 2024 by rpki-client on console-ams.rpki-client.org