Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/JrbCu4i6H9z9kJ0Mp5UPCNCAa4I.roa
File: JrbCu4i6H9z9kJ0Mp5UPCNCAa4I.roa (raw, json)
Hash identifier: MmJqLyaWrnA+EoXxrmAMIR1er9mvRnTrtrSZRcCBsmg=
Subject key identifier: 26:B6:C2:BB:88:BA:1F:DC:FD:90:9D:0C:A7:95:0F:08:D0:80:6B:82
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 0181D2B99CE83F02AD62F90ECB93C2E610A1
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/JrbCu4i6H9z9kJ0Mp5UPCNCAa4I.roa
Signing time: Wed 06 Jul 2022 08:56:28 +0000
ROA not before: Wed 06 Jul 2022 08:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42525
IP address blocks: 217.63.96.0/19 maxlen: 19
94.101.208.0/20 maxlen: 20
37.205.120.0/21 maxlen: 21
81.27.208.0/20 maxlen: 20
185.17.192.0/22 maxlen: 22
194.182.0.0/18 maxlen: 18
212.98.64.0/18 maxlen: 18
77.243.32.0/20 maxlen: 20
2a01:7e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:b9:9c:e8:3f:02:ad:62:f9:0e:cb:93:c2:e6:10:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jul 6 08:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26b6c2bb88ba1fdcfd909d0ca7950f08d0806b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:fb:05:40:f2:1c:a6:a9:36:eb:fe:62:3a:
f7:44:c3:3e:c1:c8:9c:6b:2f:96:e6:58:3b:ec:fc:
73:b9:67:57:16:fc:26:1e:16:79:e3:61:df:24:ad:
c7:2e:6e:99:61:2b:db:1f:86:a7:be:6c:1f:4a:b9:
bd:e5:8f:1b:1f:9d:da:68:9c:68:7e:53:8d:a9:20:
f6:bb:dc:89:44:c1:52:0e:02:98:08:74:5a:0a:f3:
df:1d:0c:5b:3d:18:65:ce:a7:62:30:dd:ea:a5:93:
eb:25:50:ab:6d:1b:d1:14:32:70:ed:cd:d3:5c:fe:
c2:b5:a3:59:fb:66:5f:50:3f:63:47:96:ad:d4:1c:
ac:0a:97:3c:cd:89:c8:e2:a8:c8:ed:ee:e7:e6:19:
f7:d6:e4:a1:c6:58:d6:7a:4c:db:10:18:4c:1a:62:
7d:7d:b8:99:f5:79:68:cf:3a:cd:00:c5:86:5b:e1:
51:ea:a9:4c:69:66:4c:4c:87:e3:d8:c3:90:67:a3:
ee:66:76:2f:9a:aa:b1:41:db:15:25:d3:0b:46:5f:
e3:95:45:be:81:52:af:13:bc:e0:d5:5e:06:df:31:
12:4a:81:11:e8:31:39:2a:93:fa:66:6e:a5:ed:7a:
d6:02:a6:09:6a:11:e7:48:ef:51:21:54:0a:f7:92:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B6:C2:BB:88:BA:1F:DC:FD:90:9D:0C:A7:95:0F:08:D0:80:6B:82
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/JrbCu4i6H9z9kJ0Mp5UPCNCAa4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.120.0/21
77.243.32.0/20
81.27.208.0/20
94.101.208.0/20
185.17.192.0/22
194.182.0.0/18
212.98.64.0/18
217.63.96.0/19
IPv6:
2a01:7e8::/32
Signature Algorithm: sha256WithRSAEncryption
96:df:bd:f3:dd:0b:c3:5c:90:09:cf:01:36:7d:12:45:07:e0:
f4:96:44:fb:17:55:b0:f9:e4:f0:ac:60:9a:30:bb:0e:c6:71:
d2:49:72:ae:39:3d:fa:30:f8:1c:fd:cd:ce:18:e6:26:cc:d8:
95:37:62:81:91:d5:7b:28:b9:ec:8a:f6:f8:cb:b0:50:86:45:
ce:ea:0d:19:8d:28:01:19:98:06:7a:7d:1e:12:50:a1:7c:c3:
dd:1b:a4:3f:30:c4:d0:ca:d9:4f:6c:5f:5f:94:d7:a0:b4:d8:
cd:15:90:2d:a1:c6:c8:2a:86:fc:81:fd:2c:b4:fb:2b:c1:0d:
f3:50:ce:b6:78:9e:b1:78:49:5e:f5:79:a2:bd:62:7b:7f:d1:
ae:b7:d9:98:76:53:71:a6:a2:21:32:47:8e:42:34:72:30:cc:
9c:d1:3c:13:48:8e:bb:e2:10:1c:e5:97:2c:a1:93:8e:3f:68:
ad:82:ed:a4:9b:2a:f4:b1:c5:1e:80:cc:4b:72:97:c0:a5:a7:
06:eb:74:c9:18:aa:16:14:87:6f:55:e0:77:de:e6:96:40:f4:
f9:19:ad:31:fd:0d:81:25:68:32:82:e9:eb:f9:77:82:6c:d9:
2d:3c:1d:91:45:67:0e:0a:ef:0d:19:22:8c:5b:11:86:36:97:
bc:1b:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org