Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/iZPR2U6ImFEmjYjShRpLdnGZup0.roa
File: iZPR2U6ImFEmjYjShRpLdnGZup0.roa (raw, json)
Hash identifier: EPuge/E0bX1xfRx571S9exXuDwc53EIG/WFj4lHMh2A=
Subject key identifier: 89:93:D1:D9:4E:88:98:51:26:8D:88:D2:85:1A:4B:76:71:99:BA:9D
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 0F171CE0
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/iZPR2U6ImFEmjYjShRpLdnGZup0.roa
Signing time: Sat 01 Jan 2022 12:05:48 +0000
ROA not before: Sat 01 Jan 2022 12:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57633
IP address blocks: 195.49.132.0/22 maxlen: 22
185.79.220.0/22 maxlen: 22
77.240.192.0/20 maxlen: 20
37.25.72.0/21 maxlen: 21
46.182.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253172960 (0xf171ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 1 12:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8993d1d94e889851268d88d2851a4b767199ba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:5e:50:39:99:0f:9f:39:6d:90:c6:29:61:
e5:1f:22:9e:07:c3:e0:bb:c5:5d:56:3b:5f:80:15:
2a:72:73:46:bf:c6:24:7e:3c:b9:c8:da:d8:39:bd:
90:66:05:8f:61:8f:9a:31:1f:54:84:7f:ea:78:06:
00:6e:77:d0:30:44:b0:cb:c3:19:0c:97:2a:c3:d1:
e8:f6:9d:3a:57:e2:97:57:91:6d:bd:4a:dc:e3:7b:
e7:c5:f2:79:c2:5e:fc:2b:ac:25:4c:ad:74:92:12:
59:66:ea:e6:f9:47:1c:f5:15:24:7b:aa:e1:44:7e:
ed:9d:71:4d:50:1e:36:a9:cd:da:89:a8:73:7e:1e:
ac:b4:ee:c6:fd:75:71:8d:b1:6f:ee:f4:99:da:3a:
d3:b8:45:3c:b6:f8:41:67:18:e3:10:45:0e:d3:f7:
a6:27:da:32:3b:82:c7:70:10:3f:cc:e9:1c:e9:b3:
37:c4:b1:2c:30:50:38:ad:80:1a:45:27:c6:d3:73:
95:61:03:bf:7e:9f:03:29:81:b0:9f:ba:17:19:e7:
54:54:29:a1:ad:a4:5b:23:e4:4d:ee:d6:8a:b6:a7:
4b:4c:a2:1a:f0:e6:c0:c6:c4:4b:14:38:63:d6:17:
f4:a8:23:f5:5f:8d:c0:40:7a:c2:3b:48:59:a0:ac:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:93:D1:D9:4E:88:98:51:26:8D:88:D2:85:1A:4B:76:71:99:BA:9D
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/iZPR2U6ImFEmjYjShRpLdnGZup0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.72.0/21
46.182.208.0/21
77.240.192.0/20
185.79.220.0/22
195.49.132.0/22
Signature Algorithm: sha256WithRSAEncryption
31:57:6e:c5:f2:99:d7:c6:7f:4f:75:4d:ae:64:c3:40:c2:c0:
37:14:59:fc:fb:63:45:4a:5a:45:39:de:45:33:40:25:e7:56:
50:79:6a:34:96:dc:6d:7b:a6:24:34:2c:d7:9d:2d:b7:df:a7:
43:97:99:0f:42:96:c8:0a:e1:f0:86:c2:d4:80:48:b6:75:31:
7f:b3:55:95:24:4f:39:41:7d:2b:93:3a:05:14:79:4e:2d:48:
8b:43:ee:ab:7d:50:6c:85:0b:65:eb:5d:df:af:99:77:cb:8c:
af:94:d0:c7:6b:b3:5e:2b:8f:38:71:9b:14:3c:25:b1:03:c0:
36:de:6c:e6:e8:de:58:04:cc:d6:11:cd:ce:e4:53:a9:82:e7:
8d:e2:d8:93:47:b0:b9:7b:ab:f5:05:26:14:e5:ff:e8:ec:e6:
36:69:fe:03:29:f1:dd:c6:14:7c:f1:35:59:29:e9:0f:74:05:
3f:a0:c5:8c:dc:79:61:d2:43:53:89:d1:a1:84:d1:c7:e0:97:
42:fb:2b:4d:92:7b:b7:e1:fc:4f:a3:75:85:a1:eb:42:9d:0d:
68:58:5f:79:c1:2e:79:35:73:34:6a:da:e0:8a:06:06:9a:b7:
a6:10:4f:66:95:a9:74:2a:a7:91:39:ff:e9:f1:ac:c4:bd:9f:
3d:94:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:46 2023 by rpki-client on console-ams.rpki-client.org