Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M5cUv0EwoVThYCL9MKnVLmwNdJo.roa
File: M5cUv0EwoVThYCL9MKnVLmwNdJo.roa (raw, json)
Hash identifier: zWR3PAlS1hUHjPuYOLd2GsNzsqZvlBQS4FS1vyg1ULg=
Subject key identifier: 33:97:14:BF:41:30:A1:54:E1:60:22:FD:30:A9:D5:2E:6C:0D:74:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01852F39A9E9A2E4BC671233F52836CF55CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M5cUv0EwoVThYCL9MKnVLmwNdJo.roa
Signing time: Tue 20 Dec 2022 11:09:46 +0000
ROA not before: Tue 20 Dec 2022 11:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 94.156.11.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
37.221.123.0/24 maxlen: 24
37.221.121.0/24 maxlen: 24
37.221.122.0/24 maxlen: 24
37.221.120.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:39:a9:e9:a2:e4:bc:67:12:33:f5:28:36:cf:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 20 11:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=339714bf4130a154e16022fd30a9d52e6c0d749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:3d:99:e9:0d:1b:20:e1:9f:34:c9:c3:02:
c0:4e:fb:d1:c8:9c:8e:65:1d:5a:21:10:72:14:eb:
d0:ee:05:69:be:1a:f4:03:08:c3:63:6a:a9:ab:a0:
ce:fd:62:62:d4:3e:5f:e4:40:04:24:92:97:75:e7:
78:8a:23:7f:61:af:49:84:0b:36:82:25:67:7c:55:
07:0d:4d:9f:f1:ce:77:15:49:51:30:4f:96:13:07:
70:6d:26:50:fd:7d:95:20:39:62:44:36:58:f5:f6:
5c:0f:8e:e2:d4:29:9c:87:6b:ed:30:b8:1d:d0:fc:
59:2c:75:32:05:6d:7c:10:19:a6:14:d6:c4:cf:23:
c7:5a:4a:40:21:49:a4:3e:74:4f:18:cd:af:ed:03:
90:91:1b:24:77:d2:e5:97:20:85:70:40:d2:01:81:
81:b7:4a:22:17:27:a2:4f:9d:2e:34:db:9e:cf:e4:
08:e2:ee:b6:e0:5b:65:c2:41:00:67:3d:cd:a8:12:
77:0d:dd:b5:87:b2:85:47:81:f0:9a:26:f4:99:3e:
2f:f5:ed:93:b4:54:67:da:a9:83:6c:6e:5b:e0:c2:
78:8f:a7:e2:35:f4:78:d3:46:95:4d:93:b4:25:59:
4b:6e:05:68:74:4d:e8:9e:ff:76:e6:03:e5:cc:9f:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:97:14:BF:41:30:A1:54:E1:60:22:FD:30:A9:D5:2E:6C:0D:74:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/M5cUv0EwoVThYCL9MKnVLmwNdJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.81.241.0/24
45.144.153.0/24
94.156.11.0/24
141.98.1.0/24
185.221.64.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
18:16:cd:9c:ad:7b:71:62:44:39:e2:d4:73:8d:ac:6a:0b:26:
50:59:a4:92:7d:df:db:62:01:0d:4d:c7:f6:dd:7d:d7:85:b6:
79:74:e9:63:07:06:2e:63:48:8b:69:60:60:9c:c5:5e:57:94:
bd:25:5d:54:40:dd:40:5f:fa:74:54:da:83:2c:0b:6e:8a:43:
a7:7e:7e:48:24:22:74:02:14:bc:2f:b4:a4:4e:c6:2f:98:1f:
cc:62:50:ad:34:5a:52:12:c1:3f:05:09:47:c6:48:a2:c6:2c:
46:d0:9f:e8:4d:f4:4a:31:03:ee:ce:b8:81:8c:23:fa:a7:17:
05:d1:eb:61:53:10:8e:16:8d:65:ae:07:59:d3:fe:09:de:ba:
b4:5d:e2:db:0e:6a:f3:b4:52:c8:e0:92:c9:ad:e0:e2:8b:4c:
1e:6e:f1:6f:20:1f:95:74:43:de:90:a8:a7:ea:a8:b8:5d:99:
12:af:a5:a6:ee:4a:5d:47:9a:a7:b4:b6:3c:49:4b:a0:43:dc:
87:b4:cf:78:75:fe:1c:06:d7:2f:c3:2a:62:9c:8d:f0:38:3b:
c9:00:b2:d1:fa:8c:18:c3:59:d7:ed:11:fe:31:96:30:8f:df:
f7:a1:2a:19:29:da:7e:7b:4e:02:09:5b:cb:36:61:b7:1b:ec:
ab:15:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org