Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N_Q_GQjs-bUTcFpKSC_vS_RKmgk.roa
File: N_Q_GQjs-bUTcFpKSC_vS_RKmgk.roa (raw, json)
Hash identifier: VkNtk2zZN0ta8CyO3WwqbKIHAN+OVEH92fPNCKilyEs=
Subject key identifier: 37:F4:3F:19:08:EC:F9:B5:13:70:5A:4A:48:2F:EF:4B:F4:4A:9A:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1F561E48
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N_Q_GQjs-bUTcFpKSC_vS_RKmgk.roa
Signing time: Tue 28 Jun 2022 21:26:02 +0000
ROA not before: Tue 28 Jun 2022 21:26:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 94.156.11.0/24 maxlen: 24
37.221.121.0/24 maxlen: 24
37.221.122.0/24 maxlen: 24
37.221.123.0/24 maxlen: 24
37.221.120.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525737544 (0x1f561e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 28 21:26:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37f43f1908ecf9b513705a4a482fef4bf44a9a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:04:bb:88:1e:d9:b0:64:c2:b5:05:6f:a3:
19:e2:d4:78:41:72:59:71:7e:51:17:d2:50:0a:5a:
9d:cb:9e:c3:84:2e:20:0c:37:74:48:a6:f7:72:f4:
1b:8b:93:99:47:48:86:82:b9:45:87:f4:88:45:45:
c6:30:b6:fe:df:62:1d:ac:56:9b:4a:f4:31:8d:78:
ea:e2:57:52:09:55:2c:38:ac:95:40:5c:ba:bf:4d:
c2:8f:80:34:41:49:f6:59:be:b0:9e:62:5a:44:a0:
59:4c:51:60:8b:a5:56:c5:8f:63:7c:08:55:3a:55:
0c:23:92:64:e1:ef:b6:78:f0:0a:03:a0:a0:99:7d:
a5:d6:52:a0:f8:ed:5d:24:6e:d1:b3:79:d8:f1:33:
f4:39:a3:02:7f:cf:84:ed:cc:08:97:ff:ac:9f:9e:
f1:3b:ce:94:be:6b:cb:5d:8b:29:53:6d:70:34:4c:
d5:a5:34:bd:7b:64:4f:e0:24:27:f4:81:5c:11:0d:
40:3c:f0:86:e5:ba:49:a4:6b:8c:fa:f0:6c:78:07:
b0:39:dc:14:21:e5:ee:ed:b1:f4:86:0b:3a:90:93:
cf:2f:02:4d:26:6c:0f:5a:3f:1e:15:e6:2b:fe:65:
db:a5:9f:87:44:45:2b:96:25:3d:42:70:88:f7:3a:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:3F:19:08:EC:F9:B5:13:70:5A:4A:48:2F:EF:4B:F4:4A:9A:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N_Q_GQjs-bUTcFpKSC_vS_RKmgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
94.156.11.0/24
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5e:a2:b0:8e:56:ed:bd:f1:4b:ef:f6:4b:e9:f9:7f:f1:77:
26:47:f2:8e:76:5d:47:69:76:c5:6a:6d:c4:8b:8f:81:a2:16:
7f:2c:98:a4:48:f9:c8:96:d2:d4:32:1c:9f:2d:96:f6:c4:b8:
83:e3:6a:94:35:33:af:3f:00:9e:55:4c:cb:5d:a3:79:42:0a:
95:b5:fa:dd:f3:0b:1d:fb:02:d7:95:43:68:b8:39:b9:6e:72:
6b:79:40:63:a4:03:62:70:ee:05:db:93:63:d7:4e:72:03:cf:
82:24:71:bf:07:a7:55:2d:24:cb:4e:49:fa:97:0b:3c:c5:bb:
f1:db:b9:3b:2c:91:52:e1:bf:ac:f4:86:d8:dd:fe:d8:83:94:
2f:dc:d7:7d:ab:fc:b1:d0:46:8c:9e:ae:29:8f:80:48:6e:96:
0a:1c:f8:66:30:15:b0:02:b8:a1:df:d1:3e:a4:bf:e9:5c:26:
c1:a3:e8:b5:7c:63:97:e0:82:b5:3a:e6:d6:71:2c:31:46:f5:
21:06:9d:0d:0e:5e:1e:23:a8:d1:47:93:8e:bc:03:f5:31:44:
bb:80:d4:87:0c:34:46:18:a8:bb:f1:4f:61:54:5d:c7:cb:b8:
63:c6:67:e1:13:8d:7e:63:80:e9:45:ef:f8:0a:95:f3:2a:9a:
54:29:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org