Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SwCz5bdYvdgHVGqwrv2UJajUbX4.roa
File: SwCz5bdYvdgHVGqwrv2UJajUbX4.roa (raw, json)
Hash identifier: +xO9kjfGb8BOJ6PC+b8MhZmoeY0bLAak+56vWxZEa1I=
Subject key identifier: 4B:00:B3:E5:B7:58:BD:D8:07:54:6A:B0:AE:FD:94:25:A8:D4:6D:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EF6F637
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SwCz5bdYvdgHVGqwrv2UJajUbX4.roa
Signing time: Fri 10 Jun 2022 08:34:03 +0000
ROA not before: Fri 10 Jun 2022 08:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 212.87.204.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
94.154.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519501367 (0x1ef6f637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 10 08:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b00b3e5b758bdd807546ab0aefd9425a8d46d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:e9:17:b7:e5:a8:09:ee:85:02:2f:a0:18:
9b:66:4c:a2:c0:45:af:3b:06:f3:1a:c6:5b:15:cf:
14:a2:c0:c9:32:dd:65:c3:44:43:ec:78:bc:1d:b3:
73:c4:67:3c:02:6e:0c:0b:f7:67:61:5e:7f:08:bd:
a3:12:98:dc:89:df:74:56:71:de:d1:6a:ef:30:45:
a4:80:c7:1f:d5:4e:a0:9d:0a:e1:eb:66:88:90:5a:
84:f0:da:fe:22:23:25:31:c5:44:98:b2:e6:75:ef:
37:e9:45:9a:53:0f:18:a7:1c:91:d3:6f:9a:5d:ae:
ac:ea:70:d2:31:a3:6d:0a:69:d5:40:ec:9b:c2:b8:
bb:18:4c:de:97:21:74:4e:85:c6:a0:b4:57:b5:6e:
32:d1:4c:0b:a4:71:17:e7:29:cd:f4:c1:6d:20:86:
c0:33:9f:81:dd:a4:56:fd:e9:a0:f3:c5:05:ee:68:
b1:91:a8:66:9e:23:10:1a:f9:38:04:2c:c5:2a:36:
fa:67:79:5d:19:39:29:1e:8b:34:77:0d:e0:05:08:
2a:ee:ec:8c:87:52:bc:ee:c0:0b:39:03:5b:70:6b:
ab:a3:c7:4b:24:5b:b9:9b:4c:c0:46:33:90:c8:82:
36:d0:e3:07:eb:36:e2:69:b8:5e:73:80:1a:89:e4:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:B3:E5:B7:58:BD:D8:07:54:6A:B0:AE:FD:94:25:A8:D4:6D:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SwCz5bdYvdgHVGqwrv2UJajUbX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.62.0/24
94.154.173.0/24
185.216.71.0/24
185.218.138.0/24
185.225.73.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a3:31:9d:e7:87:59:a3:06:0b:3a:09:55:6c:17:7a:97:cc:
79:c9:45:9b:8b:0c:f6:a9:ce:41:d9:1a:8e:03:5a:d9:a9:94:
e7:3c:03:03:43:8c:76:7c:8d:18:b7:63:3f:ad:12:51:8b:9e:
4a:91:68:eb:4f:de:5c:ba:19:5f:29:dd:f1:33:25:b7:44:50:
86:09:c5:17:ce:1a:9b:92:63:af:9a:75:6e:be:14:5b:3e:6e:
d6:f4:0e:ba:fe:e7:90:e9:54:b1:bf:dc:bd:70:db:2a:f7:b3:
dd:92:6e:40:70:b7:65:63:04:4b:64:b7:d7:72:a4:91:b6:74:
02:bc:80:80:be:27:33:52:1b:a1:f7:05:b8:0a:35:aa:7a:8e:
33:1f:22:73:7f:4e:c4:74:d3:d7:d4:42:9e:d8:3a:20:53:b3:
fe:03:36:b3:63:b3:08:e7:9b:ed:3d:13:e9:4b:22:35:0a:6b:
61:a4:50:61:ee:d8:f2:a3:78:70:cf:a5:88:cc:06:9a:6b:30:
70:8d:78:1a:5a:c7:e3:d5:b1:a6:32:0b:87:4f:79:62:ad:92:
f0:ba:92:c2:cf:73:41:7e:e8:7a:de:67:97:c5:af:40:9a:fe:
31:86:08:c9:85:ff:e1:07:a5:e7:b5:52:34:57:e7:d8:e5:b9:
c3:55:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:43 2023 by rpki-client on console-fra.rpki-client.org