Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_punKURRJheDRL7_c_keKudu68Q.roa
File: _punKURRJheDRL7_c_keKudu68Q.roa (raw, json)
Hash identifier: GWdzKfqIPe/yoT/awTzxXMNZUzAgtNsPh1ipJ6OlHaY=
Subject key identifier: FE:9B:A7:29:44:51:26:17:83:44:BE:FF:73:F9:1E:2A:E7:6E:EB:C4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018506A23B82CB568CD52A8AF54D3905F7FA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_punKURRJheDRL7_c_keKudu68Q.roa
Signing time: Mon 12 Dec 2022 13:59:33 +0000
ROA not before: Mon 12 Dec 2022 13:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 94.156.11.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
37.221.123.0/24 maxlen: 24
37.221.121.0/24 maxlen: 24
37.221.122.0/24 maxlen: 24
37.221.120.0/24 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:a2:3b:82:cb:56:8c:d5:2a:8a:f5:4d:39:05:f7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 12 13:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe9ba729445126178344beff73f91e2ae76eebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:69:b7:a0:ac:3a:fc:fa:98:2a:0f:0e:1b:
ad:b1:6b:66:c2:f7:4c:6a:10:70:8d:bf:70:9b:48:
bf:49:93:75:4a:01:04:b9:09:60:dd:b5:06:ec:bc:
96:41:7a:88:e2:94:c4:9e:9a:d8:38:0a:47:de:0f:
36:6a:92:3d:1a:a3:73:37:5d:bf:ef:80:08:eb:be:
8d:ea:29:85:fc:fb:0e:c2:18:61:80:d0:7e:20:e9:
1e:43:38:52:df:e2:88:bf:27:0d:a3:ba:3e:b5:2c:
0e:12:79:25:1e:48:a9:6d:62:4a:f5:d4:0a:00:39:
1c:3d:0c:3b:0c:cc:66:8a:11:b8:c4:ec:8e:76:6e:
4b:d6:b3:f2:47:23:dd:27:dd:a8:a3:57:d6:a5:f8:
38:11:e8:db:34:3e:d2:cb:31:d3:92:d1:ff:84:3f:
d5:c1:6d:4e:88:6e:1b:16:b0:8f:43:9d:64:c9:39:
b2:de:a1:21:66:17:2a:3d:f1:99:c7:ed:6a:0a:d3:
81:2c:e1:f1:a9:18:25:c5:b4:29:ce:ac:a1:a7:9c:
cb:de:f6:0b:88:42:33:73:52:a0:fa:b7:70:23:95:
8a:8c:c9:57:19:b3:a6:fc:9d:d8:30:51:f9:30:15:
46:f4:be:0b:3b:88:ca:7c:44:5d:d3:7e:86:a8:b7:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:A7:29:44:51:26:17:83:44:BE:FF:73:F9:1E:2A:E7:6E:EB:C4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_punKURRJheDRL7_c_keKudu68Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
94.156.11.0/24
141.98.1.0/24
185.221.64.0/24
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
73:9b:6a:e0:83:c8:85:5e:22:ce:d1:56:6e:22:0a:bb:b0:2b:
4a:78:03:c5:47:66:cc:be:26:e3:00:18:53:e1:ae:a4:7d:61:
50:e8:fd:e6:5f:fd:a0:a0:a6:55:7c:c2:ca:53:0b:24:ee:1b:
8c:3f:3b:14:71:31:4c:65:bb:04:78:9a:24:86:83:e1:85:a2:
48:c1:b3:77:a7:68:20:d4:ae:3b:b9:0f:f1:97:00:66:fe:c3:
89:57:64:4f:cd:ee:be:7f:54:f1:e0:8a:d8:ba:65:aa:45:63:
4f:1a:be:0d:e7:9a:67:03:eb:b9:1d:4c:36:b0:73:50:a8:c0:
0b:e0:aa:18:b4:26:6e:43:83:b5:58:0c:b8:39:af:bd:34:62:
9f:d9:1c:1f:e8:21:36:ef:ca:d5:26:ee:1d:93:d3:8f:9a:21:
82:3d:89:d7:96:fb:84:63:30:0e:d5:69:0e:ab:4e:74:8f:ff:
81:f4:64:1b:3c:2a:e1:93:0c:83:c6:69:2a:7d:78:45:7e:83:
99:5c:41:3d:50:71:29:df:dd:9e:57:40:b4:c6:f5:09:94:77:
22:ec:a6:0e:a3:92:e6:c2:4a:52:1b:03:60:54:8c:ad:f5:39:
de:fa:a7:3f:d9:70:a6:d9:3b:4a:89:1c:cf:40:78:87:97:9f:
ba:69:91:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org