Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a63VGtiAZIPcMeKs7iX6HE5C8yc.roa
File: a63VGtiAZIPcMeKs7iX6HE5C8yc.roa (raw, json)
Hash identifier: flpWtouUI86UqYd5rLkKSJoWaO6Wv+jxzwgKRqBd/b8=
Subject key identifier: 6B:AD:D5:1A:D8:80:64:83:DC:31:E2:AC:EE:25:FA:1C:4E:42:F3:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E1C91D8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a63VGtiAZIPcMeKs7iX6HE5C8yc.roa
Signing time: Thu 21 Apr 2022 14:09:28 +0000
ROA not before: Thu 21 Apr 2022 14:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 185.252.178.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505188824 (0x1e1c91d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 21 14:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6badd51ad8806483dc31e2acee25fa1c4e42f327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:f1:3b:ff:0a:8c:33:18:31:ac:fd:9e:19:
f8:2b:0e:f0:7c:fc:44:1d:c2:59:a7:7e:d3:17:28:
53:3b:5e:19:ef:7d:10:bc:f6:bd:20:2d:99:be:76:
48:b1:8c:cb:ed:95:bb:af:03:e7:a7:73:98:d3:d5:
27:c8:5e:19:a7:76:39:c8:61:c6:94:30:54:5c:b5:
35:30:a8:4e:98:8c:ff:25:06:41:ce:6d:0f:e3:be:
ce:04:f4:8a:a1:3f:27:d4:67:21:3f:57:60:55:ea:
8a:c0:35:ba:48:bb:ff:0b:a9:06:e0:04:3c:3e:1f:
6e:85:c5:09:71:28:ad:02:84:cc:31:07:52:8b:17:
d3:ae:91:e8:f5:2c:44:93:dc:77:d5:4c:08:d8:51:
7b:d5:a7:14:a7:d3:c7:8f:cd:85:5a:91:6d:f1:e3:
73:87:75:74:92:7a:de:94:6c:61:4c:12:f1:c0:6c:
0b:5a:96:fd:9d:38:1d:71:cb:e8:2d:69:3d:fa:90:
dc:72:6e:c3:2b:d1:20:14:3e:50:7a:fc:e1:39:d6:
32:1b:04:8f:7a:00:42:2b:40:61:aa:77:60:02:c2:
6a:04:13:a6:bd:6f:05:fe:30:5b:4b:3c:f1:30:30:
8a:e6:bf:03:58:38:22:66:22:a2:9d:6d:c8:c6:f0:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:D5:1A:D8:80:64:83:DC:31:E2:AC:EE:25:FA:1C:4E:42:F3:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a63VGtiAZIPcMeKs7iX6HE5C8yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
185.252.178.0/23
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:b2:fc:f5:f0:7e:7d:01:51:b7:02:55:75:11:bf:28:d1:
de:fc:ff:a6:57:8d:84:72:6b:ae:da:58:9b:ac:6f:3a:64:b4:
9e:b7:58:be:61:41:98:b4:0d:ae:32:c3:fb:ff:b2:3a:53:cf:
cd:a1:99:62:c7:52:77:45:a8:d7:61:bc:aa:f2:34:97:42:6c:
c9:64:26:b1:00:da:a8:70:95:a8:13:dc:c5:f1:9d:1b:b1:91:
09:a2:d8:dd:f0:62:61:b2:02:73:29:d4:56:51:19:f8:ca:22:
48:41:2f:f2:16:37:9f:9c:f0:af:8a:2b:ef:17:ee:21:9e:e0:
41:1e:5e:ea:62:5b:84:19:80:07:05:26:74:28:9d:ba:43:18:
66:c9:41:50:fc:f0:61:e5:18:5b:92:0e:48:b9:96:31:41:31:
46:9a:ec:76:85:c0:62:15:ad:ab:7a:11:8a:b1:c4:ad:ef:18:
a6:04:b8:cd:4f:c4:55:3b:70:fb:e7:aa:fb:a5:53:2d:e4:2c:
5b:92:01:43:4e:c1:19:95:91:ea:d4:0c:1c:a4:09:50:f7:36:
dc:76:1b:68:ea:f5:cd:8e:38:b1:9c:b0:c6:20:07:ec:c8:5c:
68:c0:ad:0b:37:98:8e:9f:6d:40:8c:c4:6c:3c:9a:3c:9c:92:
d5:ec:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:45 2023 by rpki-client on console-fra.rpki-client.org