Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fKogJqgTWue6aaUOc92qF5S5v7k.roa
File: fKogJqgTWue6aaUOc92qF5S5v7k.roa (raw, json)
Hash identifier: uX3lL91XmVZ598bp2NvGicghTw8wFnZ/5LcDU2owZ7Q=
Subject key identifier: 7C:AA:20:26:A8:13:5A:E7:BA:69:A5:0E:73:DD:AA:17:94:B9:BF:B9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E376BE2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fKogJqgTWue6aaUOc92qF5S5v7k.roa
Signing time: Fri 29 Apr 2022 16:54:30 +0000
ROA not before: Fri 29 Apr 2022 16:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 37.221.120.0/22 maxlen: 24
185.221.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506948578 (0x1e376be2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 29 16:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7caa2026a8135ae7ba69a50e73ddaa1794b9bfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:56:3b:82:61:dd:ed:69:a2:44:6b:8d:32:
ac:06:5f:cf:66:44:ef:9e:90:de:c2:69:2b:41:70:
d3:e3:d3:66:37:79:2e:9c:59:c8:fc:09:6e:f0:a8:
47:ff:78:a3:71:13:2c:1e:b1:d3:4b:2c:04:b9:e1:
e8:2d:b8:f2:b0:78:c2:f8:f1:7c:de:59:e7:e5:e2:
20:60:fb:30:1f:6b:28:7f:59:a4:e4:87:93:00:19:
53:80:38:79:bf:5d:81:bd:9a:0a:90:2c:2f:b5:f1:
56:d2:ad:cd:56:4f:65:d9:f6:bc:cc:f3:dc:73:e7:
a0:e9:bc:1f:e6:67:80:70:5a:15:7e:d7:ba:95:3d:
12:e5:2f:69:14:85:54:1f:60:e1:91:5b:b0:b9:df:
96:8f:9e:70:72:e7:a5:ec:a7:5f:9e:fa:bf:cf:3f:
31:73:3c:d5:88:61:be:7e:ac:83:d3:5f:55:e5:68:
48:71:6a:1e:fe:74:d1:ac:4f:3f:cb:57:90:26:5f:
94:93:58:09:39:6e:4e:99:11:a9:c5:fa:68:6b:9f:
5d:b3:e7:c3:ec:16:fe:31:94:90:c4:82:55:89:29:
45:c2:02:b3:16:8e:f4:af:48:bd:10:e1:aa:52:81:
cf:45:6c:26:42:ab:9f:67:fe:8f:41:f5:1b:da:9f:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AA:20:26:A8:13:5A:E7:BA:69:A5:0E:73:DD:AA:17:94:B9:BF:B9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fKogJqgTWue6aaUOc92qF5S5v7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:41:42:a2:6c:1d:e8:a1:88:2a:42:1f:39:92:19:46:26:9a:
a6:04:92:2b:45:e1:a4:37:6f:18:25:51:5b:bd:f5:40:43:4f:
dc:2b:95:91:5e:41:a7:e9:59:8f:e5:65:e0:91:cf:fe:b3:d0:
01:30:e4:85:99:bc:12:96:ff:fc:14:9d:fc:e8:56:8e:7b:52:
c3:b9:30:ff:29:47:dd:9b:0b:1c:23:34:23:1f:07:68:57:37:
87:e4:c3:a7:89:ef:6b:c8:21:97:4d:43:b8:82:ec:ea:e7:78:
15:99:38:7b:7b:45:f5:fd:00:d0:dc:87:4f:d8:74:8f:45:2e:
6e:ef:02:df:75:e1:40:c9:5b:9a:09:41:b0:15:11:d0:79:06:
ce:87:84:07:dc:e6:ac:70:ae:27:c3:7d:88:f1:74:c0:fa:14:
56:e2:3f:9f:74:56:91:b7:a8:af:4b:dc:50:04:aa:7a:bd:80:
e8:9b:de:00:d6:16:bd:39:5b:b4:15:27:9a:4d:58:76:0b:1e:
93:aa:5b:27:63:d8:19:46:76:3d:52:49:83:f5:f1:99:8a:36:
a5:8c:db:bd:10:6c:6f:05:26:3b:dd:b6:5d:a0:35:f0:72:0d:
b5:0a:8d:5c:8e:36:ce:1b:b9:1b:69:3d:0d:25:af:bb:3c:0e:
53:d4:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org