Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/xMSQYv88fdtworWfh9K9ktyaRGM.roa
File: xMSQYv88fdtworWfh9K9ktyaRGM.roa (raw, json)
Hash identifier: +Z0oVDL4sj8TLuTxA0zd+RDt2MjFJdlcjYEnlm3ONZs=
Subject key identifier: C4:C4:90:62:FF:3C:7D:DB:70:A2:B5:9F:87:D2:BD:92:DC:9A:44:63
Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial: 06D04D
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/xMSQYv88fdtworWfh9K9ktyaRGM.roa
Signing time: Mon 02 May 2022 14:40:18 +0000
ROA not before: Mon 02 May 2022 14:40:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39425
IP address blocks: 37.156.37.0/24 maxlen: 24
89.40.133.0/24 maxlen: 24
89.43.240.0/23 maxlen: 23
89.43.245.0/24 maxlen: 24
89.43.246.0/24 maxlen: 24
89.43.242.0/23 maxlen: 23
89.43.244.0/24 maxlen: 24
89.43.247.0/24 maxlen: 24
188.241.121.0/24 maxlen: 24
89.37.186.0/23 maxlen: 23
92.114.88.0/22 maxlen: 22
94.176.186.0/23 maxlen: 23
89.35.4.0/23 maxlen: 23
188.241.111.0/24 maxlen: 24
89.46.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446541 (0x6d04d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Validity
Not Before: May 2 14:40:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4c49062ff3c7ddb70a2b59f87d2bd92dc9a4463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:00:7a:a0:e2:1a:ad:f5:46:54:3a:c7:a9:
22:9b:50:91:69:38:d7:da:62:31:de:46:63:f8:f4:
08:7d:93:1e:26:0c:c0:13:18:fd:33:69:2f:c7:88:
97:0a:27:7c:88:b8:9b:43:87:c4:e9:6a:b2:d4:33:
93:58:c6:02:3b:d2:a6:e9:75:d2:76:f9:db:b3:8e:
40:a2:7b:ff:dc:b3:3a:c0:ec:cc:ed:be:07:07:af:
1c:15:2f:40:7d:fc:95:04:d7:6f:0c:c9:72:05:6d:
e3:e9:08:d9:3d:a7:52:fc:fc:90:80:b5:3b:69:00:
b6:89:3b:f4:66:60:d8:f0:44:cc:69:e6:40:6f:55:
b5:31:76:f1:8d:c7:34:cc:d1:a1:73:68:ba:c8:dd:
62:6d:ab:46:13:f9:60:37:af:fb:e2:e7:0f:04:20:
af:61:f0:5e:e6:89:43:4c:db:0e:a7:5d:2e:f2:53:
42:de:8d:93:84:4f:93:a7:f8:c4:11:86:52:49:37:
a9:e2:6e:18:e0:3b:af:55:4a:96:c8:31:60:fa:c8:
04:9d:99:d5:ca:11:16:4f:ba:af:d1:43:ba:fb:bd:
01:9c:96:44:07:3a:e1:2e:cc:4c:f7:35:07:f2:44:
77:9e:13:8a:1e:02:22:85:2d:22:5a:cf:0e:a6:7a:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:90:62:FF:3C:7D:DB:70:A2:B5:9F:87:D2:BD:92:DC:9A:44:63
X509v3 Authority Key Identifier:
keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/xMSQYv88fdtworWfh9K9ktyaRGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.37.0/24
89.35.4.0/23
89.37.186.0/23
89.40.133.0/24
89.43.240.0/21
89.46.24.0/21
92.114.88.0/22
94.176.186.0/23
188.241.111.0/24
188.241.121.0/24
Signature Algorithm: sha256WithRSAEncryption
56:74:a1:55:3a:96:fb:db:b6:bc:53:aa:43:f9:1e:a9:49:d4:
c3:53:66:1d:63:36:9c:86:31:37:0d:e3:19:2d:7c:32:fc:d3:
08:c6:ee:15:f4:c0:18:2e:b0:c2:91:80:ab:5b:0f:b4:c9:be:
45:5c:a5:f9:7d:91:db:eb:f5:37:db:d1:8a:02:87:6a:78:2b:
2f:12:82:ec:6a:4f:1f:b5:5c:d9:89:84:16:a5:46:72:90:79:
9d:50:59:b2:bc:36:d0:7a:8f:af:4d:d0:4e:85:a4:cb:48:69:
21:90:38:5b:e0:88:88:ec:f6:ac:5b:1a:99:81:fe:07:46:a1:
3e:da:b3:60:0f:93:98:34:81:1a:74:b6:76:12:44:3e:35:4b:
ec:96:99:b9:77:fb:7e:fe:78:f8:fe:a5:24:b2:f6:5b:6e:6f:
15:62:bb:cc:23:dd:4f:04:5d:15:4e:37:d9:1d:b9:7e:06:b2:
d1:f7:ad:84:0a:40:19:b5:8d:45:68:fc:aa:03:7c:7d:5c:3d:
73:30:5a:47:10:8a:5d:c1:9b:51:70:15:15:0b:98:e7:64:9b:
d2:92:08:a6:26:8b:20:0d:d4:b8:b3:1c:03:0c:03:ca:c8:ae:
b1:93:2e:ee:23:d5:47:e4:fd:09:85:06:2b:de:54:f2:50:4a:
ec:41:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:43 2024 by rpki-client on console-fra.rpki-client.org