Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/83Sd_YXpn_8uL3QyihtL__NJznY.roa
File: 83Sd_YXpn_8uL3QyihtL__NJznY.roa (raw, json)
Hash identifier: 4nNOrqk/C13f4eikO+EGHAke6h/1RSF+SFHb3e+iBVM=
Subject key identifier: F3:74:9D:FD:85:E9:9F:FF:2E:2F:74:32:8A:1B:4B:FF:F3:49:CE:76
Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial: 0A43FDFE
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/83Sd_YXpn_8uL3QyihtL__NJznY.roa
Signing time: Sat 01 Jan 2022 08:02:28 +0000
ROA not before: Sat 01 Jan 2022 08:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43846
IP address blocks: 37.0.64.0/21 maxlen: 24
79.140.144.0/20 maxlen: 24
79.140.151.0/24 maxlen: 24
185.12.43.0/24 maxlen: 24
185.12.40.0/22 maxlen: 24
185.80.96.0/22 maxlen: 24
89.207.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172228094 (0xa43fdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
Validity
Not Before: Jan 1 08:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3749dfd85e99fff2e2f74328a1b4bfff349ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:18:02:e7:91:d1:17:0b:29:b5:f5:98:82:
70:92:bd:c6:dc:3e:7b:4e:55:7e:a7:1a:c6:c8:a8:
61:ca:66:73:00:ae:a2:65:a7:5c:11:98:bf:df:f5:
22:76:e3:31:be:66:e7:72:27:91:52:72:bd:34:69:
61:a0:de:ac:69:83:39:14:48:61:95:0e:0a:eb:f2:
32:79:f7:73:5e:49:51:54:42:7e:44:d1:25:0d:a2:
60:b6:7c:21:c1:0e:ce:5e:b6:14:d0:07:9d:ec:c8:
0c:f4:3b:39:4b:3a:cb:77:3f:d2:01:54:f2:1f:fc:
3e:25:5e:fc:63:ad:1f:9f:97:ab:eb:8b:d8:cd:ef:
d9:35:b6:8e:60:d9:f2:38:6e:d2:27:2b:72:aa:0c:
34:aa:56:5b:de:ba:1f:e4:a1:59:49:6c:07:0c:84:
10:e1:1f:d9:f9:30:a4:15:0a:d7:d0:d4:9b:44:6b:
85:e0:24:ca:02:f4:af:96:06:2d:ad:aa:ab:7c:6f:
3d:16:95:18:78:c0:60:c4:e2:70:c3:d7:40:0b:4d:
b9:0e:25:80:9a:b7:76:ea:fe:a2:be:ec:7f:ef:57:
e8:d8:2e:4d:0b:7f:5c:3b:c4:2f:7e:08:70:8f:2d:
6f:20:2a:c3:0b:2f:55:cc:45:21:19:67:bf:76:e0:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:74:9D:FD:85:E9:9F:FF:2E:2F:74:32:8A:1B:4B:FF:F3:49:CE:76
X509v3 Authority Key Identifier:
keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/83Sd_YXpn_8uL3QyihtL__NJznY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.64.0/21
79.140.144.0/20
89.207.192.0/21
185.12.40.0/22
185.80.96.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:a3:98:13:c1:d0:ce:46:37:8c:08:2a:15:11:1f:c6:9a:df:
62:63:06:2f:8c:a0:af:4b:47:5a:e4:43:4d:28:79:7e:e9:ea:
46:0a:e5:4e:ed:ab:ec:0a:7d:6f:ce:72:f5:f7:4e:ed:e5:7d:
44:7a:f7:83:1a:cb:b8:2f:02:f0:2c:8e:86:90:75:88:3c:e8:
17:5b:14:ad:6c:77:98:bd:ca:1d:11:38:92:5c:88:5e:e5:b5:
7d:29:83:0a:bb:80:aa:9c:14:ba:c3:c8:f7:ba:20:87:ad:3d:
8e:77:28:4b:c9:b3:2d:34:7a:3c:55:cf:bd:18:1d:34:4d:7e:
ca:59:0d:d6:e6:6f:42:21:82:0c:f2:00:f9:a0:c6:1a:2d:9f:
f7:03:44:db:4c:ac:6b:07:f3:27:8d:ea:ef:17:3b:9a:9d:7a:
b4:f0:23:e2:b0:00:91:c8:c0:e1:ba:19:59:f4:ef:5b:9e:b9:
ad:32:a1:b5:bb:e1:54:dc:fb:3d:6b:c2:18:68:1f:31:c1:cb:
bf:92:8a:2b:c4:8b:f6:9b:15:4e:86:f9:f4:0c:4a:59:ad:60:
33:d8:dd:e1:1f:23:0c:93:51:07:ff:6f:b2:6f:e4:af:8e:fb:
c2:39:8a:41:c0:94:4f:5b:f6:99:13:7c:6f:bc:23:4d:ef:7c:
65:fa:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:23 2024 by rpki-client on console-ams.rpki-client.org