Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IqU7v4q_YbTWJUJhcZ3kavgxZtg.roa
File: IqU7v4q_YbTWJUJhcZ3kavgxZtg.roa (raw, json)
Hash identifier: 4krV9DzdWUGiJr1e/M9XRlTubRj/K+kJ+n78OGWfsY8=
Subject key identifier: 22:A5:3B:BF:8A:BF:61:B4:D6:25:42:61:71:9D:E4:6A:F8:31:66:D8
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C975B8D
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IqU7v4q_YbTWJUJhcZ3kavgxZtg.roa
Signing time: Mon 21 Mar 2022 10:23:29 +0000
ROA not before: Mon 21 Mar 2022 10:23:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 195.179.40.0/22 maxlen: 22
194.233.56.0/22 maxlen: 22
194.195.104.0/22 maxlen: 22
195.179.240.0/22 maxlen: 22
195.179.244.0/22 maxlen: 22
195.179.252.0/22 maxlen: 22
195.179.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211245965 (0xc975b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 21 10:23:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22a53bbf8abf61b4d6254261719de46af83166d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:94:24:7c:3e:da:ba:18:77:40:b8:07:ae:
cc:53:4e:d2:25:74:8b:b9:fb:c3:ef:8d:2f:79:a3:
39:d0:bd:a8:0f:f7:67:52:e5:a0:23:e4:62:15:14:
11:41:3a:c7:a0:dc:2e:18:f5:a1:e6:c9:cb:af:4a:
0a:db:aa:1d:85:d2:14:b1:69:36:3b:d5:10:ed:85:
26:78:15:a2:f8:ed:45:8f:21:55:33:76:8e:f1:64:
39:d8:24:d4:73:ae:f7:46:e3:0f:e1:bf:66:ab:b0:
0e:fa:96:49:62:af:03:91:00:f0:e0:9d:f8:ee:ab:
fa:7d:30:f9:61:ac:31:eb:61:ec:4d:d7:3e:5a:92:
50:cb:d2:1c:c1:70:e6:30:2e:ae:a4:b7:26:13:b4:
52:3e:fe:04:1e:7a:6f:66:5b:44:ef:8c:04:54:6f:
d0:4b:9d:ed:9a:45:23:05:2f:25:02:49:28:21:54:
f7:eb:20:a8:ac:31:e4:b6:c8:15:fe:d1:33:9a:92:
00:bf:fd:34:26:93:52:c1:0b:a7:29:ae:ae:bd:7a:
67:a3:00:cd:1e:df:ac:9b:c4:b4:36:42:ea:a9:50:
7e:48:fc:eb:c1:0f:0e:51:ba:64:9a:3f:8f:1b:80:
38:7c:0a:1e:2b:c4:09:77:fe:7b:d8:f4:f6:2b:0a:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A5:3B:BF:8A:BF:61:B4:D6:25:42:61:71:9D:E4:6A:F8:31:66:D8
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/IqU7v4q_YbTWJUJhcZ3kavgxZtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.104.0/22
194.233.56.0/22
195.179.40.0/22
195.179.240.0/20
Signature Algorithm: sha256WithRSAEncryption
31:01:df:7a:e4:d7:42:50:e0:9a:e7:72:12:d5:c7:3d:b0:2e:
1e:78:24:68:0c:f1:dc:ac:d5:fc:4a:c4:bc:f6:be:27:29:4a:
08:d5:8a:b9:53:2e:c5:5c:ae:b5:d9:37:48:64:83:d7:ee:fd:
f9:54:70:11:10:12:6d:3a:c6:3f:d0:e6:2a:d4:32:95:29:cc:
e8:18:af:ea:f4:55:d6:d8:da:27:01:80:34:20:4e:51:22:e0:
48:38:21:15:26:05:31:b7:e3:47:57:e4:a5:f7:f5:8c:d5:a0:
6c:e9:b5:a0:1d:87:56:3d:66:ec:33:1c:74:55:fb:56:ed:07:
ce:d4:3f:bd:db:c9:7f:7e:80:69:cf:20:ff:be:21:9d:5f:d6:
e2:fc:6c:c7:34:47:60:bf:0a:f1:5c:ab:d3:01:5d:5e:29:5b:
4b:8f:00:31:e6:fb:a8:c7:55:e4:a4:d7:4a:6b:ff:c7:d4:60:
c1:b3:7e:8f:0a:0d:23:9d:a7:d6:26:35:04:7e:6f:bf:4a:ae:
25:41:84:8d:7d:74:23:ce:cb:f9:e4:5d:6b:75:11:af:7b:90:
5d:b8:4b:2c:7c:2e:a3:83:16:62:3f:72:a0:70:b9:e2:a1:11:
2b:d2:52:96:cb:10:63:93:d3:dd:e2:6a:fa:f6:84:f6:45:76:
ee:09:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org