Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/38PbZvsowZTTYQs2qdff5o15-cw.roa
File: 38PbZvsowZTTYQs2qdff5o15-cw.roa (raw, json)
Hash identifier: CkA0H7L6qWgWASjeA939avoy7QciTIDVcPKVLbxn//E=
Subject key identifier: DF:C3:DB:66:FB:28:C1:94:D3:61:0B:36:A9:D7:DF:E6:8D:79:F9:CC
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 081462C0
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/38PbZvsowZTTYQs2qdff5o15-cw.roa
Signing time: Sat 01 Jan 2022 07:58:05 +0000
ROA not before: Sat 01 Jan 2022 07:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393262
IP address blocks: 91.231.3.0/24 maxlen: 24
77.81.141.0/24 maxlen: 24
91.92.32.0/24 maxlen: 24
91.92.36.0/24 maxlen: 24
91.92.37.0/24 maxlen: 24
95.214.76.0/24 maxlen: 24
95.214.78.0/24 maxlen: 24
45.10.131.0/24 maxlen: 24
95.214.77.0/24 maxlen: 24
78.159.151.0/24 maxlen: 24
95.214.79.0/24 maxlen: 24
212.11.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135553728 (0x81462c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Jan 1 07:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfc3db66fb28c194d3610b36a9d7dfe68d79f9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:db:1e:a2:d5:5b:24:65:32:2f:37:37:3c:
33:86:5f:16:6d:24:7d:06:27:04:b4:ec:58:1d:c2:
a6:a7:85:fd:ac:ce:0a:de:9e:98:81:c8:f1:f4:74:
4a:c2:55:0e:61:4b:c7:be:ed:bc:34:45:3f:52:4d:
7f:10:86:1a:1b:4d:b4:a9:1d:2f:85:73:c0:37:49:
8c:e4:1c:42:d0:37:45:98:27:e9:47:37:fb:2d:33:
20:26:8a:66:57:4c:95:9b:f8:e0:57:f8:b0:e4:fc:
11:6e:3b:5f:e5:10:d9:2d:7f:96:54:dd:1c:19:00:
5c:a7:6d:68:f4:48:80:6e:37:37:d0:4e:2c:16:c1:
e0:d5:b7:42:bb:e0:50:4b:a5:44:fc:18:8e:ef:f1:
74:4a:cf:cf:3b:c9:76:d3:2e:68:84:93:ae:93:2a:
f6:87:68:32:bf:b7:4c:98:73:db:66:a9:05:4e:98:
c7:88:12:14:e5:6c:58:e8:dd:21:9a:92:09:a7:a1:
5a:36:0f:a8:7e:3e:d7:d2:9a:62:6e:42:43:86:92:
48:24:ca:36:5c:39:9c:74:cd:1c:a3:c7:98:06:89:
e3:71:e3:8d:04:da:0b:1f:a0:11:84:06:6c:b1:71:
67:d5:b8:ec:30:8e:07:84:7b:55:b7:5d:dd:d5:56:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:DB:66:FB:28:C1:94:D3:61:0B:36:A9:D7:DF:E6:8D:79:F9:CC
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/38PbZvsowZTTYQs2qdff5o15-cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.131.0/24
77.81.141.0/24
78.159.151.0/24
91.92.32.0/24
91.92.36.0/23
91.231.3.0/24
95.214.76.0/22
212.11.95.0/24
Signature Algorithm: sha256WithRSAEncryption
28:da:36:26:69:31:34:61:5c:c6:bf:69:a0:ce:e6:57:28:b9:
c3:dd:7d:e9:ad:a7:d9:f9:4d:83:30:9f:36:a5:90:17:bf:27:
f4:f1:30:5b:77:37:46:56:40:db:d1:4b:c5:01:4e:84:8c:dc:
62:dc:a9:9a:2b:61:9e:9f:87:8a:95:00:80:37:fc:ce:ca:07:
c2:17:43:70:4a:5b:34:b5:7c:81:8d:a5:ad:25:12:1d:26:ee:
ab:a9:77:55:2e:f3:fd:72:f9:65:f0:4a:49:bf:c8:c3:6f:2b:
c7:cc:83:e4:3b:35:bf:a5:4b:ba:ef:ab:51:5e:bf:84:ee:43:
a5:20:bc:d4:85:83:e2:d3:1e:9a:c6:8a:44:eb:5f:b5:c3:c6:
2c:34:42:a1:b5:ea:be:48:d5:3c:5b:e2:08:d5:e0:d4:36:82:
5a:71:61:ac:da:94:82:e2:69:52:c5:c6:5e:38:36:57:52:fe:
df:96:b9:a5:d0:d5:5b:a8:e6:13:bd:76:44:2b:68:ee:92:0f:
d9:fb:ae:37:40:77:68:f7:1f:68:ef:6a:b0:bc:80:8e:4b:1f:
96:27:6f:8d:0b:f7:3b:8d:25:63:53:f4:a4:09:31:ca:db:71:
27:3b:30:74:af:b3:64:1c:3d:6c:73:9c:8f:fe:0e:3d:b4:d7:
3c:11:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org