Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/RP9KK61tTrKLUERrrLUTlJtM_Hs.roa
File: RP9KK61tTrKLUERrrLUTlJtM_Hs.roa (raw, json)
Hash identifier: niit+gIthtc8F2w7aUNc3LNh3zsmvJQde1PnJsoy+ig=
Subject key identifier: 44:FF:4A:2B:AD:6D:4E:B2:8B:50:44:6B:AC:B5:13:94:9B:4C:FC:7B
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 05FFA8A8
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/RP9KK61tTrKLUERrrLUTlJtM_Hs.roa
Signing time: Sat 01 Jan 2022 08:57:23 +0000
ROA not before: Sat 01 Jan 2022 08:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35017
IP address blocks: 37.72.169.0/24 maxlen: 24
46.21.155.0/24 maxlen: 24
46.21.154.0/23 maxlen: 23
2a02:748:4000::/35 maxlen: 35
2a02:748:a000::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100640936 (0x5ffa8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Jan 1 08:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44ff4a2bad6d4eb28b50446bacb513949b4cfc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:6f:27:a0:c3:8d:dd:be:10:5a:9f:fb:ae:
e3:72:8c:99:a2:e0:0f:95:af:ea:8f:b2:d4:91:23:
23:bb:8e:9e:d5:4c:ec:2a:00:37:df:3b:b6:30:22:
92:a6:30:3d:9a:de:46:d5:df:74:6d:73:95:90:db:
90:0b:b6:48:43:25:66:7e:60:34:e2:8a:04:97:67:
9e:bd:e5:3c:86:f6:d3:43:f6:8e:41:ae:89:c4:c1:
85:e9:6f:53:7e:07:07:c1:41:db:82:b1:de:01:39:
e5:32:af:1e:20:a3:71:7d:64:83:53:8b:2f:70:df:
ed:de:a4:54:23:79:86:31:c6:c2:ef:52:d3:9a:85:
7f:78:62:13:72:5c:0f:4a:71:08:ef:97:94:af:d9:
a0:3a:e9:e4:f5:ad:22:20:d5:ec:ba:c3:c6:19:10:
04:9a:d5:4e:9f:4a:52:36:4d:5d:a9:0a:74:d4:26:
e4:c1:62:68:4e:c3:7c:b8:7a:aa:2b:58:1f:12:d7:
44:df:2d:fd:4e:f8:64:2e:ac:d8:b9:7a:24:8a:06:
b3:17:c2:27:50:c4:54:c7:29:7a:f2:d7:9d:3b:e7:
bc:ff:38:a2:e7:ad:46:de:aa:a6:89:34:df:b0:e2:
8b:89:ed:25:71:87:bb:e4:37:a1:02:d1:d3:ce:55:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FF:4A:2B:AD:6D:4E:B2:8B:50:44:6B:AC:B5:13:94:9B:4C:FC:7B
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/RP9KK61tTrKLUERrrLUTlJtM_Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.169.0/24
46.21.154.0/23
IPv6:
2a02:748:4000::/35
2a02:748:a000::/35
Signature Algorithm: sha256WithRSAEncryption
6a:66:0b:f7:1a:8b:c1:0c:9b:7e:4a:38:29:2a:a9:fc:3c:a9:
5f:58:09:b4:8c:ec:bc:38:92:83:c8:1d:87:f0:6f:74:95:81:
49:d0:33:19:db:49:d3:b2:00:7a:aa:8c:35:11:4f:f7:22:29:
5d:fe:5c:95:ca:bf:06:58:58:af:96:84:c3:53:17:f7:41:95:
bc:06:ff:4d:e2:24:7a:f0:92:55:f6:a3:f7:04:f0:b7:75:55:
15:82:14:99:54:14:d4:4b:ce:0d:e2:03:76:29:98:ee:fc:3d:
72:22:ab:82:56:e0:56:70:35:6a:b2:0c:9c:e5:e8:c6:78:b6:
d3:46:df:91:6b:24:2d:d2:3b:33:dd:a0:97:21:30:f4:9f:74:
44:5d:33:31:94:7c:43:1c:e8:ad:11:ce:0e:ff:bb:a1:55:89:
8b:30:d9:aa:fd:cd:c4:e2:9c:c4:08:b5:c0:7c:79:56:88:e5:
68:31:0b:b1:e8:b0:88:1f:74:5e:87:f7:14:25:d9:87:ff:4f:
95:cc:18:a9:1c:f4:8e:4b:8b:c6:7f:0d:0b:12:54:59:47:3c:
3d:41:94:21:2a:0e:f9:32:f3:45:f3:7a:59:4a:19:11:30:44:
11:b2:20:65:da:30:ed:6d:2a:79:3c:69:4d:e0:58:18:37:35:
88:7a:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org