Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/UzULd9IEfVIymDH0F0DbWqUVklk.roa
File: UzULd9IEfVIymDH0F0DbWqUVklk.roa (raw, json)
Hash identifier: tpyQEXhwWYXmhrK2ut6jB6GMl+6h60SEemzWW4wImDk=
Subject key identifier: 53:35:0B:77:D2:04:7D:52:32:98:31:F4:17:40:DB:5A:A5:15:92:59
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 3474BD58
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/UzULd9IEfVIymDH0F0DbWqUVklk.roa
Signing time: Sat 01 Jan 2022 13:56:23 +0000
ROA not before: Sat 01 Jan 2022 13:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60351
IP address blocks: 37.77.201.0/24 maxlen: 24
37.77.204.0/24 maxlen: 24
37.77.200.0/24 maxlen: 24
37.77.203.0/24 maxlen: 24
37.77.206.0/24 maxlen: 24
37.77.202.0/24 maxlen: 24
37.77.205.0/24 maxlen: 24
37.77.207.0/24 maxlen: 24
185.21.164.0/22 maxlen: 22
2a00:8140:1000::/36 maxlen: 36
2a00:8140::/36 maxlen: 36
2a00:8140:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880065880 (0x3474bd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jan 1 13:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53350b77d2047d52329831f41740db5aa5159259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:e4:b6:22:4a:06:f5:a0:46:58:79:b4:00:
15:a1:eb:d8:61:d7:7d:10:06:5f:6f:41:b7:6d:1c:
7d:c7:79:15:5e:ad:4b:41:40:16:04:3e:5d:94:5f:
60:a0:61:b8:51:5d:0b:6d:79:7f:ac:82:6b:74:1a:
22:84:9d:91:70:2a:a6:27:04:0f:88:f7:01:89:ad:
50:76:79:a5:ad:a2:95:a4:ec:66:4f:ff:e1:dd:80:
f4:17:e4:9c:e3:4a:87:b2:0d:45:7c:90:33:0d:13:
0a:47:d9:b1:f6:0f:7e:b7:2e:73:9a:35:60:0a:d2:
13:28:f6:47:92:71:49:e2:94:af:10:a5:00:78:e3:
0a:2c:ac:34:bd:80:b1:79:b8:09:38:c5:f4:83:85:
d0:ad:0d:e3:f9:c4:d2:08:95:42:5c:6c:b0:7a:fc:
5f:d3:37:b4:fb:ee:7f:00:70:61:4f:65:62:be:30:
eb:c2:21:80:22:69:d0:25:e1:3c:db:97:2a:9b:4d:
49:83:4b:20:62:24:9d:26:70:48:25:01:e4:9e:61:
73:dd:2e:7d:5f:d8:ac:31:45:c6:3f:03:17:78:df:
d7:9b:bf:43:8d:21:cf:73:02:c7:66:4e:12:ed:d1:
5e:6a:e3:f3:29:73:9c:5a:83:fa:89:60:81:9f:5c:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:0B:77:D2:04:7D:52:32:98:31:F4:17:40:DB:5A:A5:15:92:59
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/UzULd9IEfVIymDH0F0DbWqUVklk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.200.0/21
185.21.164.0/22
IPv6:
2a00:8140::/35
2a00:8140:f000::/36
Signature Algorithm: sha256WithRSAEncryption
85:69:33:a3:54:50:93:72:a2:53:46:ce:da:95:4c:14:16:d2:
5b:38:47:7c:f3:f9:34:a0:89:36:01:e5:dc:f6:7d:ef:fe:c1:
82:84:ea:77:95:9e:4b:51:5c:5e:33:08:0a:1b:dd:ee:0a:0d:
56:a1:8a:1a:30:a5:88:f2:c2:b2:26:36:bd:d2:2a:02:f4:55:
29:89:32:e4:12:5d:fc:f6:c8:ca:40:53:58:1d:ad:51:a6:2c:
ce:6f:ba:c9:a8:ba:0a:05:3a:bb:d8:00:ca:66:43:8c:59:fd:
50:c2:ac:45:56:3d:72:0c:02:f4:f9:3c:06:35:72:1e:dc:89:
ed:fb:18:58:34:c6:3c:ee:ba:c3:ad:f2:18:14:64:61:cd:5c:
b4:32:55:0f:6a:5a:b3:ae:16:79:d1:76:12:26:8c:60:61:ab:
a2:f4:e5:c3:0a:40:c1:a9:d7:96:6a:d3:f0:e1:81:0b:57:12:
b8:65:f9:53:2d:3a:b1:f8:a0:0e:df:5d:9e:be:df:32:50:ed:
87:c8:bd:19:94:42:b4:4d:03:dc:c5:91:01:c4:8f:15:ef:5f:
62:3b:e4:69:db:42:dc:cb:cc:f0:b5:9e:0d:4f:50:90:5c:1c:
6e:6b:6f:08:21:32:9a:49:59:2b:c3:12:60:7e:59:f7:13:e6:
5d:2c:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:51 2023 by rpki-client on console-ams.rpki-client.org