Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/AevQv56jgnCNFHCYSZ8N9iz6l4s.roa
File: AevQv56jgnCNFHCYSZ8N9iz6l4s.roa (raw, json)
Hash identifier: P40kIjk7EPmrNhGcr5AgLuKbj5QHNmGAQnxK8CTpJ+w=
Subject key identifier: 01:EB:D0:BF:9E:A3:82:70:8D:14:70:98:49:9F:0D:F6:2C:FA:97:8B
Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial: 37A11A52
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/AevQv56jgnCNFHCYSZ8N9iz6l4s.roa
Signing time: Sat 01 Jan 2022 13:55:52 +0000
ROA not before: Sat 01 Jan 2022 13:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8758
IP address blocks: 37.46.144.0/22 maxlen: 24
77.74.96.0/21 maxlen: 24
145.40.192.0/19 maxlen: 24
217.71.240.0/20 maxlen: 24
84.254.80.0/20 maxlen: 24
95.143.48.0/20 maxlen: 24
84.254.96.0/20 maxlen: 24
83.150.0.0/18 maxlen: 24
185.160.244.0/22 maxlen: 24
217.150.224.0/20 maxlen: 24
87.239.200.0/21 maxlen: 24
157.143.0.0/17 maxlen: 24
31.24.8.0/21 maxlen: 24
178.22.104.0/21 maxlen: 24
80.89.208.0/20 maxlen: 24
194.246.118.0/23 maxlen: 24
109.70.112.0/21 maxlen: 24
109.70.116.0/22 maxlen: 24
109.70.115.0/24 maxlen: 24
212.25.0.0/19 maxlen: 24
217.22.128.0/20 maxlen: 24
2001:8e0::/29 maxlen: 32
2a01:bd00::/32 maxlen: 32
2a00:10c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933304914 (0x37a11a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
Validity
Not Before: Jan 1 13:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01ebd0bf9ea382708d147098499f0df62cfa978b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:63:e1:ad:f7:3d:87:77:bd:33:18:b0:2b:
34:d4:6d:f9:0a:9f:a3:95:6c:d6:b5:69:98:17:d7:
92:60:e4:ae:4d:b5:37:b7:00:3c:8c:0c:73:f2:5c:
8e:a2:3c:b9:3d:47:2c:3e:3c:82:22:ae:ca:1e:32:
86:4c:70:a0:33:6c:bc:a4:13:5b:33:f6:25:01:ea:
55:04:25:57:73:cd:33:2b:53:47:53:0e:58:3e:b9:
95:ee:92:68:5a:74:3d:47:7f:ac:b0:8d:47:62:41:
2f:02:60:a7:7d:3f:36:1b:a5:e5:40:76:34:be:0c:
bc:c3:42:63:3a:13:02:5e:5a:a1:e6:44:88:33:a0:
30:97:5d:22:bf:12:4f:e7:55:a4:82:ea:d7:7c:2d:
87:aa:6b:25:5b:72:68:71:a1:8c:02:fd:53:85:0f:
26:8f:80:7a:2f:a6:fd:f0:24:92:b6:49:7a:85:d0:
6d:c2:90:14:6e:02:6e:d3:87:a0:c5:70:93:67:93:
cf:69:e3:b7:44:57:1c:39:4e:f5:a1:3f:a5:8f:26:
4d:46:a8:77:09:f4:f7:20:10:63:fb:20:16:b4:f5:
f4:e6:85:d0:95:2f:ff:fe:d6:90:b4:7f:2b:76:97:
d8:c8:2c:50:f6:aa:10:88:bb:56:82:1b:31:84:f4:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EB:D0:BF:9E:A3:82:70:8D:14:70:98:49:9F:0D:F6:2C:FA:97:8B
X509v3 Authority Key Identifier:
keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/AevQv56jgnCNFHCYSZ8N9iz6l4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.8.0/21
37.46.144.0/22
77.74.96.0/21
80.89.208.0/20
83.150.0.0/18
84.254.80.0-84.254.111.255
87.239.200.0/21
95.143.48.0/20
109.70.112.0/21
145.40.192.0/19
157.143.0.0/17
178.22.104.0/21
185.160.244.0/22
194.246.118.0/23
212.25.0.0/19
217.22.128.0/20
217.71.240.0/20
217.150.224.0/20
IPv6:
2001:8e0::/29
2a00:10c0::/32
2a01:bd00::/32
Signature Algorithm: sha256WithRSAEncryption
b7:a4:75:39:d3:61:5a:9c:f1:bb:03:d8:59:1c:7e:24:cd:02:
02:f0:86:00:31:fc:12:43:0b:2f:2e:cb:8d:5e:b1:7d:d6:c4:
34:13:13:b2:70:96:60:c1:1d:ad:19:16:d7:da:b6:e4:f4:7e:
53:2c:2e:72:34:eb:26:c6:db:6f:be:b9:50:20:91:1b:17:2a:
7c:52:5d:1e:d1:a5:46:ab:9d:70:1e:05:73:02:e6:4f:25:c9:
38:42:ea:84:e0:49:24:43:f6:a6:94:23:83:19:f1:7b:0a:a6:
8b:1d:63:d8:1b:d0:26:9a:1f:ee:e6:2f:eb:36:a3:a2:83:e1:
19:9a:6b:f4:a9:35:b2:cd:e2:14:f0:de:39:17:6b:18:7b:38:
01:1e:8f:96:ca:27:44:7a:e4:10:75:70:80:d3:ea:b8:45:57:
dc:d9:28:25:e2:54:f8:2a:b5:3e:4b:1f:0f:0b:fd:ec:63:60:
a6:72:ef:4e:29:65:fe:ea:60:44:00:f2:ae:0a:26:81:e8:dd:
be:65:fb:9b:1e:f7:d7:b4:96:2a:b4:33:47:56:46:cf:e3:4e:
eb:e4:20:38:8f:61:c2:a4:76:0d:0d:ed:49:2f:bd:59:ba:23:
5f:cf:91:73:d2:c1:1e:84:f7:5a:09:cc:04:0f:12:f2:79:2d:
78:be:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-ams.rpki-client.org