Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/33_cCczfK8lCLdiMRJlz-ZS4vw0.roa
File: 33_cCczfK8lCLdiMRJlz-ZS4vw0.roa (raw, json)
Hash identifier: 0YjYqxUGCF9ueQ7HrU1ADGuDgUJfu2WieA7MONdDR6s=
Subject key identifier: DF:7F:DC:09:CC:DF:2B:C9:42:2D:D8:8C:44:99:73:F9:94:B8:BF:0D
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 37750BE0
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/33_cCczfK8lCLdiMRJlz-ZS4vw0.roa
Signing time: Sat 01 Jan 2022 14:03:55 +0000
ROA not before: Sat 01 Jan 2022 14:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26506
IP address blocks: 209.16.176.0/24 maxlen: 24
209.16.178.0/24 maxlen: 24
207.229.122.0/24 maxlen: 24
209.162.157.0/24 maxlen: 24
209.162.155.0/24 maxlen: 24
2a02:3d0:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930417632 (0x37750be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 1 14:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df7fdc09ccdf2bc9422dd88c449973f994b8bf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:0a:47:1f:78:1e:69:ca:4b:49:7b:40:31:
f6:a7:c7:15:4a:04:0a:dc:c7:98:78:a8:04:96:4a:
04:99:b5:b9:69:05:c9:de:35:b9:4c:53:fc:4b:ea:
c9:41:fb:08:89:b3:0e:34:e9:40:a2:f3:55:c3:12:
3b:6d:1c:22:2e:53:07:1e:91:95:ac:71:93:39:8d:
26:38:bc:d7:8e:27:33:c8:17:1b:de:cc:10:c4:3a:
cf:63:71:e2:54:61:66:5d:85:f5:ce:d3:de:82:32:
d3:59:f9:b5:3f:c2:c9:8e:b5:f3:f4:e2:76:ea:1d:
d2:d5:90:25:6e:6a:88:4a:83:8a:c2:f6:cb:96:26:
b4:b9:da:3c:44:ca:58:33:ba:8f:3b:d6:f7:3e:2f:
a9:67:b6:70:0c:49:b5:36:1f:7a:19:ca:6a:1d:44:
c6:2a:95:c8:84:91:2e:83:14:69:6a:ac:f3:43:6f:
64:29:81:59:7e:69:fa:5d:f0:2e:af:bd:d6:d0:74:
30:58:cf:21:68:d9:6f:e2:3e:9e:4a:f8:8c:a2:05:
42:1f:1c:7a:aa:f4:42:3a:dc:0d:1b:9b:e9:3f:31:
86:03:2f:37:82:d8:34:e0:64:3a:10:fa:26:3a:36:
f9:bc:35:14:6f:26:b2:99:bb:5c:31:bc:4b:a9:c7:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:DC:09:CC:DF:2B:C9:42:2D:D8:8C:44:99:73:F9:94:B8:BF:0D
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/33_cCczfK8lCLdiMRJlz-ZS4vw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.229.122.0/24
209.16.176.0/24
209.16.178.0/24
209.162.155.0/24
209.162.157.0/24
IPv6:
2a02:3d0:7::/48
Signature Algorithm: sha256WithRSAEncryption
ab:bd:0f:cb:57:f4:69:46:33:7b:61:b4:d8:2e:3c:5b:c7:cd:
83:89:4a:ab:5e:56:c0:af:60:20:69:34:bb:08:60:d3:35:c3:
42:c1:65:ba:50:00:97:f7:e3:7b:77:50:c3:88:ec:42:d3:c1:
ee:05:31:33:79:e0:05:00:92:04:a7:0e:fa:9d:49:2f:0c:a8:
2a:ff:6a:35:3c:5f:22:c3:97:cb:3d:a6:e8:44:bc:98:9b:b8:
f0:c3:5e:5b:c6:81:a9:ad:db:a8:41:c4:c3:f2:0a:d2:e5:6b:
64:2f:29:ea:1d:37:42:b0:15:26:23:73:4b:3a:e1:55:f7:6e:
05:4b:04:05:33:27:b1:df:87:76:e0:a1:c8:f2:33:9a:eb:56:
55:61:ed:c6:94:ae:c9:30:a0:2e:c4:f4:96:e7:f5:8f:d4:a4:
d6:39:60:00:9a:7c:78:f8:78:58:eb:71:ce:21:1b:85:7e:28:
7a:0f:88:58:eb:75:86:ca:35:ce:56:a0:09:b2:ab:d5:4d:48:
dd:1c:77:c2:36:f8:69:28:7a:18:b2:e0:23:d0:51:eb:5e:bf:
b9:91:a1:ef:0b:29:4b:de:d8:51:88:c1:2c:fb:0d:ca:d5:30:
4d:67:ea:a8:58:eb:c5:49:d2:7f:46:7f:64:3d:25:b5:c0:35:
0f:41:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org