Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/AzY6p2H2SYJLJiImgE2wddbIufY.roa
File: AzY6p2H2SYJLJiImgE2wddbIufY.roa (raw, json)
Hash identifier: fWVxGLwkk3moqsNyZ0hg+NqgJFdOmiyyyYTbB6RdP3A=
Subject key identifier: 03:36:3A:A7:61:F6:49:82:4B:26:22:26:80:4D:B0:75:D6:C8:B9:F6
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A64BA66
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/AzY6p2H2SYJLJiImgE2wddbIufY.roa
Signing time: Sat 01 Jan 2022 14:56:39 +0000
ROA not before: Sat 01 Jan 2022 14:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205207
IP address blocks: 185.14.160.0/22 maxlen: 22
46.209.58.0/24 maxlen: 24
77.104.106.0/24 maxlen: 24
5.160.49.0/24 maxlen: 24
77.237.68.0/24 maxlen: 24
77.104.64.0/19 maxlen: 19
77.104.66.0/24 maxlen: 24
77.237.80.0/20 maxlen: 20
77.104.64.0/18 maxlen: 18
77.104.73.0/24 maxlen: 24
77.104.75.0/24 maxlen: 24
77.104.72.0/21 maxlen: 21
77.104.80.0/20 maxlen: 24
46.209.95.0/24 maxlen: 24
77.237.64.0/20 maxlen: 20
77.237.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979679846 (0x3a64ba66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03363aa761f649824b262226804db075d6c8b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:88:88:1f:80:b1:c9:0b:d5:38:23:e5:1a:
23:4e:3f:79:7d:64:97:be:0c:71:f7:d7:b3:fe:6c:
dd:66:ff:87:b9:bc:70:e9:b8:fb:44:86:e3:61:16:
38:ab:72:93:b3:9a:08:59:b2:07:c4:1e:46:ac:7b:
0a:a0:9e:bf:35:85:74:e3:26:5d:95:13:03:35:48:
11:e1:d0:bb:08:29:83:da:72:ab:88:d6:29:8a:08:
96:e5:1a:85:33:73:b6:50:89:c7:77:a7:a3:d6:3d:
5d:33:ee:14:bc:50:59:5c:9c:df:82:4b:c0:0d:30:
eb:09:ff:0f:a8:8e:68:e5:a6:82:44:eb:35:c9:d3:
9f:95:61:6a:c9:27:45:b6:5a:20:aa:47:5f:7d:a3:
18:3d:c9:ad:cf:b0:c0:5e:e3:6e:9c:5c:8f:7d:fc:
76:f2:ca:8a:93:d0:2b:14:1a:82:71:8e:84:28:65:
09:5c:52:eb:1e:57:ce:88:77:e9:8e:df:5c:fd:6a:
1d:e2:c3:4b:53:73:6e:b3:95:bf:fa:98:9f:9f:f1:
97:39:a2:38:a1:96:18:e6:a6:d0:87:11:6f:54:20:
e7:af:33:3f:ac:f3:03:44:52:8f:ed:af:1a:20:f1:
34:57:d0:48:24:9f:d7:2e:f0:85:92:56:21:d4:63:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:3A:A7:61:F6:49:82:4B:26:22:26:80:4D:B0:75:D6:C8:B9:F6
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/AzY6p2H2SYJLJiImgE2wddbIufY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.49.0/24
46.209.58.0/24
46.209.95.0/24
77.104.64.0/18
77.237.64.0/19
185.14.160.0/22
Signature Algorithm: sha256WithRSAEncryption
69:88:ab:ad:2b:bf:10:b8:70:3f:82:70:5c:4e:b3:9a:77:2b:
df:df:01:02:26:58:05:8b:c4:d5:a5:a0:a7:2b:99:9f:1c:2e:
48:e0:63:b3:2f:2a:07:54:0d:26:40:bb:41:93:b6:82:f2:75:
64:ec:61:dd:b5:6a:c2:c7:25:47:80:b9:01:ec:b9:39:c3:bb:
ed:c6:4c:2c:93:3e:c2:5e:dc:b1:18:c2:ea:92:2a:14:e7:25:
11:e4:e1:e7:41:a9:5f:76:31:81:f4:2b:0e:bd:2f:cb:0e:45:
37:7c:55:fe:2b:64:65:31:81:51:e5:7c:62:57:30:4d:cd:e0:
10:c4:77:cc:e5:e4:e8:53:b0:f5:a3:87:e4:f9:76:01:e2:00:
63:5a:f1:0c:3a:10:4e:a5:0f:af:48:c0:06:30:a2:c0:b6:2b:
dc:ff:e1:6a:74:b4:2a:c3:7f:87:6a:f2:37:d1:9c:fa:69:42:
c0:3d:9a:86:9b:a5:f1:19:e1:44:5c:2c:17:30:a5:7c:12:b8:
8f:66:b9:f1:45:eb:f0:3e:25:d3:90:c9:ea:7c:f8:ba:6c:02:
02:00:81:ec:e4:3a:e6:82:33:f8:36:d2:8e:7b:66:a9:a3:4d:
a7:99:57:9d:c7:9f:77:2d:8a:fc:35:d0:18:24:22:d7:40:a4:
fd:08:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org