Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/3SvpZu3fGv00vvweDj3n7vXNjYo.roa
File: 3SvpZu3fGv00vvweDj3n7vXNjYo.roa (raw, json)
Hash identifier: yjycGYrpepCY0Yjt6ptchtpY2csAXkyFF+gKTRotQbQ=
Subject key identifier: DD:2B:E9:66:ED:DF:1A:FD:34:BE:FC:1E:0E:3D:E7:EE:F5:CD:8D:8A
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018360F69E31BC75266238E21B2A447AB726
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/3SvpZu3fGv00vvweDj3n7vXNjYo.roa
Signing time: Wed 21 Sep 2022 16:51:58 +0000
ROA not before: Wed 21 Sep 2022 16:51:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:f6:9e:31:bc:75:26:62:38:e2:1b:2a:44:7a:b7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 21 16:51:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd2be966eddf1afd34befc1e0e3de7eef5cd8d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:d2:26:72:3d:63:14:bc:2c:e2:c1:0c:03:
d6:e3:9e:77:2d:96:63:17:ae:17:a9:88:f8:e6:2b:
18:81:52:20:7e:64:d0:13:6c:96:87:73:c0:f3:ab:
fc:dc:53:1c:82:71:6e:6f:d1:23:4c:c4:1d:ef:d9:
83:bf:91:b7:d8:02:a9:9b:d2:7d:c4:81:f5:50:bf:
35:96:fa:73:ec:ff:82:0c:99:c1:f6:5c:d5:d5:9d:
59:1c:4b:0f:9d:3b:bb:8b:2d:e0:3b:e6:ae:68:e8:
83:d2:c7:ea:5f:4c:aa:ab:1f:c9:67:c0:e4:f5:cf:
32:ae:22:08:3b:9a:a5:a8:a5:ba:08:42:7f:19:ea:
e9:ba:b0:5e:a5:ce:6e:eb:ac:5a:53:cd:de:a0:27:
56:43:f5:10:9f:a8:39:f6:1c:44:68:65:38:2d:a3:
2d:21:fb:95:7b:af:f9:b1:cb:13:ea:66:ff:7b:85:
fa:81:26:b7:1a:87:4f:8a:11:63:60:79:79:08:93:
75:52:37:95:16:4f:3a:e2:05:16:88:5b:8c:b6:40:
fe:b1:cd:98:7e:31:23:bc:51:c7:1c:2e:24:1d:2a:
98:8e:4e:97:0c:f4:89:52:3b:0e:3d:96:68:9f:7c:
6a:5e:5e:34:45:2f:45:34:2a:47:d0:82:13:09:5e:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:E9:66:ED:DF:1A:FD:34:BE:FC:1E:0E:3D:E7:EE:F5:CD:8D:8A
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/3SvpZu3fGv00vvweDj3n7vXNjYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.148.0/22
94.74.128.0/18
109.203.164.0/22
Signature Algorithm: sha256WithRSAEncryption
69:b2:8a:04:6a:90:4b:27:5e:56:25:09:1e:70:a9:08:96:22:
c1:c1:a4:57:10:f3:0c:2c:6a:1d:b7:e8:3d:5b:7f:57:62:b6:
69:81:63:ff:5a:4f:c4:c3:be:ce:b4:4d:05:21:fb:40:cd:6b:
95:02:54:a5:9b:b4:99:6b:0b:4e:8e:46:d3:48:0c:a9:9a:c0:
fc:2f:0b:69:c3:05:6f:a4:a7:15:a6:39:33:82:9b:f5:c5:5e:
dc:d9:ce:69:40:a3:01:3b:2e:60:fc:11:25:aa:9c:ed:99:8f:
6c:49:b7:2e:aa:64:d3:bb:98:2d:84:c7:46:8d:d7:93:77:0c:
b5:9e:e6:37:5e:36:16:fe:08:e3:0d:61:3e:57:f1:c3:ea:65:
cd:f8:ac:fe:ee:fa:72:5f:92:90:64:16:da:0f:5a:47:5b:c1:
4f:75:92:ee:15:50:f3:a4:16:d7:3b:18:2f:44:36:11:6e:7f:
3c:65:3b:50:f7:1c:c6:21:1a:17:84:46:8f:b5:3a:d6:e3:a1:
11:c5:23:b1:55:86:c2:8f:44:30:e6:06:1c:54:b2:cc:47:de:
96:71:aa:d4:84:8e:b1:5c:cc:a9:5c:0f:62:6f:f9:81:bb:66:
0d:49:6f:bf:df:b1:b4:a0:8f:97:21:c3:bf:80:5f:98:3a:d3:
b1:d9:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:34 2025 by rpki-client