Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/vfCFq-pz2E36kg6oipNDbn-9bVg.roa
File: vfCFq-pz2E36kg6oipNDbn-9bVg.roa (raw, json)
Hash identifier: dJQmh+8WjgeVDKQB9kzyxMATbQgfsBEEt+eKfMK+zH0=
Subject key identifier: BD:F0:85:AB:EA:73:D8:4D:FA:92:0E:A8:8A:93:43:6E:7F:BD:6D:58
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 0CB2D2ED
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/vfCFq-pz2E36kg6oipNDbn-9bVg.roa
Signing time: Sat 01 Jan 2022 11:54:53 +0000
ROA not before: Sat 01 Jan 2022 11:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8399
IP address blocks: 37.97.64.0/19 maxlen: 19
185.24.140.0/22 maxlen: 22
88.213.224.0/19 maxlen: 19
37.97.69.0/24 maxlen: 24
37.97.70.0/24 maxlen: 24
217.181.128.0/17 maxlen: 17
37.97.80.0/23 maxlen: 23
178.255.160.0/21 maxlen: 21
185.6.92.0/22 maxlen: 22
37.97.96.0/20 maxlen: 20
195.135.0.0/17 maxlen: 17
195.135.0.0/18 maxlen: 18
217.74.96.0/20 maxlen: 20
185.65.248.0/22 maxlen: 22
157.143.128.0/17 maxlen: 17
81.93.0.0/19 maxlen: 19
217.181.250.0/23 maxlen: 23
109.235.239.0/24 maxlen: 24
185.32.208.0/22 maxlen: 22
178.157.16.0/20 maxlen: 20
195.135.48.0/24 maxlen: 24
178.157.32.0/20 maxlen: 20
65.39.64.0/19 maxlen: 19
185.8.252.0/22 maxlen: 22
185.42.176.0/22 maxlen: 22
2a0c:600::/29 maxlen: 29
2a02:c440::/29 maxlen: 29
2a02:6e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213045997 (0xcb2d2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jan 1 11:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdf085abea73d84dfa920ea88a93436e7fbd6d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:39:51:8d:3c:71:9e:9e:dd:f4:a4:23:14:
16:ed:d3:ef:60:03:e5:fa:7f:0e:c7:fe:08:14:be:
a5:4a:ff:d4:55:bc:c5:d0:b6:5a:19:64:f7:a2:80:
2b:1b:ac:bb:29:5d:09:36:73:43:27:4e:62:a8:e6:
10:c3:9c:ed:78:89:36:3a:1d:0e:e4:5b:ae:a9:6b:
d7:32:d3:77:00:69:76:09:b7:34:01:16:ea:0c:7a:
7a:d4:ed:bf:7e:39:76:cd:f9:9b:18:f3:d0:e5:2c:
bf:35:7a:9c:8a:a2:ce:7d:88:07:8a:f1:28:39:f4:
82:f7:13:5b:4d:28:89:d6:2d:9e:87:b3:8c:3a:15:
1f:3e:68:e6:23:59:53:a9:4b:d5:8e:a6:d7:d5:5a:
88:9b:f5:ca:d3:8e:36:6c:49:10:09:0c:1c:7e:98:
d7:c0:32:bf:9a:e6:26:5c:44:b7:69:e3:a4:75:64:
04:65:e4:be:f0:b5:bf:b1:71:b2:ed:f1:41:c4:00:
7f:80:7f:e6:76:4b:b5:89:dc:ff:7f:61:6a:3b:7f:
90:91:5a:41:19:77:c6:23:36:73:1a:23:8f:8b:76:
7c:4c:dd:60:69:9c:21:5d:d8:5d:93:62:7d:aa:7e:
11:4b:41:72:64:80:b1:cb:b8:f7:7d:1c:7c:75:30:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F0:85:AB:EA:73:D8:4D:FA:92:0E:A8:8A:93:43:6E:7F:BD:6D:58
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/vfCFq-pz2E36kg6oipNDbn-9bVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.64.0-37.97.111.255
65.39.64.0/19
81.93.0.0/19
88.213.224.0/19
109.235.239.0/24
157.143.128.0/17
178.157.16.0-178.157.47.255
178.255.160.0/21
185.6.92.0/22
185.8.252.0/22
185.24.140.0/22
185.32.208.0/22
185.42.176.0/22
185.65.248.0/22
195.135.0.0/17
217.74.96.0/20
217.181.128.0/17
IPv6:
2a02:6e8::/32
2a02:c440::/29
2a0c:600::/29
Signature Algorithm: sha256WithRSAEncryption
79:f9:3e:53:14:af:b7:33:9a:25:f6:a2:e0:a7:f7:fc:50:d2:
10:1f:a4:ca:4b:7f:85:72:f8:b3:b3:e0:80:12:7d:93:0e:12:
61:30:98:b2:c8:ec:af:fd:07:52:3f:f8:6d:a3:54:1f:3b:77:
8a:26:26:74:1c:10:b6:4d:76:02:16:62:26:69:86:3b:92:51:
ac:76:8e:fd:7d:a8:d6:d5:7a:98:bc:9f:89:27:f4:5f:c7:32:
15:23:a8:16:10:28:e7:89:56:89:1d:4d:76:be:3e:91:81:e3:
de:78:d5:67:e9:dd:d4:c9:52:46:91:3f:27:b5:6c:fc:a9:46:
7c:f5:26:f4:d8:91:56:dd:68:f3:e7:af:af:7f:84:09:dd:f7:
a4:12:02:b5:b8:f1:37:0f:2b:69:3b:96:91:f5:d9:62:b1:c1:
10:96:83:2b:2d:4d:c8:86:c0:fb:56:55:76:68:2a:5a:99:8d:
c1:96:9b:9f:fb:bc:a1:0a:b3:d3:07:bb:08:fe:94:00:ef:bd:
be:d0:cf:5d:f0:c0:4d:ed:82:b2:88:17:3e:34:cc:d5:c8:ce:
3f:6e:ac:a8:77:e1:61:ea:e2:2f:28:3f:64:83:85:79:f7:6c:
c0:7b:a9:e9:3c:20:01:3c:0d:cd:21:9b:b4:ba:e3:50:32:a8:
4e:43:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org