Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vCbXj-tYZ0jHnhVn8-_kMDZJIjo.roa
File: vCbXj-tYZ0jHnhVn8-_kMDZJIjo.roa (raw, json)
Hash identifier: ZqiJWQ6O36ZkogH9UbDAPNlxJboJymx1n4lGZhDxQq0=
Subject key identifier: BC:26:D7:8F:EB:58:67:48:C7:9E:15:67:F3:EF:E4:30:36:49:22:3A
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 03C476F7
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vCbXj-tYZ0jHnhVn8-_kMDZJIjo.roa
Signing time: Sat 01 Jan 2022 03:53:24 +0000
ROA not before: Sat 01 Jan 2022 03:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57794
IP address blocks: 37.98.192.0/21 maxlen: 21
37.98.192.0/22 maxlen: 22
37.98.196.0/22 maxlen: 22
188.117.228.0/22 maxlen: 22
188.117.232.0/21 maxlen: 21
188.117.232.0/22 maxlen: 22
82.192.2.0/23 maxlen: 23
82.192.2.0/24 maxlen: 24
82.192.3.0/24 maxlen: 24
188.117.236.0/22 maxlen: 22
188.117.240.0/22 maxlen: 22
188.117.240.0/23 maxlen: 23
188.117.242.0/23 maxlen: 23
188.117.248.0/23 maxlen: 23
188.117.250.0/23 maxlen: 23
188.117.248.0/22 maxlen: 22
188.117.192.0/21 maxlen: 21
188.117.192.0/22 maxlen: 22
188.117.196.0/22 maxlen: 22
188.117.216.0/23 maxlen: 23
188.117.216.0/22 maxlen: 22
188.117.218.0/23 maxlen: 23
188.117.224.0/21 maxlen: 21
188.117.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63207159 (0x3c476f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 1 03:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc26d78feb586748c79e1567f3efe4303649223a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:f3:d8:d7:ca:65:2d:be:9b:0c:70:b8:7f:
61:e2:ba:db:66:9b:76:c8:ef:32:73:9a:91:61:a6:
4e:ac:03:1f:b2:5d:f4:87:04:60:59:41:e9:9a:a7:
35:bc:f6:c3:d0:2f:fa:27:8f:03:89:42:66:d5:db:
45:b8:72:e4:bb:57:14:7a:22:43:a6:78:61:11:cf:
da:8c:e4:51:9d:a4:77:76:cc:40:dd:af:3e:cd:f4:
a6:19:b0:d6:0b:1e:7e:66:6b:50:81:3f:af:ea:e2:
28:cc:11:ba:e6:39:bb:5e:92:41:64:0c:a5:f9:94:
da:9e:9f:94:9e:2e:ad:57:d3:8f:55:38:7c:c0:9f:
ee:32:ff:06:8b:1c:9c:40:8d:5d:e5:69:43:3f:cf:
32:88:72:62:a3:d1:76:88:dc:6c:82:15:e6:bc:d7:
30:f9:15:3a:76:91:7e:c9:d2:56:d0:1b:25:35:9e:
c3:74:5f:60:72:2a:55:72:45:f9:0c:a1:6f:a4:5c:
ac:c4:d1:33:37:95:60:d5:59:c5:09:2a:d3:ca:c2:
54:ea:91:a0:e8:9f:3b:39:49:a8:29:10:bb:c0:35:
f3:f7:8c:c4:fc:dd:40:88:02:02:2c:13:7d:2a:15:
4a:ae:60:d1:d6:01:88:2f:14:19:d7:b6:03:6e:52:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:D7:8F:EB:58:67:48:C7:9E:15:67:F3:EF:E4:30:36:49:22:3A
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vCbXj-tYZ0jHnhVn8-_kMDZJIjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.192.0/21
82.192.2.0/23
188.117.192.0/21
188.117.216.0/22
188.117.224.0-188.117.243.255
188.117.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:76:44:a0:14:e8:5d:e0:33:13:e6:34:84:4c:3a:60:ba:cc:
8a:92:2b:6b:95:66:1a:40:ca:39:66:5e:13:13:8d:75:e3:1e:
47:68:84:6a:ba:10:87:6e:39:7a:32:a6:a7:bd:2c:53:90:b8:
e7:29:26:50:d0:8e:44:27:81:03:c9:31:db:b2:7b:df:54:f6:
11:b1:3b:44:07:fc:ca:29:a1:6b:eb:52:26:c6:72:ae:09:38:
99:0d:49:a1:77:30:3a:b1:32:63:8d:5d:48:56:c3:e6:14:4e:
03:25:3c:2f:54:f0:33:51:80:d6:32:32:59:ea:8e:f0:11:2b:
39:5a:d5:12:a4:1c:b6:74:a8:86:8a:56:d6:6b:19:04:9d:5a:
1c:84:76:d8:ff:fd:5a:9a:f8:83:b3:df:e8:92:fd:a7:59:b3:
bf:8e:18:d8:59:c9:b9:78:92:37:d0:da:7e:4f:a2:f1:e5:18:
f9:08:57:2b:91:7d:bd:8d:50:25:87:82:d3:16:57:f4:38:ab:
de:23:dd:ce:f1:27:e9:2d:0a:18:36:5e:54:62:8c:a8:cf:cb:
1f:dc:db:a4:4b:a3:03:2d:4a:d0:8c:18:97:98:78:e7:b2:e1:
65:8d:0c:59:71:0d:0d:80:0b:0b:14:54:d5:c0:dd:08:75:c5:
ae:65:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:41 2024 by rpki-client on console-ams.rpki-client.org