Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/ObdwjnqdL8FRSGCy-CkxZmkJCIo.roa
File: ObdwjnqdL8FRSGCy-CkxZmkJCIo.roa (raw, json)
Hash identifier: aW5akqJxV/skbeTm0j4Y5037uYykx9dkqqBYQkMD034=
Subject key identifier: 39:B7:70:8E:7A:9D:2F:C1:51:48:60:B2:F8:29:31:66:69:09:08:8A
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 38072ADC
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/ObdwjnqdL8FRSGCy-CkxZmkJCIo.roa
Signing time: Sat 01 Jan 2022 05:03:03 +0000
ROA not before: Sat 01 Jan 2022 05:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50300
IP address blocks: 185.48.164.0/22 maxlen: 24
185.32.72.0/22 maxlen: 24
5.102.168.0/21 maxlen: 24
109.74.240.0/20 maxlen: 24
176.12.104.0/21 maxlen: 24
2a00:1c10::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939993820 (0x38072adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Jan 1 05:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39b7708e7a9d2fc1514860b2f82931666909088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:9b:15:de:69:8a:d2:c1:e6:5d:6f:fc:73:
e1:76:6e:3d:75:77:5c:7e:86:b8:84:de:db:7b:d1:
29:b8:63:c0:74:8f:16:b7:be:c5:f7:fe:d1:f4:40:
f2:fc:ba:17:95:62:e8:34:27:a3:d3:d8:d2:a8:77:
a1:1d:90:bd:de:c9:58:7a:9a:d1:b8:67:67:dd:15:
36:ca:60:35:b0:5c:1a:dd:ec:15:b7:7e:d7:fe:bf:
ae:c3:ad:32:94:f3:18:55:f8:ff:97:15:8a:5f:b4:
0e:0c:52:6f:4b:a1:96:a0:40:54:82:36:52:d3:d5:
88:85:42:b2:1d:07:52:3d:66:99:0f:de:4d:ba:6f:
31:3c:31:87:85:bc:81:92:01:70:29:58:ba:54:ac:
b0:37:ad:23:1e:b1:b8:08:36:b5:b5:39:f1:93:74:
2a:93:9b:24:73:8a:7e:39:54:9b:ad:99:f1:4e:20:
96:6a:a7:60:70:86:73:ae:4c:f9:20:fa:71:46:69:
4c:7e:fe:ea:76:e4:5e:8f:59:40:bc:09:47:22:7e:
00:5c:dc:24:50:12:c3:b2:35:e1:dd:8c:72:b1:f3:
2a:5f:9b:05:1b:de:b9:4a:d0:f2:5d:c1:a9:82:c7:
b2:78:52:04:70:ef:9a:81:71:74:3e:b4:a9:36:ab:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B7:70:8E:7A:9D:2F:C1:51:48:60:B2:F8:29:31:66:69:09:08:8A
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/ObdwjnqdL8FRSGCy-CkxZmkJCIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.168.0/21
109.74.240.0/20
176.12.104.0/21
185.32.72.0/22
185.48.164.0/22
IPv6:
2a00:1c10::/32
Signature Algorithm: sha256WithRSAEncryption
39:f7:c8:4d:f5:22:38:db:b5:91:60:ea:83:dd:fe:b6:49:e6:
78:81:fd:f6:0f:8f:a8:bc:62:2b:17:86:d8:f6:65:85:84:14:
7b:aa:78:ca:65:95:dd:96:51:a9:f9:66:d3:52:0d:c1:93:4e:
e5:73:c0:8f:03:01:2b:6b:cf:5c:73:c6:3a:1b:6f:de:1c:a0:
c0:60:92:76:e9:e7:b0:46:23:db:60:04:1e:e3:96:1e:4c:9c:
1a:77:c3:51:da:cf:ad:aa:33:77:24:dd:91:b3:00:e2:4c:77:
c1:f6:85:c6:dc:b1:83:7a:a9:61:39:ee:13:ea:5e:e9:12:a6:
a1:fe:3b:d6:a4:34:64:e4:e2:99:92:f8:a2:18:d0:fc:6f:4a:
2f:1c:67:1e:79:3d:91:42:8b:07:ff:fa:a9:ad:00:56:e0:61:
24:d5:e8:99:38:8b:4a:68:40:5d:68:c1:11:5e:69:26:13:12:
0b:e7:1b:d9:ef:ba:5e:7d:f4:cd:4d:c5:4c:c8:3c:f7:c2:70:
25:22:8d:e7:04:fd:3a:3e:96:7d:c7:de:3b:20:10:10:9f:c8:
a0:d3:89:45:d7:66:f0:20:42:1c:0f:e2:4b:90:7c:88:f7:2a:
32:65:59:1b:e3:d0:cd:c7:b0:df:e6:5c:95:4b:ce:dc:7f:a1:
ad:ea:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:25 2023 by rpki-client on console-fra.rpki-client.org