Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/i1hPgLhvewjwJTkNZW8VsNz-zJU.roa
File: i1hPgLhvewjwJTkNZW8VsNz-zJU.roa (raw, json)
Hash identifier: HnIKJzoLSl2voTnGeDmJl/r0+H6i6qtYZX+9uY8Le/w=
Subject key identifier: 8B:58:4F:80:B8:6F:7B:08:F0:25:39:0D:65:6F:15:B0:DC:FE:CC:95
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 032639EF
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/i1hPgLhvewjwJTkNZW8VsNz-zJU.roa
Signing time: Sat 01 Jan 2022 12:02:32 +0000
ROA not before: Sat 01 Jan 2022 12:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34358
IP address blocks: 37.251.255.0/24 maxlen: 24
89.36.129.0/24 maxlen: 24
89.36.128.0/23 maxlen: 23
89.36.128.0/24 maxlen: 24
89.36.130.0/24 maxlen: 24
89.36.132.0/23 maxlen: 24
89.36.134.0/24 maxlen: 24
89.36.135.0/24 maxlen: 24
93.115.112.0/21 maxlen: 21
37.251.248.0/21 maxlen: 21
46.102.144.0/22 maxlen: 22
89.42.11.0/24 maxlen: 24
193.242.120.0/24 maxlen: 24
188.215.48.0/21 maxlen: 21
89.38.248.0/24 maxlen: 24
89.38.250.0/23 maxlen: 23
89.38.249.0/24 maxlen: 24
89.38.252.0/22 maxlen: 22
89.45.192.0/21 maxlen: 21
89.45.192.0/23 maxlen: 23
193.239.130.0/23 maxlen: 23
91.200.120.0/22 maxlen: 22
91.200.120.0/23 maxlen: 23
91.200.122.0/23 maxlen: 23
89.32.44.0/24 maxlen: 24
89.32.44.0/22 maxlen: 22
89.45.168.0/21 maxlen: 21
37.251.160.0/20 maxlen: 20
109.95.8.0/21 maxlen: 21
94.24.76.0/23 maxlen: 23
94.24.78.0/24 maxlen: 24
94.24.72.0/22 maxlen: 22
94.24.29.0/24 maxlen: 24
37.251.128.0/19 maxlen: 19
94.24.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52836847 (0x32639ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 1 12:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b584f80b86f7b08f025390d656f15b0dcfecc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:fc:3e:ee:54:f8:22:7f:26:6f:eb:5b:b1:
ee:a8:ef:1d:be:1b:f1:c5:c2:07:2d:07:de:bc:ca:
12:71:8c:c4:3c:b3:3b:07:4f:d4:e1:c7:08:55:64:
30:a3:67:41:4e:4e:dd:2f:74:54:ab:56:c1:67:f1:
8b:38:85:66:74:05:49:08:fb:fa:5f:83:57:f2:49:
70:24:ef:c6:3a:ff:62:35:53:ea:44:84:8a:ec:d0:
32:3c:c6:08:32:ce:e9:0c:1b:5d:df:4c:71:de:10:
a3:cb:2a:76:aa:f7:f4:e0:4c:25:1b:0d:4f:38:47:
79:68:7b:cd:7d:e7:00:c4:17:e5:36:f1:c2:65:a7:
30:4c:b2:70:72:2c:3a:8b:35:79:54:49:c4:34:3c:
8e:0b:d9:47:ad:5b:7d:f6:9f:bd:ac:c2:58:d6:da:
fe:38:c6:a2:3a:b3:25:a9:ed:bf:33:18:02:c3:b8:
b1:6d:47:55:31:47:1f:fc:6a:4c:31:2f:bf:01:86:
47:40:bd:68:cf:1e:30:c5:ee:47:a4:ec:a4:51:41:
09:90:41:4f:26:d5:24:81:bf:32:e8:c9:04:98:90:
d6:ab:d5:b1:f0:28:06:27:c3:04:70:7b:57:fd:67:
b5:3c:bc:dd:b7:de:4e:b0:6a:0b:63:0a:e1:37:1e:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:58:4F:80:B8:6F:7B:08:F0:25:39:0D:65:6F:15:B0:DC:FE:CC:95
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/i1hPgLhvewjwJTkNZW8VsNz-zJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.128.0-37.251.175.255
37.251.248.0/21
46.102.144.0/22
89.32.44.0/22
89.36.128.0-89.36.130.255
89.36.132.0/22
89.38.248.0/21
89.42.11.0/24
89.45.168.0/21
89.45.192.0/21
91.200.120.0/22
93.115.112.0/21
94.24.29.0/24
94.24.48.0/21
94.24.72.0-94.24.78.255
109.95.8.0/21
188.215.48.0/21
193.239.130.0/23
193.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ab:2f:14:c7:bf:6b:eb:00:83:68:22:da:ad:24:87:aa:22:
45:83:a9:19:50:9a:76:98:b3:ae:72:d1:6f:da:85:b0:20:0e:
dc:36:e7:a8:dd:b1:6c:a4:9c:9c:0a:aa:56:23:9d:40:84:98:
86:97:2e:e2:04:48:f0:05:1b:6a:8c:14:c4:b4:df:6e:4b:bb:
8a:9e:37:09:bd:c4:62:9d:22:14:7b:87:f7:a6:b1:da:ea:fe:
20:af:12:6e:ad:86:b3:0c:48:31:84:94:bd:6b:ae:fa:86:b2:
ff:91:5d:12:bb:75:2a:51:3c:78:47:e7:0b:d8:b2:57:80:e2:
ed:5e:92:d1:62:57:f9:af:e3:d5:0c:6d:e9:72:54:7b:7f:55:
aa:46:37:4f:99:da:87:f1:6f:c3:4d:94:56:28:a2:e2:ac:0b:
24:8a:43:46:91:82:54:e4:f8:33:a7:67:27:e4:7f:23:b2:f5:
10:32:d4:9e:1e:e7:15:b5:24:d1:e2:b6:95:f1:41:cb:36:fc:
33:ad:6f:f0:b2:8c:65:8c:d3:d3:b6:13:b4:60:66:eb:3d:75:
53:27:14:1a:eb:2a:2e:65:8c:d8:3d:5e:f1:85:c7:11:a2:b9:
32:49:99:a4:84:a4:50:77:2e:3d:61:a2:c6:6a:c8:cf:8b:4e:
6e:a0:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org