Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/deZXlxsLct_10Gw0RmRc5UAF-os.roa
File: deZXlxsLct_10Gw0RmRc5UAF-os.roa (raw, json)
Hash identifier: vloXn2Ia+UxaKGXIQ+Ot+ig0nIiKc1xmb1s59PDfdj4=
Subject key identifier: 75:E6:57:97:1B:0B:72:DF:F5:D0:6C:34:46:64:5C:E5:40:05:FA:8B
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 01EDC6
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/deZXlxsLct_10Gw0RmRc5UAF-os.roa
Signing time: Sun 13 Mar 2022 13:49:16 +0000
ROA not before: Sun 13 Mar 2022 13:49:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50923
IP address blocks: 37.60.16.0/22 maxlen: 22
37.60.16.0/23 maxlen: 23
37.60.16.0/21 maxlen: 21
37.60.22.0/23 maxlen: 23
37.60.20.0/22 maxlen: 22
37.60.20.0/23 maxlen: 23
37.60.18.0/23 maxlen: 23
5.53.16.0/21 maxlen: 21
5.53.16.0/20 maxlen: 20
5.53.16.0/22 maxlen: 22
5.53.20.0/22 maxlen: 22
5.53.24.0/21 maxlen: 21
5.53.24.0/22 maxlen: 22
5.53.28.0/22 maxlen: 22
185.3.68.0/23 maxlen: 23
185.3.68.0/22 maxlen: 22
185.3.68.0/24 maxlen: 24
185.3.71.0/24 maxlen: 24
185.3.69.0/24 maxlen: 24
185.3.70.0/24 maxlen: 24
185.3.70.0/23 maxlen: 23
37.143.96.0/21 maxlen: 21
37.143.96.0/20 maxlen: 20
37.143.96.0/22 maxlen: 22
37.143.104.0/22 maxlen: 22
37.143.104.0/21 maxlen: 21
37.143.100.0/22 maxlen: 22
37.143.108.0/22 maxlen: 22
178.208.224.0/19 maxlen: 19
178.208.224.0/20 maxlen: 20
178.208.224.0/21 maxlen: 21
178.208.232.0/21 maxlen: 21
178.208.240.0/21 maxlen: 21
178.208.240.0/20 maxlen: 20
178.208.248.0/21 maxlen: 21
2a00:ae40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126406 (0x1edc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Mar 13 13:49:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75e657971b0b72dff5d06c3446645ce54005fa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:59:62:13:76:3f:59:16:15:23:e8:61:43:
ef:26:03:cd:4b:66:d2:4d:f4:b3:9e:df:3b:d9:3a:
0c:8e:c4:97:6d:91:73:bb:9d:6e:6a:34:16:4f:7d:
8d:69:61:20:71:01:7d:03:1e:27:9b:dc:7d:92:46:
b3:e3:f2:71:71:4f:fb:29:18:28:65:de:ac:4c:a6:
a6:c4:7e:6e:b0:0d:5b:6c:43:ec:ef:2f:31:ca:40:
1c:e9:9b:91:49:48:a7:a7:02:c9:a3:be:5a:48:26:
46:82:8f:a4:ef:09:87:ad:32:3c:98:17:ba:bf:72:
44:01:6c:ce:50:e4:6d:70:29:5c:93:24:eb:a1:22:
ce:0b:82:d8:b8:64:08:fe:03:3b:68:14:41:14:e2:
e7:7b:67:39:eb:67:df:39:e0:c3:13:31:a5:3c:bc:
b2:ac:56:0a:2c:a2:e6:7d:58:ea:75:83:27:b1:7c:
ab:c9:50:1c:4d:ae:f9:00:eb:18:0e:38:49:73:ea:
46:60:a9:53:47:3f:72:5e:bb:58:a4:b1:87:ff:17:
6c:68:1b:a0:01:99:63:0d:f0:61:89:f6:1d:1e:6f:
96:4c:a4:36:c9:94:05:a3:d8:6f:1c:52:5e:c2:7d:
ea:3f:72:37:c5:df:3e:ea:c7:8b:aa:62:7a:c7:65:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E6:57:97:1B:0B:72:DF:F5:D0:6C:34:46:64:5C:E5:40:05:FA:8B
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/deZXlxsLct_10Gw0RmRc5UAF-os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.16.0/20
37.60.16.0/21
37.143.96.0/20
178.208.224.0/19
185.3.68.0/22
IPv6:
2a00:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
b5:5c:9f:de:c8:ae:05:82:ba:1d:18:ef:bc:d1:6a:df:41:39:
53:bc:07:2b:ab:1e:7b:e3:d2:3b:91:b1:93:e1:82:4b:42:ef:
31:19:ef:31:21:0a:24:0f:15:bb:51:30:dc:8c:50:e3:e7:f9:
6c:fe:0f:36:99:49:5d:95:81:2d:c5:40:74:74:5e:05:d0:0d:
b1:2d:ff:f8:31:a4:0e:78:a9:72:a8:ef:0f:6e:9c:d1:c5:17:
22:76:5c:13:08:7b:91:6f:49:18:ac:7b:9b:3a:99:3b:36:e3:
81:d3:34:c5:3a:9e:73:80:03:1f:e3:14:ae:35:a0:0f:03:35:
94:4f:c4:ce:95:3a:c5:7d:01:67:23:17:7c:ca:b3:7d:c0:c9:
99:55:9c:9b:5b:ac:f5:13:94:39:bd:ca:92:22:42:d6:fa:33:
64:44:a3:32:dc:5b:f7:b7:cf:6e:27:06:fb:f9:52:be:08:b8:
fe:a0:82:59:39:09:86:80:76:41:28:ec:73:21:33:97:67:5c:
27:e1:75:87:36:54:7d:7e:98:5e:fb:86:74:d8:61:cf:ab:eb:
e7:ac:9f:bc:d5:e2:ed:35:35:f1:09:42:97:27:d7:f9:8a:90:
c2:9c:62:0f:1d:38:61:13:1f:5e:2c:b5:03:32:7a:11:1c:63:
d1:0c:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:21 2023 by rpki-client on console-ams.rpki-client.org