Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/eLdpP0dWc20A0Afr89fkLN9upt4.roa
File: eLdpP0dWc20A0Afr89fkLN9upt4.roa (raw, json)
Hash identifier: MmvwXheqg0ZM2b1fUx0S4MxkjiVMbW3A8rbT9oSpQkA=
Subject key identifier: 78:B7:69:3F:47:56:73:6D:00:D0:07:EB:F3:D7:E4:2C:DF:6E:A6:DE
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 0980E98D
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/eLdpP0dWc20A0Afr89fkLN9upt4.roa
Signing time: Sat 01 Jan 2022 11:03:28 +0000
ROA not before: Sat 01 Jan 2022 11:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.9.159.0/24 maxlen: 24
185.9.156.0/24 maxlen: 24
185.9.157.0/24 maxlen: 24
185.9.158.0/24 maxlen: 24
185.118.142.0/24 maxlen: 24
178.20.224.0/24 maxlen: 24
185.118.143.0/24 maxlen: 24
178.20.225.0/24 maxlen: 24
178.20.226.0/24 maxlen: 24
185.118.140.0/24 maxlen: 24
178.20.229.0/24 maxlen: 24
178.20.230.0/24 maxlen: 24
178.20.231.0/24 maxlen: 24
178.20.227.0/24 maxlen: 24
178.20.228.0/24 maxlen: 24
37.123.96.0/24 maxlen: 24
37.123.97.0/24 maxlen: 24
37.123.98.0/24 maxlen: 24
37.123.99.0/24 maxlen: 24
37.123.100.0/24 maxlen: 24
37.123.101.0/24 maxlen: 24
37.123.102.0/24 maxlen: 24
37.123.103.0/24 maxlen: 24
2a00:9bc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159443341 (0x980e98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Jan 1 11:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78b7693f4756736d00d007ebf3d7e42cdf6ea6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:ea:34:1f:22:b7:7a:27:23:7f:24:f4:d1:
38:3f:bd:41:88:15:f5:4d:cc:a6:ed:3d:40:da:28:
87:bd:23:d7:98:98:78:1c:32:f4:3d:02:cd:7f:75:
00:d3:84:a5:ea:32:f3:77:5a:a1:f1:6c:d0:c5:cc:
6a:3e:0c:41:f5:cc:5b:c0:fa:63:51:6d:0c:2e:16:
3c:db:e1:f8:d7:25:a7:87:bc:9e:ce:77:03:08:c2:
b9:89:53:d9:89:36:81:18:77:17:89:c1:c2:f6:93:
a5:b2:5c:ca:b3:16:4e:5f:35:26:db:89:30:e2:91:
99:05:17:b8:8c:d9:7c:86:13:f0:66:87:b9:b5:f4:
e1:91:8a:a3:8f:63:5f:14:b4:e5:fb:6b:92:73:6d:
b8:e8:c7:f6:b3:8d:a3:f6:b0:ee:2e:91:55:c4:78:
80:bf:9f:0c:c7:5b:c2:3c:2d:f1:8c:e4:f9:55:16:
d7:cc:d7:e3:5c:2b:de:3f:e7:d8:ef:26:12:15:7b:
5d:a5:dc:bb:f3:d5:b3:4c:5b:00:86:8b:e7:f9:11:
ae:29:f8:69:df:16:40:45:43:51:fc:3d:83:8f:98:
0f:4e:ee:b7:91:63:53:17:b4:30:84:d4:70:3c:80:
84:d4:a1:c1:ed:2a:54:89:a1:1e:6f:95:05:1d:80:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:69:3F:47:56:73:6D:00:D0:07:EB:F3:D7:E4:2C:DF:6E:A6:DE
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/eLdpP0dWc20A0Afr89fkLN9upt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.96.0/21
178.20.224.0/21
185.9.156.0/22
185.118.140.0/24
185.118.142.0/23
IPv6:
2a00:9bc0::/32
Signature Algorithm: sha256WithRSAEncryption
87:76:d5:91:94:0a:b8:5e:ec:a5:0a:1f:11:6e:18:ad:f1:55:
58:7d:44:99:8a:b4:24:29:9e:5e:a0:f6:0b:52:2f:7f:88:5f:
42:6d:29:39:c8:68:12:37:f1:95:9a:0e:b2:e6:15:e9:95:98:
a2:c3:88:c4:3d:b2:1a:f7:52:fc:7b:3e:9d:cb:24:24:c8:3b:
9c:82:5a:55:62:b7:3b:b9:e8:55:a0:eb:4e:8f:e9:c2:e7:09:
ec:6b:13:9e:39:51:ae:e7:32:49:30:2a:f3:a3:07:ee:19:87:
35:22:a9:2a:70:76:80:f6:f0:04:91:0f:14:10:2d:7f:f0:e9:
98:da:40:3d:f5:7b:13:36:bd:84:da:c3:7f:ef:87:74:68:e6:
08:da:3a:81:17:0c:f0:89:56:36:f1:aa:07:83:e8:55:99:2d:
7a:da:b2:ed:df:ed:47:a1:a1:9f:bf:d7:ac:2b:72:bb:ca:bd:
a7:e0:27:53:86:35:9e:65:f5:f8:6b:31:ba:79:62:8d:69:38:
e2:fb:b1:78:da:a9:54:30:d6:02:5d:93:d4:13:46:78:59:a8:
5c:1a:83:44:bb:84:dc:d4:39:49:17:a8:f8:9b:9e:7f:9a:64:
c0:5c:fa:67:70:2a:61:b4:2d:74:87:3b:64:dc:1a:a1:d6:2d:
8a:ef:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:40 2024 by rpki-client on console-fra.rpki-client.org