Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/9QqT3tMjB1BLi7EzkHRKpt0EFRs.roa
File: 9QqT3tMjB1BLi7EzkHRKpt0EFRs.roa (raw, json)
Hash identifier: 7sRIAuK6PvfWUq55DAKZzyBwSZR4HqPfEwNJgBi6ET8=
Subject key identifier: F5:0A:93:DE:D3:23:07:50:4B:8B:B1:33:90:74:4A:A6:DD:04:15:1B
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01853ECBCEDBA3D110604F5CC91D89976333
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/9QqT3tMjB1BLi7EzkHRKpt0EFRs.roa
Signing time: Fri 23 Dec 2022 11:43:42 +0000
ROA not before: Fri 23 Dec 2022 11:43:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47637
IP address blocks: 176.100.33.0/24 maxlen: 24
37.114.37.0/24 maxlen: 24
94.154.49.0/24 maxlen: 24
2a00:ccc4::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:cb:ce:db:a3:d1:10:60:4f:5c:c9:1d:89:97:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Dec 23 11:43:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f50a93ded32307504b8bb13390744aa6dd04151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:11:1b:c6:74:75:db:04:00:7f:43:21:ae:
31:d5:cd:d6:79:4b:53:14:8a:40:74:ac:07:b6:d0:
83:ba:0a:62:47:34:e9:19:f2:cb:fe:9f:5d:5d:d7:
51:90:c7:f3:f3:b7:df:e3:aa:92:62:2f:a9:76:99:
69:95:99:e1:e6:3c:d6:a2:12:79:dc:65:22:00:d6:
82:7c:16:69:95:97:f7:f9:d7:43:47:aa:81:5e:9f:
24:be:2e:65:02:c6:4d:d9:2e:cf:20:69:d9:a8:c0:
fa:ec:4c:aa:d2:da:43:dc:61:93:cb:eb:b0:18:14:
91:c0:91:34:bf:f5:9c:17:8d:c1:d2:d6:18:6e:ec:
e2:ba:7e:b0:d3:fe:fc:87:6d:ba:29:50:f6:69:c2:
87:54:db:95:0f:86:ca:5a:7a:cd:dd:ff:13:9f:61:
d8:0d:61:d6:57:9d:9a:05:ff:4c:cf:80:72:e5:d4:
e9:d2:f9:c6:6e:c6:99:8a:ff:43:cb:6e:dc:5f:25:
56:0d:87:9c:e8:88:5d:fd:01:11:9c:13:65:8a:07:
95:b3:0c:62:2b:89:34:c9:ac:a1:d7:db:f8:46:9a:
6b:c3:61:73:a5:d5:af:1c:7c:33:a3:1c:9e:36:80:
be:32:3c:73:0b:04:f7:0b:b9:42:b2:4b:a0:1b:08:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0A:93:DE:D3:23:07:50:4B:8B:B1:33:90:74:4A:A6:DD:04:15:1B
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/9QqT3tMjB1BLi7EzkHRKpt0EFRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.37.0/24
94.154.49.0/24
176.100.33.0/24
IPv6:
2a00:ccc4::/32
Signature Algorithm: sha256WithRSAEncryption
12:7a:18:74:54:52:f1:82:01:0c:0a:fa:e6:b2:3f:aa:bc:da:
48:19:9d:89:9f:b2:be:e9:79:e4:a7:5f:16:9c:c0:6b:4a:fe:
9d:a6:a4:ef:d0:ef:0e:a3:a4:62:f8:a0:63:ca:5d:d6:23:dd:
7f:6f:36:4c:fd:fb:53:db:ba:2a:26:3d:08:51:b5:d6:36:b3:
4d:4e:70:bd:d7:2e:ea:81:69:a2:10:f8:e9:f2:58:60:b9:15:
c9:5f:d8:53:93:31:7b:d5:1f:06:f6:9d:a6:f8:72:60:ae:7e:
9b:6c:01:bc:4b:12:41:f2:23:3d:56:ea:23:65:35:2e:e0:5a:
d9:89:5c:d4:5d:e1:52:5d:fe:3d:b7:bd:24:6c:57:91:25:11:
82:ee:a5:60:b0:e1:3e:46:97:fe:24:e3:70:e5:b8:f4:30:99:
9d:77:20:db:ca:08:b6:23:84:5d:2b:27:97:c7:fd:fa:b1:23:
3e:24:b4:69:07:55:27:d3:43:b8:ee:51:57:6c:8e:3d:24:19:
6f:29:a1:1c:28:19:a1:a1:9e:2e:7a:db:58:5d:6a:e4:bd:d4:
23:ab:51:28:5d:f3:9c:49:95:13:cc:b8:33:af:02:e8:26:40:
16:38:2d:71:66:bf:72:0b:49:9c:ab:6f:47:8f:34:e7:01:7e:
fd:ba:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org