Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Vj5556mWfVnSO0-KHHI70xbb_r8.roa
File: Vj5556mWfVnSO0-KHHI70xbb_r8.roa (raw, json)
Hash identifier: xL7BZiXU6IFPNvPmZ+AtuCUgfj/9HVqVLJWDt9DbAFg=
Subject key identifier: 56:3E:79:E7:A9:96:7D:59:D2:3B:4F:8A:1C:72:3B:D3:16:DB:FE:BF
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 210D363D
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Vj5556mWfVnSO0-KHHI70xbb_r8.roa
Signing time: Sat 04 Jun 2022 13:42:20 +0000
ROA not before: Sat 04 Jun 2022 13:42:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59592
IP address blocks: 185.14.92.0/22 maxlen: 22
94.154.51.0/24 maxlen: 24
94.154.48.0/21 maxlen: 24
94.154.49.0/24 maxlen: 24
94.154.54.0/24 maxlen: 24
94.154.53.0/24 maxlen: 24
94.154.52.0/24 maxlen: 24
176.100.33.0/24 maxlen: 24
176.100.32.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
37.114.38.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.39.0/24 maxlen: 24
2a00:ccc2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554513981 (0x210d363d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jun 4 13:42:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=563e79e7a9967d59d23b4f8a1c723bd316dbfebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:6e:70:1c:9b:94:df:c4:80:5a:2f:5c:be:
0e:d8:71:1f:88:c3:e1:72:0b:99:92:ff:be:bb:82:
4f:ad:ba:ff:ef:cb:9e:75:da:74:78:7f:bb:40:7f:
b9:a9:b9:b5:72:1c:13:06:91:11:a4:62:1f:68:c4:
fb:b1:2b:09:12:3c:41:d2:47:90:b9:7a:8b:d9:f2:
60:96:e6:27:6c:2e:29:08:a4:36:dd:4d:2b:f0:71:
91:da:45:92:ca:63:fe:09:20:3f:08:36:ec:85:cd:
93:86:39:a4:f2:6e:b2:92:23:46:27:9c:85:30:9f:
1a:03:bb:87:d2:e9:ef:6d:4b:9d:d4:60:d0:4a:e9:
01:b5:1e:4b:49:09:66:ea:c6:d8:74:34:51:bb:f9:
c9:ff:a3:f3:82:0a:3b:62:7b:a8:fa:66:a6:e4:cb:
1d:b2:f8:83:44:a0:e7:4e:8e:4d:ef:a0:97:1c:f0:
a6:97:a7:2f:59:1c:50:bd:29:fa:28:4b:0b:31:34:
ce:a5:e5:c9:4c:e8:21:ca:05:46:bb:f3:2e:9b:33:
02:08:82:b9:c4:a7:79:2c:2c:81:96:88:e5:9c:9c:
43:30:85:35:68:25:7a:9c:7b:2a:86:bc:96:7a:ec:
81:d7:ef:1f:ff:8c:fb:d5:5c:78:3a:4e:e0:81:c4:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:79:E7:A9:96:7D:59:D2:3B:4F:8A:1C:72:3B:D3:16:DB:FE:BF
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Vj5556mWfVnSO0-KHHI70xbb_r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.35.0-37.114.36.255
37.114.38.0/23
94.154.48.0/21
176.100.32.0/22
185.14.92.0/22
IPv6:
2a00:ccc2::/32
Signature Algorithm: sha256WithRSAEncryption
55:22:66:6f:3b:ed:24:79:c8:3b:8f:ce:ab:2e:4b:96:79:08:
55:fb:69:4b:9a:68:2d:de:90:ab:fa:2c:01:8a:72:11:02:88:
5d:39:dc:eb:30:26:43:39:2b:b1:84:b1:6c:30:99:dd:b5:b1:
7d:86:45:a1:53:39:9a:cf:23:4c:6c:93:8f:32:01:e4:ac:12:
e9:ba:9d:3f:95:3f:e1:31:ed:fc:8a:32:c2:d2:f0:e6:f6:c3:
f0:a2:50:08:87:cd:c1:82:dc:94:33:43:ee:64:5a:82:85:4d:
19:e4:14:d9:95:98:dc:50:76:48:cd:0f:ba:91:e0:ee:c2:9f:
52:64:1f:6e:a9:35:67:e3:78:f8:74:b1:38:e9:0f:66:69:91:
2e:7d:66:02:88:27:5e:8e:e6:c6:10:28:57:b2:05:0c:49:d0:
ec:f0:06:d2:a3:76:b0:85:0c:fc:3a:13:da:ce:71:f4:23:4c:
95:c0:cd:ce:55:5c:20:4e:30:70:f1:db:b5:f2:6b:87:fc:77:
5a:7f:6a:c2:97:4a:71:cb:0a:4d:67:48:99:4e:64:51:86:4a:
64:2e:70:64:75:5b:71:d6:3d:75:7a:11:ea:96:84:0b:2e:0c:
c1:5c:37:c0:d4:3c:f5:4a:5c:c5:2e:ba:28:21:5f:c8:20:a7:
96:7d:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org