Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bHp4GaE-zIX3EKzIliQtFUjg2SM.roa
File: bHp4GaE-zIX3EKzIliQtFUjg2SM.roa (raw, json)
Hash identifier: aIoKd4puxll+frWYiAzmmRlJERTMLu2zeTERBR1aTGo=
Subject key identifier: 6C:7A:78:19:A1:3E:CC:85:F7:10:AC:C8:96:24:2D:15:48:E0:D9:23
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 1FE8D3B2
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bHp4GaE-zIX3EKzIliQtFUjg2SM.roa
Signing time: Thu 03 Feb 2022 19:38:57 +0000
ROA not before: Thu 03 Feb 2022 19:38:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 185.14.94.0/24 maxlen: 24
185.14.95.0/24 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.33.0/24 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.34.0/24 maxlen: 24
37.114.38.0/23 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.42.0/24 maxlen: 24
37.114.46.0/24 maxlen: 24
37.114.50.0/24 maxlen: 24
37.114.47.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.53.0/24 maxlen: 24
37.114.56.0/24 maxlen: 24
37.114.55.0/24 maxlen: 24
103.252.88.0/22 maxlen: 22
37.114.61.0/24 maxlen: 24
37.114.60.0/24 maxlen: 24
37.114.62.0/24 maxlen: 24
37.114.59.0/24 maxlen: 24
43.251.162.0/23 maxlen: 23
176.100.33.0/24 maxlen: 24
176.100.32.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
2a00:ccc1:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535352242 (0x1fe8d3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Feb 3 19:38:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c7a7819a13ecc85f710acc896242d1548e0d923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:b5:a6:3b:27:0d:1f:cf:29:09:68:e4:b7:
9b:42:71:95:7c:ae:0c:59:27:06:84:dd:ea:9e:7a:
be:6d:84:fb:48:c9:ee:28:b1:f1:56:0f:15:a3:22:
46:8f:0e:f8:aa:27:15:dd:2f:ee:51:8a:72:b7:73:
eb:99:af:31:a5:c0:db:0e:6f:4a:9e:4b:9c:4f:2a:
1e:f2:d4:84:ea:13:8d:a9:e8:de:65:7d:e7:7c:19:
53:be:19:35:28:b1:64:27:77:ce:29:58:b7:b5:c8:
3c:9d:87:fc:de:88:b0:9a:6f:88:86:af:38:df:58:
eb:c6:26:cd:24:a6:60:02:b0:de:2d:fd:df:cd:a1:
8c:00:77:36:b5:bb:5b:87:ff:1c:97:f0:5c:b9:d3:
ca:40:45:2d:0b:d4:88:79:ce:a2:a2:e5:41:e8:14:
c7:68:2d:ff:18:92:a8:6d:3a:33:7e:49:7a:31:ee:
6c:ce:89:38:e8:22:9d:3b:58:c4:27:7f:83:7e:98:
28:32:96:01:bb:9c:d6:5d:13:db:43:f4:16:54:00:
1f:3c:cc:55:01:90:d8:27:24:75:98:58:e8:58:90:
34:fd:07:b2:e3:a7:ec:51:8a:15:07:55:42:53:77:
77:d6:71:d8:f5:d0:88:d5:1f:6a:51:d8:3a:fa:d2:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7A:78:19:A1:3E:CC:85:F7:10:AC:C8:96:24:2D:15:48:E0:D9:23
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bHp4GaE-zIX3EKzIliQtFUjg2SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.33.0-37.114.36.255
37.114.38.0/23
37.114.42.0/23
37.114.46.0-37.114.48.255
37.114.50.0/24
37.114.53.0/24
37.114.55.0-37.114.56.255
37.114.59.0-37.114.62.255
43.251.162.0/23
103.252.88.0/22
176.100.32.0/22
185.14.94.0/23
IPv6:
2a00:ccc1:100::/40
Signature Algorithm: sha256WithRSAEncryption
2f:d7:72:a8:c3:7a:dd:01:48:0a:43:07:b5:13:34:c4:b9:25:
aa:30:ef:1e:61:f0:13:04:2f:ed:12:06:49:96:79:2c:5e:d6:
0d:ae:24:1a:d0:32:28:3b:40:fb:41:fa:f5:73:13:a3:ec:b5:
93:ed:19:03:1c:49:bb:25:08:a7:2d:bf:ae:ae:30:1e:fc:e4:
4a:63:bd:bb:8e:ed:e0:19:e2:3c:57:07:4b:36:25:8d:7b:94:
dd:97:c4:2c:1a:7c:4f:39:06:12:28:d6:5d:23:2e:75:c9:1c:
1d:44:f8:f7:bc:02:1a:ea:f6:9a:ed:f9:dd:44:a6:eb:04:07:
81:5a:4f:cd:c2:ab:9e:96:a6:47:30:98:10:26:29:01:2e:e6:
42:c1:94:27:f9:ad:25:35:74:12:63:eb:f8:5d:e6:e4:52:a0:
15:57:2e:e6:9f:7e:1c:5c:3a:90:ed:d8:f1:97:2b:ea:9c:14:
0b:bb:57:aa:17:4d:ff:3e:52:ce:4d:5c:cf:8b:7d:68:17:76:
ba:58:a5:ec:8c:7f:b0:1c:46:2a:34:12:a7:58:12:22:8b:7c:
75:99:21:0a:34:08:34:f1:1f:2a:77:70:3b:81:64:36:58:27:
1b:24:15:10:aa:1d:52:d9:ce:eb:bd:8b:a0:9e:2d:fb:20:51:
37:f4:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org