Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/cf3cd2CQO3vLyReB_-yOTuaW0oY.roa
File: cf3cd2CQO3vLyReB_-yOTuaW0oY.roa (raw, json)
Hash identifier: HSxEJTbOuhTM5v4RJj7JtY6xb5aAAxZl26vjgoo+StM=
Subject key identifier: 71:FD:DC:77:60:90:3B:7B:CB:C9:17:81:FF:EC:8E:4E:E6:96:D2:86
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 209EBAE4
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/cf3cd2CQO3vLyReB_-yOTuaW0oY.roa
Signing time: Tue 19 Apr 2022 10:49:17 +0000
ROA not before: Tue 19 Apr 2022 10:49:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60461
IP address blocks: 94.154.50.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
176.100.38.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
37.114.33.0/24 maxlen: 24
37.114.44.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.39.0/24 maxlen: 24
37.114.51.0/24 maxlen: 24
37.114.50.0/24 maxlen: 24
37.114.48.0/24 maxlen: 24
37.114.46.0/24 maxlen: 24
37.114.45.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
37.114.54.0/24 maxlen: 24
37.114.52.0/24 maxlen: 24
2a00:ccc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547273444 (0x209ebae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Apr 19 10:49:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71fddc7760903b7bcbc91781ffec8e4ee696d286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a4:c6:44:e0:62:8c:5d:73:ed:25:75:ee:de:
ca:90:17:51:77:f7:9f:65:c7:15:88:16:b4:5c:a1:
6e:72:2a:fe:e1:30:a5:7c:53:73:ee:f9:37:90:a3:
16:1a:c2:6b:b0:c2:77:c3:68:7a:11:47:87:88:2a:
37:59:7e:52:b0:a8:60:2a:1b:57:6c:ce:3e:74:76:
8c:ac:28:19:b2:fa:1d:d5:74:77:43:b5:a3:36:49:
cf:a4:22:f4:b6:de:f3:a0:a0:1f:13:84:6e:1e:27:
9d:46:32:2a:38:67:31:50:9c:7e:4d:5b:af:05:18:
21:00:24:61:9c:79:54:3d:66:d5:d8:a6:ee:d3:86:
59:47:72:f6:ca:b7:07:d4:de:e2:45:fa:3c:b3:e7:
55:81:8e:48:99:4f:86:3e:e8:53:33:69:c6:d5:08:
75:20:df:f8:5f:8d:8b:2a:e8:58:0d:27:02:78:6d:
9d:f3:f5:5b:c1:2f:58:3b:ad:bf:63:7d:89:54:99:
4d:75:b8:a5:7c:36:a2:17:e3:96:28:b8:21:7f:ef:
a6:ea:4b:f6:d8:10:a1:f3:af:d5:df:97:bf:6e:19:
c9:d0:7d:13:58:b6:d1:53:f9:2f:d2:f5:4a:e6:b3:
17:c5:ad:f8:ea:6d:da:6d:fb:81:b4:b8:79:9e:2a:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:DC:77:60:90:3B:7B:CB:C9:17:81:FF:EC:8E:4E:E6:96:D2:86
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/cf3cd2CQO3vLyReB_-yOTuaW0oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.33.0/24
37.114.39.0/24
37.114.43.0-37.114.46.255
37.114.48.0/24
37.114.50.0-37.114.52.255
37.114.54.0/24
37.114.58.0/24
43.251.160.0/23
94.154.50.0/24
176.100.36.0/22
IPv6:
2a00:ccc3::/32
Signature Algorithm: sha256WithRSAEncryption
7f:f5:e0:2b:17:1d:a6:e1:d7:9d:e1:ba:e3:f0:ab:3a:67:e6:
73:dd:08:f2:ea:d5:48:46:dc:f3:38:40:be:de:49:40:a4:b4:
61:5f:e2:23:a4:70:3a:cb:55:e8:63:b0:7f:66:61:3f:b0:be:
1b:85:6d:09:48:8d:29:56:9a:8e:c2:5b:d3:d7:f9:d0:54:e5:
40:c4:3b:88:c5:d9:12:2f:bd:9d:00:a4:a9:5c:95:13:51:0a:
b6:5e:a6:43:f4:51:54:ae:bc:1c:79:10:26:b8:e8:be:9f:67:
94:ec:09:0d:21:2b:56:ea:da:1b:2e:ad:78:0e:23:7d:9f:52:
eb:62:7c:d2:50:25:3d:41:00:ae:bf:60:e0:5b:f4:ae:8e:1f:
b7:d8:e7:37:a3:0c:01:17:f3:3e:77:bf:c7:58:91:d1:6d:50:
d7:95:26:15:09:82:98:ed:ec:12:9d:8e:f1:96:03:79:7d:0b:
67:62:bd:01:9c:16:4b:de:6b:9a:4b:1f:d8:b1:07:81:66:9b:
d1:9c:3b:1e:5c:4b:ef:3f:27:4b:5c:89:68:66:51:92:a7:9a:
21:1d:b6:bb:d2:93:79:d1:df:87:54:f3:8a:d8:fd:09:75:86:
18:73:17:f2:e5:e3:40:d2:00:f1:07:e2:f0:8f:7c:37:14:40:
58:bb:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org