Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/3YLrnS9WNONLz-T31-dmGZAzj78.roa
File: 3YLrnS9WNONLz-T31-dmGZAzj78.roa (raw, json)
Hash identifier: 3qwjSalARli3SYn2U51LnuqswQisVUPATKmQ/qk+e7I=
Subject key identifier: DD:82:EB:9D:2F:56:34:E3:4B:CF:E4:F7:D7:E7:66:19:90:33:8F:BF
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 0181D8BBA78EAA619D44D00DE90CBCA1A6AF
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/3YLrnS9WNONLz-T31-dmGZAzj78.roa
Signing time: Thu 07 Jul 2022 12:56:25 +0000
ROA not before: Thu 07 Jul 2022 12:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28760
IP address blocks: 185.71.252.0/22 maxlen: 22
5.104.216.0/21 maxlen: 21
213.174.224.0/19 maxlen: 19
77.242.64.0/20 maxlen: 20
2a03:fa00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:bb:a7:8e:aa:61:9d:44:d0:0d:e9:0c:bc:a1:a6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jul 7 12:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd82eb9d2f5634e34bcfe4f7d7e7661990338fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:9e:1b:87:10:d2:63:98:24:3d:e1:f6:aa:
51:e0:18:8a:e2:be:9a:90:c0:db:ac:7e:c6:20:03:
ff:a1:fc:2a:e9:a2:cc:eb:be:1f:48:ef:1c:3b:84:
f3:ec:32:ba:47:e0:f6:d3:0b:c2:85:1f:61:46:52:
7e:44:26:24:36:cd:75:c9:8a:ca:d2:86:1a:75:e2:
2c:80:8d:50:fa:2e:2f:ab:ff:42:56:f5:e1:30:45:
1c:cf:f3:64:5f:91:17:6d:50:b2:d5:2d:dc:4a:cc:
ba:29:c4:bc:34:d7:a1:61:79:fa:aa:ba:3a:0a:c7:
3e:6e:c3:5f:6f:1e:90:05:d2:75:f3:85:77:fa:b4:
59:87:d7:7a:c9:b4:66:d6:c2:24:4c:1e:fa:63:2d:
3a:17:3d:db:1c:29:1b:24:c5:3d:9b:90:39:88:c7:
4a:d8:91:bc:cd:81:bd:54:ea:a7:eb:b4:18:0b:f9:
1f:89:81:0f:05:96:4a:63:01:3e:fb:2e:6a:02:c6:
a4:ca:9e:c0:a1:88:d2:6e:31:de:2c:dc:4b:a8:1c:
cb:14:a0:19:0d:24:5a:f6:bf:75:0f:9a:c8:aa:53:
81:ff:ac:2e:aa:44:a3:93:40:db:ea:a3:90:c0:6e:
bb:ed:7d:27:c6:c4:15:c0:94:44:cc:04:0f:1d:eb:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:EB:9D:2F:56:34:E3:4B:CF:E4:F7:D7:E7:66:19:90:33:8F:BF
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/3YLrnS9WNONLz-T31-dmGZAzj78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.216.0/21
77.242.64.0/20
185.71.252.0/22
213.174.224.0/19
IPv6:
2a03:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
96:a2:31:1c:ad:74:8e:60:5f:9b:36:e8:bc:7c:b9:a6:93:df:
ab:40:be:e5:82:86:c5:68:44:32:a2:0a:bd:e3:12:5f:06:8d:
ce:2a:23:07:34:e8:c2:86:6a:74:e0:f0:60:35:81:9d:62:b2:
98:f7:a9:f3:72:87:db:96:a7:b7:4c:b3:f3:a3:94:57:49:4d:
cc:4e:f2:ee:47:66:ea:93:73:da:56:d4:60:e4:86:38:9f:97:
76:16:a6:ab:23:ef:5e:6b:5d:5a:df:61:d3:c6:0e:e9:38:69:
0b:e3:7e:f4:b9:15:6a:e7:da:91:ac:19:31:e3:20:3f:21:ab:
0c:b9:db:43:84:ea:06:5c:74:23:91:51:8c:5b:3b:fd:d0:c5:
08:93:55:74:1c:6a:db:50:0a:5a:b1:a2:85:71:18:24:04:ca:
7e:91:89:7b:61:7f:cc:97:2e:8c:1a:6e:ae:b3:ff:4b:46:dd:
a1:92:35:f5:3e:48:16:fe:c5:3d:2c:bf:49:cb:1d:42:b1:a7:
8a:93:ea:8e:47:d9:f3:a2:7c:b0:d2:b0:12:73:fb:01:ed:26:
36:5d:4f:c1:70:80:44:6a:d9:1e:4b:cd:be:54:1b:3c:31:cf:
2b:f2:0e:8e:ed:fc:bb:7c:5e:f9:c8:9c:34:dd:f7:62:c6:1d:
f7:85:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:11 2023 by rpki-client on console-ams.rpki-client.org