Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/piYmbCpa15kCca4nATj20Svn0P0.roa
File: piYmbCpa15kCca4nATj20Svn0P0.roa (raw, json)
Hash identifier: URY+03ta3YnHMLOsAuseLJeo3LslZpi4/0iidpmWB6Q=
Subject key identifier: A6:26:26:6C:2A:5A:D7:99:02:71:AE:27:01:38:F6:D1:2B:E7:D0:FD
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 042568AD
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/piYmbCpa15kCca4nATj20Svn0P0.roa
Signing time: Sat 01 Jan 2022 12:06:23 +0000
ROA not before: Sat 01 Jan 2022 12:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47330
IP address blocks: 188.213.66.0/24 maxlen: 24
188.213.67.0/24 maxlen: 24
188.213.68.0/24 maxlen: 24
188.213.65.0/24 maxlen: 24
37.156.28.0/23 maxlen: 23
92.114.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69560493 (0x42568ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 12:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a626266c2a5ad7990271ae270138f6d12be7d0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:86:98:fe:0a:b5:59:42:54:d3:fe:6e:e8:
9e:51:62:d3:be:06:36:c7:57:d2:f9:af:2c:47:ce:
23:79:26:67:29:cf:16:cf:14:ce:1c:62:f6:ed:54:
59:9f:11:ae:8f:c8:4b:2a:2d:86:96:e4:b7:0b:f3:
13:f6:64:d6:df:4e:12:71:56:7e:a7:16:a8:65:d0:
05:66:ef:1e:2c:ae:05:7c:22:6f:c0:83:05:69:ed:
fc:ba:ac:d2:b6:12:41:c1:cc:5c:8b:09:c7:cd:38:
43:4d:69:74:12:d9:01:ec:a4:ca:fc:60:4d:d2:22:
d2:db:f0:0b:82:c1:ca:02:6d:6b:c6:b3:d0:94:b6:
56:95:ff:0d:27:f6:f4:56:54:2c:0a:bf:7e:1d:cc:
33:96:ee:5c:ef:03:43:4e:fc:dd:f9:21:b5:05:0d:
4e:d0:e5:c7:67:bf:92:a5:02:bf:18:49:54:8f:78:
d4:eb:fd:3d:10:8c:d2:02:29:87:01:e3:0f:70:41:
33:ab:81:74:b7:5a:9c:01:74:f0:b6:11:f7:9f:44:
6e:95:b2:88:d1:b5:cc:14:24:6b:b7:78:88:5e:44:
50:d1:c1:b0:d0:36:4b:b9:58:ba:5c:6d:89:c2:ad:
74:d7:9f:02:58:35:e0:d9:00:e1:75:27:8b:23:fe:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:26:6C:2A:5A:D7:99:02:71:AE:27:01:38:F6:D1:2B:E7:D0:FD
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/piYmbCpa15kCca4nATj20Svn0P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.28.0/23
92.114.16.0/22
188.213.65.0-188.213.68.255
Signature Algorithm: sha256WithRSAEncryption
24:f3:7a:61:bd:66:cd:d4:44:52:34:42:e7:35:8a:2f:bc:04:
fb:9e:64:db:53:3a:70:d9:a5:f2:ee:67:22:8d:61:89:44:5d:
f6:7d:40:9f:e3:90:68:16:7c:e5:e8:5b:32:7a:dc:54:95:3c:
37:c4:8d:78:52:c7:32:8f:29:0e:7b:fc:d1:5b:18:87:c9:0f:
8f:02:93:a1:a8:50:42:f4:88:ae:31:94:12:85:6a:d6:a1:36:
3d:59:13:89:ef:ea:70:d5:ad:7d:40:c8:db:07:a0:0a:df:db:
a4:c2:ce:c7:50:bb:1f:12:e9:58:8e:f9:8c:34:e0:80:da:02:
fc:c4:fa:b5:a9:49:2a:2b:d9:56:b5:4f:e2:9e:66:19:59:e8:
a5:c5:25:29:ea:79:8c:15:5a:49:96:5a:5d:b0:0c:8e:96:31:
38:bb:e9:f7:1f:27:99:36:5a:bd:09:f6:fa:cf:31:68:1e:66:
ec:5e:8e:94:82:7e:d8:b2:32:eb:28:1c:e9:41:d2:9a:dc:e4:
eb:01:bc:8c:75:a6:6f:0b:10:d7:e2:e1:b8:00:e5:eb:8b:da:
55:3b:d8:55:35:2f:c0:3f:ad:b0:f7:72:a6:07:c2:07:15:18:
2d:f9:cc:0d:40:ad:bb:62:79:e8:91:30:f4:85:57:eb:39:22:
e7:d8:80:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:19 2024 by rpki-client on console-ams.rpki-client.org