Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/dyIas59Ai8xv1YqmCKMn4omAFi0.roa
File: dyIas59Ai8xv1YqmCKMn4omAFi0.roa (raw, json)
Hash identifier: e1XhyJH/G3Q8jB1ochncwnCwXvXAKaJue/a5loUjIC8=
Subject key identifier: 77:22:1A:B3:9F:40:8B:CC:6F:D5:8A:A6:08:A3:27:E2:89:80:16:2D
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 042C3E38
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/dyIas59Ai8xv1YqmCKMn4omAFi0.roa
Signing time: Tue 08 Feb 2022 08:27:18 +0000
ROA not before: Tue 08 Feb 2022 08:27:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8362
IP address blocks: 79.141.192.0/24 maxlen: 24
79.141.193.0/24 maxlen: 24
79.141.197.0/24 maxlen: 24
79.141.206.0/23 maxlen: 23
195.146.224.0/20 maxlen: 20
37.220.48.0/20 maxlen: 20
213.151.176.0/20 maxlen: 20
185.9.96.0/22 maxlen: 22
62.64.32.0/19 maxlen: 19
5.158.240.0/20 maxlen: 20
46.162.128.0/18 maxlen: 18
195.146.240.0/20 maxlen: 20
185.72.248.0/22 maxlen: 22
2a01:8e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70008376 (0x42c3e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Feb 8 08:27:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77221ab39f408bcc6fd58aa608a327e28980162d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:7c:c4:82:fb:87:ce:f3:fb:97:17:4e:69:
ba:bf:ba:9a:9a:5a:e8:35:26:c6:3a:7e:9c:09:d2:
8b:45:cb:06:e9:3b:9e:6a:56:42:cf:36:7c:88:27:
5b:bb:ba:47:1d:22:49:c8:aa:12:31:4c:b7:06:f2:
7d:cf:bd:cc:f7:fe:a3:90:80:b8:36:a7:f5:f9:2c:
fb:11:86:2d:bd:d2:ab:f5:17:f9:9d:7b:f8:04:56:
8a:74:7a:46:b8:09:6c:fc:ce:9c:a6:f1:13:0c:80:
d0:d5:0b:e1:1a:98:9f:03:2f:b3:9d:d3:e4:fa:49:
3a:ea:b8:ee:24:70:d5:9a:f8:78:14:97:bc:dc:fe:
09:e7:89:59:95:93:f6:4b:9b:80:9c:05:81:91:c5:
b2:a3:b7:d8:af:37:5f:d4:8b:c3:9b:52:b1:a6:12:
2c:40:bc:0f:1b:c3:eb:39:57:68:91:8e:ec:a6:5c:
51:86:f5:5f:13:a1:57:d1:72:76:e5:4c:af:76:59:
fb:2c:d4:58:7b:b5:69:d8:e0:04:a7:4d:3f:12:47:
4b:9e:f6:24:43:2a:b4:e3:b8:c8:cd:4e:b0:2a:de:
a6:7c:e9:04:12:9f:0a:ae:92:55:d5:30:77:63:b5:
3f:17:cb:5f:77:b8:ac:fe:94:60:c9:99:2a:21:f0:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:1A:B3:9F:40:8B:CC:6F:D5:8A:A6:08:A3:27:E2:89:80:16:2D
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/dyIas59Ai8xv1YqmCKMn4omAFi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.240.0/20
37.220.48.0/20
46.162.128.0/18
62.64.32.0/19
79.141.192.0/23
79.141.197.0/24
79.141.206.0/23
185.9.96.0/22
185.72.248.0/22
195.146.224.0/19
213.151.176.0/20
IPv6:
2a01:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
43:56:fa:78:49:15:01:89:6a:98:36:72:d1:f6:bb:38:e3:b6:
58:96:25:27:40:73:ff:58:43:98:7b:00:e4:4b:35:b5:a5:d0:
27:57:22:66:98:33:42:bb:47:93:fe:4c:46:d7:61:a0:47:98:
81:77:46:b0:04:a7:dd:53:cd:4f:9b:b5:93:bd:21:e6:5a:a0:
a2:d6:eb:2b:24:30:ba:cf:52:f8:8b:e6:36:96:10:f3:75:11:
d5:e6:ff:bf:ad:06:a4:93:a4:89:c5:ff:d9:aa:f4:4f:0e:fe:
c5:fe:8c:af:ac:d4:bd:ea:f5:8c:fc:6f:9b:e3:f4:07:d9:c6:
f3:95:d0:1f:aa:0d:89:bd:6c:0a:93:d2:a8:f1:09:ba:5b:f3:
c6:f2:b0:3a:f4:ad:9e:6e:6c:60:74:a9:8e:19:5f:aa:79:03:
94:b5:2c:28:83:4b:cb:ba:98:f6:0a:55:82:09:88:13:94:e0:
36:8d:0f:5e:ad:ac:50:41:5a:b2:61:61:e3:9b:a4:dc:f9:dc:
da:bf:f9:cd:3a:19:0d:dc:ff:e5:1f:cb:a9:1a:8c:58:a7:a1:
2d:40:0a:84:fd:4c:51:61:2c:b4:87:1b:cc:c9:25:2d:72:1d:
ea:7a:f6:b5:f5:eb:46:c8:16:00:59:a9:04:f7:9b:e0:d2:c8:
23:e9:6c:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:18 2023 by rpki-client on console-ams.rpki-client.org