Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/EXhLwul81XaGoeno4MJCu-Mja5I.roa
File: EXhLwul81XaGoeno4MJCu-Mja5I.roa (raw, json)
Hash identifier: PiJtV5wMiXZq7b1yguT49UchlHWSSVZvIjt/lBRgA0c=
Subject key identifier: 11:78:4B:C2:E9:7C:D5:76:86:A1:E9:E8:E0:C2:42:BB:E3:23:6B:92
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0182FDD751453CC7EB6B8B3BE8E9DDDDB710
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/EXhLwul81XaGoeno4MJCu-Mja5I.roa
Signing time: Fri 02 Sep 2022 10:55:22 +0000
ROA not before: Fri 02 Sep 2022 10:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 64.137.32.0/24 maxlen: 24
64.137.44.0/24 maxlen: 24
64.137.46.0/24 maxlen: 24
64.137.54.0/24 maxlen: 24
64.137.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:d7:51:45:3c:c7:eb:6b:8b:3b:e8:e9:dd:dd:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 2 10:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11784bc2e97cd57686a1e9e8e0c242bbe3236b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:83:1c:63:31:68:26:b7:ef:41:40:42:81:
d0:f4:10:e0:5f:20:79:f8:b6:19:b5:84:a5:eb:8b:
21:ab:94:bd:4d:39:02:57:07:ec:de:7c:1b:e8:fb:
9d:92:2b:25:9d:6a:aa:31:c5:98:88:de:3e:e4:a8:
26:0e:ec:e9:ce:bc:fb:e4:25:7d:46:d7:5b:f6:76:
cd:39:6b:ec:9a:4a:ed:3a:26:8c:91:e4:c3:d6:8b:
89:09:2b:30:f5:38:a6:4e:4b:d3:38:de:8e:fa:18:
6c:e8:f2:06:c9:5d:5c:b5:32:54:19:e2:54:fa:a4:
2c:22:25:37:31:e5:da:03:3c:3a:d3:a3:7e:cb:25:
cc:3b:bd:2d:d8:20:5e:38:1d:19:f8:9c:61:33:8f:
dd:4b:8e:38:37:bc:d9:f4:36:65:1e:99:50:41:1e:
23:77:1e:bd:0e:57:c8:5d:d2:f2:c6:0d:4c:a2:34:
6b:99:fc:36:7d:ed:2b:e7:2b:2b:5f:cc:87:cf:5b:
b6:9b:73:50:d4:6c:9a:e4:14:83:b2:8d:d6:64:5b:
87:20:d2:b0:4b:49:b2:3f:64:84:52:fe:12:d0:f1:
4e:e7:e5:6a:73:12:a1:87:94:72:21:19:66:c1:80:
27:c6:ee:84:2d:66:9a:9d:f6:eb:0d:d6:f3:94:bb:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:4B:C2:E9:7C:D5:76:86:A1:E9:E8:E0:C2:42:BB:E3:23:6B:92
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/EXhLwul81XaGoeno4MJCu-Mja5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.32.0/24
64.137.44.0/24
64.137.46.0/24
64.137.54.0/24
64.137.116.0/24
Signature Algorithm: sha256WithRSAEncryption
74:85:96:95:f3:43:10:17:37:19:0a:b3:ca:7a:78:97:25:cf:
fe:c4:ef:92:ee:ce:12:dc:58:1a:56:29:4a:e9:0c:b8:37:82:
f1:0b:49:e9:e2:89:56:50:e1:81:b4:a5:4e:25:a3:58:c5:21:
07:56:8a:94:cf:99:31:fd:d8:f1:16:ba:20:29:95:cf:d2:e7:
47:bb:75:8c:8d:fc:4b:6a:d0:3a:2e:39:fc:d4:15:34:bb:85:
46:28:b6:17:62:cc:18:8f:94:70:87:80:42:ad:2e:57:bd:33:
d2:a5:b2:3e:e5:16:9a:15:71:f0:dd:c3:8e:be:77:6b:2d:06:
02:f1:e3:d7:b4:c4:1f:f3:06:44:a7:f6:c0:a7:85:d4:37:4e:
25:18:cd:9a:7a:08:06:71:a7:fa:78:2c:82:16:9d:af:9d:1c:
cd:c3:7a:34:26:08:4b:a0:9c:9a:77:30:90:27:b9:4e:c9:cb:
28:37:34:81:60:76:b9:f9:8e:e3:c4:1e:7f:95:d2:02:77:55:
f3:cc:e0:dd:9c:38:ce:15:f6:34:b6:55:8f:69:43:4a:5a:f4:
9c:f2:a6:bb:7e:c8:ea:e0:fe:27:db:7a:e6:d8:9b:53:7e:3e:
20:28:b9:7f:a7:13:98:da:8a:d0:f7:e2:07:e2:d2:41:d1:c3:
aa:66:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:03 2024 by rpki-client on console-fra.rpki-client.org