Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/C10p_nJRWxWCH88tfGzSGcwH62Y.roa
File: C10p_nJRWxWCH88tfGzSGcwH62Y.roa (raw, json)
Hash identifier: D5qsLuYhT1/XvylAypL16jYTl+eEfpfjYSwdtnVxdp0=
Subject key identifier: 0B:5D:29:FE:72:51:5B:15:82:1F:CF:2D:7C:6C:D2:19:CC:07:EB:66
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: CDEF
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/C10p_nJRWxWCH88tfGzSGcwH62Y.roa
Signing time: Fri 25 Feb 2022 05:57:18 +0000
ROA not before: Fri 25 Feb 2022 05:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43567
IP address blocks: 188.164.136.0/21 maxlen: 21
188.164.160.0/19 maxlen: 19
37.157.24.0/22 maxlen: 22
37.157.28.0/23 maxlen: 23
37.157.30.0/24 maxlen: 24
77.73.88.0/22 maxlen: 22
77.73.92.0/24 maxlen: 24
31.25.200.0/21 maxlen: 21
77.73.94.0/24 maxlen: 24
77.73.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52719 (0xcdef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Feb 25 05:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b5d29fe72515b15821fcf2d7c6cd219cc07eb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:f7:92:c8:d5:87:38:3c:2d:b7:ba:80:6b:
4a:85:3e:9f:65:89:bd:37:39:28:9a:52:ef:17:b3:
2d:53:1c:d9:82:33:b4:b1:b6:42:8b:9b:c1:10:55:
69:b1:c7:b7:74:5a:03:8d:b5:f1:ce:13:8f:32:ca:
68:c0:32:5e:4b:c5:a2:4d:f5:8c:ac:c5:f0:2a:cd:
70:19:60:99:57:09:a6:e7:a8:93:2f:19:1d:58:67:
7a:8c:41:50:a4:60:16:1d:97:3b:1a:e3:a4:aa:02:
a0:8d:c9:e3:28:d4:6f:3d:4b:ee:2b:41:6b:47:79:
9b:51:d4:b4:45:48:1c:6a:67:1a:55:34:a2:c2:d7:
5d:46:4e:29:c8:59:18:33:eb:29:a6:95:51:43:1a:
cb:9e:4a:83:3e:35:87:46:da:64:f2:c5:21:50:17:
52:19:06:07:67:53:32:25:61:5f:f5:df:bd:c0:6e:
28:40:b8:66:b6:0a:75:57:44:11:e8:fc:bf:94:95:
39:b8:de:14:b3:24:7a:3a:b6:57:eb:e1:b4:c3:e3:
25:f0:ab:e4:5d:60:00:a6:e9:c7:06:94:81:b5:51:
13:33:09:99:a8:bf:33:5f:ea:99:89:30:1b:d8:da:
db:c9:95:a9:13:86:2d:82:71:dc:26:42:4f:6b:41:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5D:29:FE:72:51:5B:15:82:1F:CF:2D:7C:6C:D2:19:CC:07:EB:66
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/C10p_nJRWxWCH88tfGzSGcwH62Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.200.0/21
37.157.24.0-37.157.30.255
77.73.88.0-77.73.94.255
188.164.136.0/21
188.164.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:73:d8:91:6e:40:67:15:ef:4c:58:90:78:87:ab:96:54:f8:
64:a5:20:fa:90:9f:3e:2e:0c:e8:f3:c2:41:19:f6:c0:29:94:
1d:62:7e:1c:ec:da:dd:b7:ae:da:bd:19:e3:e0:d4:27:b6:43:
2d:30:06:26:53:e9:0c:29:18:60:97:72:3f:70:a3:c4:62:65:
a3:60:c0:f1:44:4c:ec:d6:4e:1b:50:f9:a1:52:13:77:e1:6f:
21:37:3c:37:3d:f5:9e:c5:d0:e3:d5:2b:b6:59:ec:13:4d:53:
ab:08:39:9e:6d:08:ee:bc:35:b9:ce:7b:da:3a:ea:ec:76:f6:
74:a4:62:cd:a1:6e:1f:f6:ee:d8:ee:1a:5c:97:9a:04:cb:f0:
c7:9c:36:c1:97:13:86:9a:40:42:3a:15:a0:11:b9:77:55:ac:
8d:47:95:b8:30:38:cf:c7:84:94:cd:72:5e:f8:d4:78:84:28:
e3:d7:e8:7f:58:5f:f5:15:32:3d:61:54:c1:61:1e:ae:67:29:
7f:cf:eb:64:34:f3:c1:e1:28:98:e8:1a:39:cc:e1:fc:a4:8a:
fb:9e:e4:ef:f7:4d:b3:3f:96:cc:b9:8d:d8:4c:c1:c5:96:5c:
fb:fd:95:4e:71:2f:05:06:98:d0:b8:8c:be:31:01:7e:d3:49:
c9:a8:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:41 2024 by rpki-client on console-ams.rpki-client.org