Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/1-NhYMFb0_FByKivMM1QYtfz8b6o.roa
File: 1-NhYMFb0_FByKivMM1QYtfz8b6o.roa (raw, json)
Hash identifier: Ysw7CTQMgrYcZgLstzFOka3o0x5V6n61ChV1Mflz01I=
Subject key identifier: F8:D8:58:30:56:F4:FC:50:72:2A:2B:CC:33:54:18:B5:FC:FC:6F:AA
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 06AB4CDE
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/1-NhYMFb0_FByKivMM1QYtfz8b6o.roa
Signing time: Tue 31 May 2022 12:15:15 +0000
ROA not before: Tue 31 May 2022 12:15:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204035
IP address blocks: 37.228.132.0/24 maxlen: 24
37.228.134.0/24 maxlen: 24
185.101.92.0/22 maxlen: 22
37.228.151.0/24 maxlen: 24
37.228.148.0/24 maxlen: 24
185.116.156.0/22 maxlen: 22
185.116.156.0/24 maxlen: 24
185.116.157.0/24 maxlen: 24
185.116.158.0/24 maxlen: 24
193.56.156.0/24 maxlen: 24
185.107.192.0/23 maxlen: 23
185.107.192.0/22 maxlen: 22
185.107.193.0/24 maxlen: 24
194.125.248.0/22 maxlen: 22
194.125.250.0/24 maxlen: 24
193.46.24.0/22 maxlen: 22
185.245.168.0/22 maxlen: 22
2a06:7f80::/29 maxlen: 29
2a06:1c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111889630 (0x6ab4cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: May 31 12:15:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8d8583056f4fc50722a2bcc335418b5fcfc6faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:02:85:4d:f3:4f:7a:2c:98:f2:ae:6a:a0:
47:64:9e:5d:1e:fc:94:ea:d1:ab:60:7c:4a:c0:ee:
60:db:4c:ee:c7:63:ae:ce:46:0f:46:5e:1b:a7:79:
02:a4:f3:a2:63:35:68:2d:92:83:4a:7f:86:19:fe:
50:39:5b:7d:be:0c:b6:53:ca:2d:dc:90:28:24:be:
b6:c3:9b:66:18:7e:f8:d7:95:35:07:d0:1c:fa:a3:
fc:f5:ce:41:26:89:f6:70:9a:a2:08:3b:7e:30:00:
47:89:1c:cd:1e:25:a9:a7:ab:29:6e:b0:e8:7d:34:
fc:d9:21:40:7d:ae:88:5c:44:23:31:70:42:b6:b0:
f2:eb:fc:d4:14:a4:f9:59:fd:bf:1d:b7:5e:0d:3a:
9e:21:bc:28:d7:14:db:b2:cc:b7:d7:90:12:d6:e0:
af:7b:0d:58:a5:c0:e0:7c:d7:c4:10:ae:d4:75:3a:
41:54:88:a9:92:21:95:fb:6e:78:1c:8a:79:f2:1a:
4f:42:ab:a7:a2:af:77:06:45:b2:9a:df:d3:00:73:
80:91:94:af:17:7b:55:a6:4c:48:c2:ae:7f:97:c3:
93:b3:30:22:01:9f:b4:71:72:a0:e0:30:88:d7:0b:
c4:77:70:22:cf:2d:a8:25:13:b3:c2:77:f0:46:6b:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:58:30:56:F4:FC:50:72:2A:2B:CC:33:54:18:B5:FC:FC:6F:AA
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/1-NhYMFb0_FByKivMM1QYtfz8b6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/24
37.228.151.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.156.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
93:f5:1f:a2:21:bf:81:3e:7b:ed:ef:e7:cf:4c:d1:d5:53:00:
14:84:43:88:aa:10:2b:bb:be:89:8c:ec:69:3d:e7:cc:e1:e7:
01:59:23:9f:f4:92:26:3b:46:69:02:0c:2b:20:a0:94:bd:9c:
cb:be:0b:8d:52:54:ec:35:c4:76:5c:6a:aa:be:ce:7b:af:7a:
95:71:bd:3e:2e:db:c3:3e:fc:87:59:f4:76:b4:73:f4:f4:6e:
71:6d:0a:75:d4:b6:b3:47:f3:e3:7c:5a:0f:f4:cd:9d:d0:d6:
61:f9:fc:f6:4c:61:44:a5:ba:02:bb:da:8d:82:0f:6c:ca:9e:
3e:b0:6c:7f:1e:70:52:5c:0f:04:78:38:8d:74:30:74:e0:ea:
ca:61:0f:c7:c1:7a:7a:d4:5e:4e:fb:25:2f:ac:33:0e:2a:52:
55:10:a5:37:e8:09:d3:8c:32:b7:ef:3c:3c:e4:ec:b3:56:5b:
13:e6:34:fc:ac:fd:bf:1e:71:c3:3c:4f:8e:1c:7a:f3:6d:22:
e6:f0:df:69:71:76:c0:0b:95:a3:2d:7e:c9:ee:83:31:18:0d:
e5:d0:4e:44:b7:73:b3:82:f0:c0:a6:1a:f7:3c:9f:78:b9:e3:
38:fd:a6:f9:9a:16:98:4e:e8:76:e3:3e:99:27:d9:64:3e:7d:
38:d3:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org