Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/lWY68hGnZFu0mJQ3Ty8gjV14nyA.roa
File: lWY68hGnZFu0mJQ3Ty8gjV14nyA.roa (raw, json)
Hash identifier: vwBx6tuHr2znDLJpFIGPmByhz8EW9bSqE4uGa0jSiI4=
Subject key identifier: 95:66:3A:F2:11:A7:64:5B:B4:98:94:37:4F:2F:20:8D:5D:78:9F:20
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 1C535401
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/lWY68hGnZFu0mJQ3Ty8gjV14nyA.roa
Signing time: Sat 01 Jan 2022 03:59:36 +0000
ROA not before: Sat 01 Jan 2022 03:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15699
IP address blocks: 37.46.72.0/21 maxlen: 32
185.32.28.0/22 maxlen: 32
185.32.28.0/24 maxlen: 32
2a00:6640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475223041 (0x1c535401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Jan 1 03:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95663af211a7645bb49894374f2f208d5d789f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:13:46:08:92:d6:47:15:68:76:22:e7:30:
84:4d:6d:bf:28:cc:bf:48:f2:00:5f:63:16:ff:48:
4b:58:0c:dd:e5:fd:e1:5f:c6:2b:d2:90:72:fb:09:
08:f6:d2:81:8b:d5:db:90:f3:d9:0d:79:92:4d:e5:
ed:4f:9c:e5:61:57:9c:11:bc:fe:cb:55:bb:7d:cf:
e2:f5:a0:8b:68:01:c0:01:50:87:21:4b:71:4b:b2:
f1:fb:dc:18:89:01:7b:d9:b5:0d:07:64:88:13:64:
64:5a:fc:04:d6:e3:a8:76:e2:e3:e0:80:af:72:1d:
f1:b8:fd:6e:a6:74:2e:04:f9:41:cc:f5:89:0c:7c:
e0:92:fa:dc:45:c6:54:7a:c4:df:eb:3a:be:e0:29:
da:92:0f:f1:a0:8b:fc:fc:53:3e:a5:f3:4c:11:d9:
98:c7:31:e2:0c:09:09:80:54:54:5a:30:4c:5e:ef:
6a:e6:76:bc:ec:3f:de:f4:9c:f9:f0:1e:d3:f8:e3:
b1:8d:56:86:9c:d1:d6:29:11:57:fa:8e:d1:27:bf:
1b:86:dc:0a:d2:89:88:9c:32:26:b0:72:ad:7c:ca:
85:cc:c4:bd:c2:c5:5d:6f:c8:e5:10:60:02:14:eb:
de:9e:44:59:91:47:04:fe:61:f4:8c:91:27:de:ea:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:66:3A:F2:11:A7:64:5B:B4:98:94:37:4F:2F:20:8D:5D:78:9F:20
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/lWY68hGnZFu0mJQ3Ty8gjV14nyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.72.0/21
185.32.28.0/22
IPv6:
2a00:6640::/32
Signature Algorithm: sha256WithRSAEncryption
b9:79:ed:18:0e:1c:fb:bf:21:29:31:a5:51:ac:6e:ec:48:11:
7c:09:4a:fc:d9:68:dc:b1:93:30:0b:f6:a9:56:f3:07:01:19:
0b:d4:fb:af:fb:38:32:e3:bd:b4:2d:e1:b2:37:f6:5e:c8:e2:
9e:4a:e1:56:99:9c:95:80:f5:29:e1:69:be:6d:96:12:ce:ec:
9a:21:b9:43:71:f0:c2:d2:52:15:48:b1:96:03:83:bd:fe:cf:
d6:95:a4:59:27:06:5c:d8:82:f3:c7:76:54:72:5c:44:bd:70:
2e:d3:72:3b:60:db:87:15:4e:2c:80:e3:61:d6:76:6f:53:aa:
a9:70:60:ee:62:a5:bd:4b:5a:60:e0:24:63:e9:29:c4:4b:3d:
09:04:d6:cc:98:33:82:7c:2b:7a:f6:77:bf:af:86:a0:d3:c8:
cc:87:73:5c:0a:07:30:59:00:5b:a1:8c:bf:1a:65:a6:1e:28:
75:d4:1d:32:60:c8:63:bd:32:de:41:8a:5b:c6:91:e6:f0:ad:
03:2c:cc:d9:17:3c:29:bd:70:e5:c4:1b:50:29:de:37:9c:a4:
b9:d0:a0:65:34:60:84:f9:8f:c3:a3:62:8c:c8:f5:6d:9d:a2:
99:14:97:bc:cd:8d:17:56:cd:c2:f5:b2:be:c8:24:25:b0:bf:
09:e5:8d:31
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEHFNUATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
Y2NkMDUyMjZjYjRjMTk3OWY5NmEwNmQyZWI2NjgzYjViMGY2YThlMB4XDTIyMDEw
MTAzNTkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU2NjNhZjIxMWE3
NjQ1YmI0OTg5NDM3NGYyZjIwOGQ1ZDc4OWYyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANjME0YIktZHFWh2IucwhE1tvyjMv0jyAF9jFv9IS1gM3eX9
4V/GK9KQcvsJCPbSgYvV25Dz2Q15kk3l7U+c5WFXnBG8/stVu33P4vWgi2gBwAFQ
hyFLcUuy8fvcGIkBe9m1DQdkiBNkZFr8BNbjqHbi4+CAr3Id8bj9bqZ0LgT5Qcz1
iQx84JL63EXGVHrE3+s6vuAp2pIP8aCL/PxTPqXzTBHZmMcx4gwJCYBUVFowTF7v
auZ2vOw/3vSc+fAe0/jjsY1WhpzR1ikRV/qO0Se/G4bcCtKJiJwyJrByrXzKhczE
vcLFXW/I5RBgAhTr3p5EWZFHBP5h9IyRJ97qHEcCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSVZjryEadkW7SYlDdPLyCNXXifIDAfBgNVHSMEGDAWgBQczQUibLTBl5+W
oG0utmg7Ww9qjjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hNMEZJbXkwd1plZmxxQnRMclpvTzFzUGFvNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvZTIxNzM5LWIwMGItNDFjOC1hNjQ1LWRiOWMzYTBjMDhiOS8x
L2xXWTY4aEduWkZ1MG1KUTNUeThnalYxNG55QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
ZTIxNzM5LWIwMGItNDFjOC1hNjQ1LWRiOWMzYTBjMDhiOS8xL0hNMEZJbXkwd1pl
ZmxxQnRMclpvTzFzUGFvNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAyUuSAMEArkgHDANBAIAAjAHAwUA
KgBmQDANBgkqhkiG9w0BAQsFAAOCAQEAuXntGA4c+78hKTGlUaxu7EgRfAlK/Nlo
3LGTMAv2qVbzBwEZC9T7r/s4MuO9tC3hsjf2XsjinkrhVpmclYD1KeFpvm2WEs7s
miG5Q3HwwtJSFUixlgODvf7P1pWkWScGXNiC88d2VHJcRL1wLtNyO2DbhxVOLIDj
YdZ2b1OqqXBg7mKlvUtaYOAkY+kpxEs9CQTWzJgzgnwrevZ3v6+GoNPIzIdzXAoH
MFkAW6GMvxplph4oddQdMmDIY70y3kGKW8aR5vCtAyzM2Rc8Kb1w5cQbUCneN5yk
udCgZTRghPmPw6NijMj1bZ2imRSXvM2NF1bNwvWyvsgkJbC/CeWNMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-ams.rpki-client.org