Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/yJVtAeI3UqGz_hP3rlw89ggU-iI.roa
File: yJVtAeI3UqGz_hP3rlw89ggU-iI.roa (raw, json)
Hash identifier: iylK7YvaE1NuVsmZZ34aPRv1q8QwL1wR36oCXy0JfNQ=
Subject key identifier: C8:95:6D:01:E2:37:52:A1:B3:FE:13:F7:AE:5C:3C:F6:08:14:FA:22
Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial: 03E2A198
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/yJVtAeI3UqGz_hP3rlw89ggU-iI.roa
Signing time: Sat 01 Jan 2022 06:56:36 +0000
ROA not before: Sat 01 Jan 2022 06:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60558
IP address blocks: 37.140.239.0/24 maxlen: 24
37.140.238.0/24 maxlen: 24
185.28.188.0/24 maxlen: 24
185.28.191.0/24 maxlen: 24
185.28.190.0/24 maxlen: 24
185.28.189.0/24 maxlen: 24
2a00:8860:100::/40 maxlen: 64
2a00:8861:100::/40 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65184152 (0x3e2a198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
Validity
Not Before: Jan 1 06:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8956d01e23752a1b3fe13f7ae5c3cf60814fa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:ad:ef:63:c1:80:c6:3b:26:09:af:63:d1:
e8:5e:d2:a9:46:27:8d:2b:6c:21:78:77:07:26:d3:
a0:1a:97:b5:78:b3:ae:e6:c0:ea:92:3a:bb:0d:9e:
80:4a:e3:31:48:7a:0c:ad:7b:8e:46:9b:8f:de:6d:
e2:52:b1:76:7b:f3:4e:26:80:c0:5a:62:7a:53:46:
fd:77:42:e4:cf:45:5a:ea:80:a0:6f:c5:16:16:6f:
c1:a8:df:78:6a:bb:47:d8:04:10:d2:a1:79:26:24:
69:59:09:ae:ae:9c:e8:62:cd:fc:44:af:04:c2:55:
6e:76:eb:4e:e4:52:a7:15:58:1c:77:84:50:a0:c7:
7f:ab:83:29:54:14:6a:fe:ee:c9:68:5a:26:c0:e6:
c4:c2:06:18:23:ac:55:0d:05:e7:80:16:2f:0f:83:
86:32:44:37:d1:d2:28:61:7b:5e:35:42:2c:f6:5b:
8a:95:44:50:57:49:2c:16:12:4f:70:96:6b:52:74:
ff:33:ed:20:73:98:61:f0:30:f1:74:9a:f4:2a:47:
69:9a:8b:f6:3f:bb:8f:80:0b:ef:91:ad:57:5c:fc:
ee:73:fb:fe:58:67:fa:ef:fc:1e:f7:11:58:99:90:
a8:b1:33:8a:bc:2b:cb:38:c0:b1:a0:62:04:f2:5c:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:6D:01:E2:37:52:A1:B3:FE:13:F7:AE:5C:3C:F6:08:14:FA:22
X509v3 Authority Key Identifier:
keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/yJVtAeI3UqGz_hP3rlw89ggU-iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.238.0/23
185.28.188.0/22
IPv6:
2a00:8860:100::/40
2a00:8861:100::/40
Signature Algorithm: sha256WithRSAEncryption
2b:33:8d:7b:fa:e7:0b:7d:14:ab:57:e8:91:27:bc:24:40:08:
c3:39:96:fe:f6:cf:56:cf:ef:0b:18:00:f0:30:96:e3:77:6c:
b4:0b:60:d5:85:2e:32:25:de:a9:b8:f5:2d:86:d3:48:12:b4:
af:03:10:fb:e8:27:dc:06:16:0f:55:b6:eb:5d:47:04:aa:5d:
2c:1d:f5:85:54:d6:e7:67:f8:2a:53:3e:aa:e4:6f:5f:8b:c8:
69:80:df:f8:c9:29:f9:81:44:1a:e1:37:a7:14:0f:68:e9:b1:
45:f5:35:c1:3f:f0:dd:80:03:8c:1d:48:fc:01:4e:7d:e3:bc:
63:da:4c:c2:73:53:7e:97:92:e6:66:23:aa:d0:6b:3a:fb:f1:
62:b2:85:0e:4c:25:1e:52:81:93:41:3c:37:27:3e:85:38:9b:
92:25:7e:f6:15:1a:69:ec:b1:69:e9:e1:c4:dc:9e:43:9c:ed:
af:18:5b:eb:06:a4:2e:5d:0b:79:14:22:f1:6b:7f:f2:89:59:
a9:89:66:60:6b:8c:ef:b8:13:19:55:c9:ea:97:48:8d:5f:b1:
ea:7d:2e:26:0e:df:15:1d:4e:e1:92:ac:bc:28:8a:43:7d:6a:
91:d2:b2:6f:60:2b:f0:b6:83:3f:e3:62:6e:5d:99:fb:96:15:
5e:8d:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:30 2023 by rpki-client on console-fra.rpki-client.org