Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/I3J3aVZSJqCMx3-uK-HrHnbKnwM.roa
File: I3J3aVZSJqCMx3-uK-HrHnbKnwM.roa (raw, json)
Hash identifier: OcLWLSkIvQeCscpdA/Vs/zpp0QnYWxNbbcYSV3kVCmY=
Subject key identifier: 23:72:77:69:56:52:26:A0:8C:C7:7F:AE:2B:E1:EB:1E:76:CA:9F:03
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16E2489A
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/I3J3aVZSJqCMx3-uK-HrHnbKnwM.roa
Signing time: Sat 01 Jan 2022 12:01:38 +0000
ROA not before: Sat 01 Jan 2022 12:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201411
IP address blocks: 37.18.96.0/22 maxlen: 24
178.170.156.0/22 maxlen: 24
37.18.62.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
188.120.36.0/22 maxlen: 24
188.120.40.0/22 maxlen: 24
178.170.182.0/23 maxlen: 24
178.170.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383928474 (0x16e2489a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23727769565226a08cc77fae2be1eb1e76ca9f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:1c:7b:c6:6d:e7:09:62:9f:7c:e0:d4:6c:
3b:a1:0f:74:a0:43:37:9a:f2:fe:1e:51:a6:4a:9c:
33:f8:5b:3d:2c:65:40:18:ce:f3:01:28:d7:28:34:
a3:4b:5c:64:d9:18:23:0e:2f:e2:54:e4:81:8e:0d:
9a:9c:b8:59:62:20:e8:ac:9d:9e:e4:7a:f5:69:3a:
f2:a5:85:e4:e8:06:f4:e6:c1:05:4a:a2:c1:5f:c3:
05:9a:e3:b7:0e:f1:e5:84:8c:f9:16:72:6f:fd:10:
5c:5b:80:e8:d9:ae:30:43:b7:af:b5:a1:4d:43:46:
41:c4:5f:12:5c:53:31:fa:ae:2d:84:4b:27:d7:78:
1d:e7:0d:3b:0a:8d:e6:ea:7e:35:a9:77:35:f7:0b:
ae:97:5a:fb:45:31:19:a5:d2:3f:48:5c:31:2e:74:
09:55:97:b0:49:f0:01:cd:3b:fd:ce:36:9e:85:4a:
24:31:5f:20:49:0d:d9:04:80:ce:f9:06:8d:d6:b6:
f8:9b:41:4d:af:d2:a4:c6:39:89:df:bb:7e:ab:80:
6b:fc:29:aa:8f:9d:fc:86:94:d3:f2:77:d6:27:97:
9e:43:4c:cd:7a:05:56:67:94:37:3a:06:ae:e8:8e:
49:00:5b:81:16:b5:67:85:0d:f0:bf:40:e1:30:12:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:77:69:56:52:26:A0:8C:C7:7F:AE:2B:E1:EB:1E:76:CA:9F:03
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/I3J3aVZSJqCMx3-uK-HrHnbKnwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.62.0/23
37.18.96.0/22
178.170.156.0/22
178.170.182.0-178.170.185.255
188.120.36.0-188.120.43.255
Signature Algorithm: sha256WithRSAEncryption
a3:85:d5:46:9d:28:15:44:f9:6d:d4:1b:47:52:55:3c:16:64:
7e:82:07:7d:7d:8d:95:7b:4b:1f:fc:b5:d0:09:b2:14:5a:43:
3a:bb:1f:a0:67:56:e9:96:dd:74:05:23:b0:56:0f:f9:34:3d:
7f:1c:e2:c7:ee:34:3b:68:e8:d7:51:ab:6b:a9:70:0f:98:88:
b6:f0:e7:ce:65:5f:5d:8e:df:dd:46:37:ec:c6:77:ae:45:8e:
71:29:ba:31:07:45:53:c3:95:5b:c4:8c:6b:7f:7c:23:63:95:
60:9c:30:76:26:39:d3:15:63:eb:ca:a4:4c:54:2c:de:a5:55:
e8:f5:53:1b:7b:db:a6:db:1c:67:9e:05:bc:ff:9f:57:4a:db:
e6:a0:cf:40:55:94:b5:22:4d:66:c9:26:58:d5:ba:89:ae:ff:
b8:0d:e4:07:47:7f:bc:1c:40:43:d2:a7:08:28:36:c7:be:89:
59:34:80:cd:d2:e6:e4:b9:6c:ac:57:e9:f8:99:bb:33:7c:77:
6f:ef:cc:88:16:10:9c:be:85:03:a8:aa:e8:f3:80:d9:fb:70:
bd:2d:12:07:15:b2:2c:4a:3c:da:ff:a6:e3:55:ba:45:55:5b:
78:63:be:58:ca:fd:ef:7b:18:71:41:3d:9c:6c:6d:b2:fc:07:
a0:34:21:24
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIEFuJImjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDEw
MTEyMDEzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjM3Mjc3Njk1NjUy
MjZhMDhjYzc3ZmFlMmJlMWViMWU3NmNhOWYwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALNnHHvGbecJYp984NRsO6EPdKBDN5ry/h5RpkqcM/hbPSxl
QBjO8wEo1yg0o0tcZNkYIw4v4lTkgY4Nmpy4WWIg6KydnuR69Wk68qWF5OgG9ObB
BUqiwV/DBZrjtw7x5YSM+RZyb/0QXFuA6NmuMEO3r7WhTUNGQcRfElxTMfquLYRL
J9d4HecNOwqN5up+Nal3NfcLrpda+0UxGaXSP0hcMS50CVWXsEnwAc07/c42noVK
JDFfIEkN2QSAzvkGjda2+JtBTa/SpMY5id+7fquAa/wpqo+d/IaU0/J31ieXnkNM
zXoFVmeUNzoGruiOSQBbgRa1Z4UN8L9A4TASJtcCAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBQjcndpVlImoIzHf64r4esedsqfAzAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L0kzSjNhVlpTSnFDTXgzLXVLLUhySG5iS253TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwNAQCAAEwLgMEASUSPgMEAiUSYAMEArKqnDAMAwQB
sqq2AwQBsqq4MAwDBAK8eCQDBAK8eCgwDQYJKoZIhvcNAQELBQADggEBAKOF1Uad
KBVE+W3UG0dSVTwWZH6CB319jZV7Sx/8tdAJshRaQzq7H6BnVumW3XQFI7BWD/k0
PX8c4sfuNDto6NdRq2upcA+YiLbw585lX12O391GN+zGd65FjnEpujEHRVPDlVvE
jGt/fCNjlWCcMHYmOdMVY+vKpExULN6lVej1Uxt726bbHGeeBbz/n1dK2+agz0BV
lLUiTWbJJljVuomu/7gN5AdHf7wcQEPSpwgoNse+iVk0gM3S5uS5bKxX6fiZuzN8
d2/vzIgWEJy+hQOoqujzgNn7cL0tEgcVsixKPNr/puNVukVVW3hjvljK/e97GHFB
PZxsbbL8B6A0ISQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org