Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/j87HhBs9V8URMBzrNrI-psFAbE8.roa
File: j87HhBs9V8URMBzrNrI-psFAbE8.roa (raw, json)
Hash identifier: hqgQLM0BTfFluQnFl/L1NpqPJCQ/0Koii3l7X7VS1s0=
Subject key identifier: 8F:CE:C7:84:1B:3D:57:C5:11:30:1C:EB:36:B2:3E:A6:C1:40:6C:4F
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 04772866
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/j87HhBs9V8URMBzrNrI-psFAbE8.roa
Signing time: Sat 01 Jan 2022 08:57:38 +0000
ROA not before: Sat 01 Jan 2022 08:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200088
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74917990 (0x4772866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 08:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fcec7841b3d57c511301ceb36b23ea6c1406c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:f1:88:0c:74:9b:62:6d:68:a6:30:17:fe:
bc:19:bb:06:78:77:1b:07:d3:fe:d4:0d:14:01:44:
5f:b3:2e:40:75:ad:b9:17:a8:b5:58:6d:69:8e:99:
12:30:d1:c2:9f:69:8f:8d:bb:45:36:58:e7:71:c2:
0b:48:6a:d0:9f:71:40:23:9f:21:83:51:de:d2:e3:
20:ab:92:a9:b2:be:e4:2b:c3:32:05:0a:b5:8d:c3:
b4:ba:59:90:db:fa:b8:a7:a0:cd:a1:6c:5c:fe:52:
07:6b:25:a1:32:bd:77:67:ac:91:f0:e8:09:ed:e9:
40:3d:11:12:3a:21:7f:7e:54:f9:9c:69:73:ab:ba:
67:5d:aa:00:fc:c0:31:1f:a6:82:eb:d6:d0:67:39:
44:13:22:13:76:a0:c7:1b:fa:a3:b8:77:cc:1c:d7:
65:ec:76:8f:4b:4d:db:6e:c1:9b:58:2b:20:dc:f3:
8a:d0:17:50:5a:da:3d:5f:16:27:19:05:32:82:cd:
85:e8:1f:4b:cd:dc:ac:87:a9:99:75:e6:0e:9f:8d:
9f:a9:6d:cd:f0:8a:06:0b:b6:41:cc:35:cf:08:b7:
89:39:78:29:4f:cc:df:6d:ff:02:27:8e:31:ab:6e:
d4:e0:df:e6:fa:7b:76:36:f3:7a:e9:5e:dc:3d:2f:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:C7:84:1B:3D:57:C5:11:30:1C:EB:36:B2:3E:A6:C1:40:6C:4F
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/j87HhBs9V8URMBzrNrI-psFAbE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
188.116.21.0/24
188.116.23.0/24
188.116.25.0/24
188.116.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7b:44:d3:9c:13:53:81:5a:2d:20:e7:21:f1:3d:a7:6a:35:
50:df:b0:ba:a6:42:cc:7c:60:85:88:b5:26:1a:7b:65:c4:c3:
2f:6b:b9:ff:fb:26:3c:b5:06:9f:a6:b7:89:18:aa:28:9e:93:
85:37:9d:fb:3a:72:22:06:b8:96:f8:b5:16:7a:90:41:5b:f9:
8c:4f:72:12:4a:58:e9:af:aa:df:ee:bc:a7:b0:07:a2:af:51:
d3:53:4c:b6:6a:f0:2e:b1:5a:13:e2:c6:4d:ee:0e:f8:11:64:
ce:10:59:71:97:04:45:82:17:6e:38:36:2b:56:2b:ae:e7:c0:
e7:65:8f:17:64:4f:36:7a:54:ff:70:ae:e8:8a:7b:87:46:b0:
b7:04:f6:82:4b:d3:eb:cb:cc:eb:1c:d5:89:2e:82:dc:16:ca:
b7:d9:69:0d:3d:89:b3:40:20:f3:0c:60:93:b1:62:97:0a:b0:
a0:68:72:4d:b5:72:bf:ed:e4:70:23:57:cf:41:b9:63:4d:2f:
b4:d6:60:6a:89:64:a1:c7:39:54:9a:49:61:f2:a6:e2:06:3c:
e4:91:a7:b0:3e:dd:9f:b8:43:e8:94:02:58:61:9b:0b:0d:dd:
29:48:07:f9:b1:a7:9e:f9:d6:d8:72:53:a3:64:9d:d7:46:17:
39:71:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:42 2024 by rpki-client on console-ams.rpki-client.org