Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/3eG4Sf2_fhfeEep4bMR1mCnDq80.roa
File: 3eG4Sf2_fhfeEep4bMR1mCnDq80.roa (raw, json)
Hash identifier: 3fWCsbzbeYfq/u//iDfw3cK//PgvKJYldSD0WjTF0Ww=
Subject key identifier: DD:E1:B8:49:FD:BF:7E:17:DE:11:EA:78:6C:C4:75:98:29:C3:AB:CD
Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial: 186ED1ED
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/3eG4Sf2_fhfeEep4bMR1mCnDq80.roa
Signing time: Sat 01 Jan 2022 14:07:49 +0000
ROA not before: Sat 01 Jan 2022 14:07:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25291
IP address blocks: 185.46.136.0/22 maxlen: 24
37.44.0.0/21 maxlen: 24
151.252.40.0/21 maxlen: 24
45.153.81.0/24 maxlen: 24
45.153.82.0/23 maxlen: 24
185.56.128.0/21 maxlen: 24
176.74.56.0/21 maxlen: 24
185.54.232.0/22 maxlen: 24
109.68.224.0/21 maxlen: 24
37.49.152.0/21 maxlen: 24
185.56.104.0/23 maxlen: 24
37.123.104.0/21 maxlen: 24
195.192.128.0/18 maxlen: 24
77.247.80.0/21 maxlen: 24
2a00:13c8::/32 maxlen: 48
2a00:7fc0::/33 maxlen: 48
2a00:7fc0::/32 maxlen: 48
2a04:d480::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409915885 (0x186ed1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Validity
Not Before: Jan 1 14:07:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dde1b849fdbf7e17de11ea786cc4759829c3abcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:08:f9:17:6d:40:b3:ad:76:01:da:a0:39:
e2:f6:25:1b:f7:72:14:fd:59:ac:cb:82:4c:7c:14:
eb:6f:ba:61:20:94:66:4c:73:b7:6d:a2:0f:cd:59:
e7:18:c4:96:77:a2:4d:e6:0c:f5:fb:54:dd:c7:58:
e8:ec:23:c3:85:00:7d:ce:66:e6:65:b5:cf:bf:75:
31:fc:a2:79:42:b1:e2:32:92:17:8b:3c:e6:96:c3:
2e:05:5e:9c:29:ed:63:7f:71:25:13:52:8c:98:8e:
dd:63:32:f9:a2:9d:e4:71:5f:8c:28:f5:2c:6d:b8:
67:6c:e9:04:a2:3f:07:47:09:b0:5d:9b:ed:e3:d7:
6c:2b:e1:15:2c:59:4d:75:bd:c4:dc:c9:69:32:6d:
b4:d9:c2:35:4a:a0:4f:cc:e0:f3:c8:3f:4f:b2:c2:
e0:65:a9:45:8d:64:e9:41:74:f5:44:9c:e2:66:a2:
ae:e1:9e:75:d6:28:f7:ea:6c:97:ea:0f:a6:04:32:
27:56:e4:31:2b:38:8d:95:de:4a:ed:c0:39:82:f3:
66:48:09:f7:43:f5:25:e4:9f:c9:95:da:57:24:7a:
9c:f0:39:91:ee:7f:45:c2:31:48:34:51:44:d4:6f:
44:69:a2:72:5f:17:11:52:b7:bd:42:35:af:49:df:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:B8:49:FD:BF:7E:17:DE:11:EA:78:6C:C4:75:98:29:C3:AB:CD
X509v3 Authority Key Identifier:
keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/3eG4Sf2_fhfeEep4bMR1mCnDq80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.0.0/21
37.49.152.0/21
37.123.104.0/21
45.153.81.0-45.153.83.255
77.247.80.0/21
109.68.224.0/21
151.252.40.0/21
176.74.56.0/21
185.46.136.0/22
185.54.232.0/22
185.56.104.0/23
185.56.128.0/21
195.192.128.0/18
IPv6:
2a00:13c8::/32
2a00:7fc0::/32
2a04:d480::/29
Signature Algorithm: sha256WithRSAEncryption
30:05:fc:83:b2:48:80:6a:e2:69:d9:2f:03:85:d6:df:51:50:
46:ec:1a:b1:dd:5c:5d:44:29:74:5a:4f:4f:4b:97:20:da:d6:
53:8d:6e:6a:36:9d:31:88:db:de:7b:4b:b7:18:41:2a:70:cd:
df:2f:bd:00:1d:6e:df:42:a2:f8:72:25:74:de:90:ba:c9:50:
58:cd:f3:5f:b7:90:1a:e2:1d:db:55:15:18:70:51:c0:07:da:
b5:7d:e3:75:a5:8f:78:78:1e:6b:2b:32:8d:cf:00:77:a3:97:
2d:ae:07:67:8f:b0:0c:10:34:4b:36:e5:7e:bf:7b:fd:c8:42:
07:b0:3d:61:75:b3:ba:c9:63:f6:b1:df:1d:54:a4:a9:9c:7c:
5a:83:df:32:17:82:61:c4:42:51:e6:92:e1:3e:7f:42:fe:9d:
41:a6:a0:93:72:62:70:da:2b:eb:f0:e1:ee:92:f6:ec:ae:db:
bb:c5:47:47:9f:1c:45:6c:fa:3e:b4:c4:d5:1f:e5:5b:03:3e:
09:65:d9:46:10:64:a2:9c:e3:d0:c6:ef:55:60:20:85:7e:fb:
24:84:15:08:a5:6d:e9:ba:1b:6b:cb:6c:fd:36:31:00:3e:b9:
2d:2d:76:9f:b2:69:73:c7:b1:93:82:fa:9b:90:5a:64:26:31:
b8:9a:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:58 2023 by rpki-client on console-fra.rpki-client.org