Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/4XM-dzczMzSE82YpLJTiAB3Xxtg.roa
File: 4XM-dzczMzSE82YpLJTiAB3Xxtg.roa (raw, json)
Hash identifier: 9ED+Mcd4yX+huuT+VZeeMX8l5ZBLZHLYtnHvhxg5TXk=
Subject key identifier: E1:73:3E:77:37:33:33:34:84:F3:66:29:2C:94:E2:00:1D:D7:C6:D8
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 18CD98EF
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/4XM-dzczMzSE82YpLJTiAB3Xxtg.roa
Signing time: Sat 01 Jan 2022 15:59:55 +0000
ROA not before: Sat 01 Jan 2022 15:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60232
IP address blocks: 185.28.0.0/22 maxlen: 24
185.28.0.0/24 maxlen: 24
185.28.1.0/24 maxlen: 24
185.28.3.0/24 maxlen: 24
185.28.2.0/24 maxlen: 24
37.75.9.0/24 maxlen: 24
37.75.8.0/21 maxlen: 21
37.75.8.0/24 maxlen: 24
37.75.11.0/24 maxlen: 24
37.75.10.0/24 maxlen: 24
195.142.104.0/24 maxlen: 24
37.75.12.0/24 maxlen: 24
37.75.14.0/24 maxlen: 24
37.75.13.0/24 maxlen: 24
37.75.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416127215 (0x18cd98ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 1 15:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1733e773733333484f366292c94e2001dd7c6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:70:2d:2d:69:dd:ca:37:73:7d:e2:f6:4b:
e3:e3:77:57:cc:60:34:ef:96:16:24:0c:ca:75:6e:
09:53:4a:0c:2c:b6:4e:22:ab:13:04:5b:e2:f5:2e:
94:5c:f5:11:12:89:4c:4e:05:2c:74:0e:7b:71:a8:
a1:7e:0e:18:f4:5d:b9:20:9f:54:ac:ce:9f:82:2d:
42:c0:73:44:ae:22:8a:a9:5b:cc:12:5d:24:28:cc:
21:de:ae:a1:7c:4f:72:1c:0d:35:1a:12:e3:21:ff:
06:8e:5b:6e:13:51:5c:b8:24:71:85:5e:fa:dd:27:
4b:b2:08:89:40:07:00:7f:ca:cb:5c:fe:6f:13:46:
31:e4:b8:35:bb:d8:ee:e5:f2:dc:70:c9:12:4d:e1:
07:38:40:0e:ab:ac:5a:29:3c:e1:61:ce:16:4f:63:
6c:3c:ae:39:38:52:89:cd:00:60:a6:36:3f:5d:a4:
2e:fd:c1:43:da:ef:71:a9:05:06:50:6c:7c:43:48:
94:ac:14:5d:c4:17:76:9d:91:c2:2d:29:6f:0f:51:
55:90:0f:47:62:53:e5:3b:65:9c:a5:9e:60:8c:eb:
ef:c3:40:24:1e:91:ae:15:4e:b6:5e:83:a0:21:21:
7b:4d:e4:d6:86:8a:cb:68:40:21:03:02:98:28:f3:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:3E:77:37:33:33:34:84:F3:66:29:2C:94:E2:00:1D:D7:C6:D8
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/4XM-dzczMzSE82YpLJTiAB3Xxtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.8.0/21
185.28.0.0/22
195.142.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:02:13:fe:62:7d:6c:13:ff:e3:e3:05:43:91:5e:40:96:6a:
a4:de:c2:a3:e7:86:6f:6c:d2:85:ef:f2:df:4b:80:ad:b3:7d:
d5:7e:d2:d8:ce:04:63:fa:85:14:4f:75:5a:fd:35:0f:89:7e:
9b:7c:2a:b1:74:33:6d:6d:df:25:7f:72:88:8c:65:db:76:5e:
1c:ad:68:7b:57:a4:23:b6:d8:c4:c9:97:f2:ea:fa:0a:ad:81:
96:ef:bc:be:a4:42:be:cd:87:8c:16:63:f7:48:bb:b7:48:ce:
83:25:31:2e:58:1c:18:93:7e:79:dc:68:68:94:78:9e:a3:69:
2b:cc:5d:bf:b3:80:7a:74:78:8f:39:45:d1:09:b3:9d:1d:ff:
f6:e9:ac:38:25:b6:10:f9:b6:93:d8:19:f6:0e:d1:43:e2:a0:
10:d7:65:6d:4f:4d:3e:64:98:12:32:51:6c:7b:21:42:fa:6b:
28:89:36:3d:10:d9:56:a7:68:0b:f4:90:4f:2a:17:d1:a1:5d:
e3:d2:3c:b5:d4:c8:78:a5:ba:17:a5:98:cd:7e:5d:fb:db:80:
99:61:be:a2:c2:82:c1:2d:6a:e9:8d:3b:05:e0:82:93:b7:7c:
af:59:44:26:2c:bf:e9:7c:21:82:b1:80:68:3a:35:15:0a:53:
bc:9f:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:52 2023 by rpki-client on console-ams.rpki-client.org