Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/38yrWZOQ8Go5rZCn5K6hyNTa1Lc.roa
File: 38yrWZOQ8Go5rZCn5K6hyNTa1Lc.roa (raw, json)
Hash identifier: drZoZfKdALNxeVF0Vk+VZvqCd7BkVeiFZXJ5hPBjlx4=
Subject key identifier: DF:CC:AB:59:93:90:F0:6A:39:AD:90:A7:E4:AE:A1:C8:D4:DA:D4:B7
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 17A33B5C
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/38yrWZOQ8Go5rZCn5K6hyNTa1Lc.roa
Signing time: Sat 01 Jan 2022 09:01:39 +0000
ROA not before: Sat 01 Jan 2022 09:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34724
IP address blocks: 185.31.32.0/22 maxlen: 22
185.68.60.0/22 maxlen: 22
193.34.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396573532 (0x17a33b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Jan 1 09:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfccab599390f06a39ad90a7e4aea1c8d4dad4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:b0:de:a2:92:32:81:f0:5e:7a:52:a3:48:
87:09:30:b8:5a:c8:98:ca:55:a0:44:c2:b6:13:68:
bd:fd:bc:d3:7e:ab:72:7a:bc:9b:4b:24:f4:99:7e:
a4:04:28:5b:a4:a4:13:7b:88:1f:bf:39:38:c7:dc:
b9:d2:90:87:1e:47:fa:6c:1d:98:3a:44:ef:52:af:
94:0b:6e:9c:03:2e:3a:39:df:d0:56:57:0a:86:5b:
c3:6a:54:52:fc:5c:71:43:da:d5:81:e1:32:9f:1a:
97:1e:55:05:ee:14:a3:60:a1:5b:b1:16:97:2a:1e:
7d:ad:aa:1f:51:07:e3:4d:ab:8e:d6:6b:0a:fa:b0:
78:7d:3b:f3:bf:70:23:6c:0e:38:31:1d:94:e2:ae:
7e:42:9d:c4:a2:19:5b:15:06:e6:ce:76:a3:38:2f:
1e:b0:62:04:19:a3:4a:8f:e9:63:3b:93:bc:8d:3a:
e7:5e:31:01:3d:69:dd:c8:aa:a1:3f:0b:ed:4e:c4:
c0:bb:16:4a:5b:bd:88:0d:fc:a2:35:6e:90:fb:01:
87:e9:a7:e4:21:03:89:5d:96:f4:d8:79:9d:8d:d7:
85:f7:d7:e5:f3:2c:68:b9:92:7a:93:d3:98:32:05:
a4:ab:40:05:cc:53:1e:77:64:69:93:78:0e:9b:21:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:AB:59:93:90:F0:6A:39:AD:90:A7:E4:AE:A1:C8:D4:DA:D4:B7
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/38yrWZOQ8Go5rZCn5K6hyNTa1Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.32.0/22
185.68.60.0/22
193.34.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:94:0e:42:07:cd:bc:0b:88:af:ae:85:4b:d5:9c:3e:46:b5:
55:9c:9e:7c:01:e5:e3:eb:10:42:a3:24:e5:a7:84:20:ba:b6:
ac:3f:b3:c8:e5:af:7e:f3:66:5e:f3:58:62:05:cd:85:32:6b:
68:23:91:80:3c:b7:6c:0a:f8:70:e6:4a:7e:27:aa:a7:a4:4a:
fa:69:68:80:91:5b:89:ef:ca:84:e3:15:83:0d:30:4e:b8:f3:
23:79:45:ff:74:5f:a8:2b:b1:19:10:36:84:86:58:ff:e4:28:
95:83:9c:1a:61:c8:33:fa:5e:9e:43:fc:77:95:f8:b3:a1:fe:
13:4e:14:35:aa:2a:c9:ee:83:b1:a5:ae:44:77:68:31:b2:78:
67:11:ad:ec:f5:46:0a:47:42:9c:bb:c5:56:bc:33:31:12:c3:
26:45:fb:2a:c0:7c:46:89:5d:c4:e5:e7:89:90:ce:ba:97:c5:
ff:75:05:83:00:86:44:1e:3e:40:8a:fe:8f:d2:fa:47:7e:8e:
cb:93:34:81:ea:b7:76:81:29:57:a3:02:b5:d0:d3:a2:b3:f6:
c8:3d:79:4c:33:f3:97:b7:c0:83:90:04:a2:91:c2:22:5f:e7:
c1:b3:cd:33:8a:0d:ba:81:dc:7b:1c:ed:eb:96:3f:24:af:9d:
41:e7:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-ams.rpki-client.org