Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/IQYILYCv5F0sHe1TxrdXzIaQ_94.roa
File: IQYILYCv5F0sHe1TxrdXzIaQ_94.roa (raw, json)
Hash identifier: xW5o10nyaSfEvSGoC5DBuzHCWtTZC8k/HZKfkJLWoEE=
Subject key identifier: 21:06:08:2D:80:AF:E4:5D:2C:1D:ED:53:C6:B7:57:CC:86:90:FF:DE
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 36F4B797
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/IQYILYCv5F0sHe1TxrdXzIaQ_94.roa
Signing time: Sat 01 Jan 2022 12:06:41 +0000
ROA not before: Sat 01 Jan 2022 12:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21371
IP address blocks: 80.69.0.0/19 maxlen: 19
195.234.244.0/22 maxlen: 22
89.187.96.0/19 maxlen: 19
185.2.164.0/22 maxlen: 22
37.46.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922007447 (0x36f4b797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Jan 1 12:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2106082d80afe45d2c1ded53c6b757cc8690ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:74:71:89:22:ff:bf:83:57:79:77:2e:1a:
36:2a:35:f8:d9:e4:08:74:51:c3:81:40:97:01:f0:
cb:d5:b2:64:79:7b:4d:28:38:62:10:ec:4b:48:ed:
59:c8:3a:fa:c5:70:2d:66:b3:33:30:fa:c5:f1:79:
ac:dc:4e:da:bb:65:3f:e2:be:ab:d6:94:9b:ba:59:
f2:5a:f2:1f:a4:b2:fc:5e:bd:ff:a0:44:dc:f9:ee:
63:f1:60:cc:93:eb:4c:d9:46:f5:74:4f:36:31:e0:
84:94:99:38:c5:41:37:c9:db:c6:e4:a5:c0:80:49:
c6:e9:e4:21:80:3e:a8:96:1d:bf:5e:93:12:44:48:
f2:ab:f7:0d:af:85:80:a5:5e:26:4d:a8:e8:a8:49:
96:19:77:71:5d:32:66:08:6a:2e:6c:80:8d:1a:70:
f2:08:3f:c4:fc:eb:9c:a3:4f:43:9d:14:b5:62:3c:
f5:7f:f8:e6:24:3f:97:3b:d0:0c:2b:12:6e:2a:e3:
95:4e:e2:b2:7c:f0:9d:e7:b4:ae:5f:a7:c2:35:bf:
32:b9:8c:31:09:02:5a:2d:c5:4b:6b:c5:d8:e1:eb:
85:58:b6:89:e8:43:d3:53:c8:c3:ef:f8:64:e8:a5:
9d:22:58:42:49:19:85:c1:71:3a:3b:f6:fd:12:fe:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:06:08:2D:80:AF:E4:5D:2C:1D:ED:53:C6:B7:57:CC:86:90:FF:DE
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/IQYILYCv5F0sHe1TxrdXzIaQ_94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.0.0/21
80.69.0.0/19
89.187.96.0/19
185.2.164.0/22
195.234.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:84:6f:ba:59:ef:f0:16:2b:8b:31:f4:57:48:55:0f:18:73:
35:91:9d:ce:dd:b2:c8:fd:ed:58:bc:1e:ce:f6:17:ff:07:1d:
ec:7f:b9:f3:be:e0:65:f7:bd:c2:93:7f:81:6e:c0:15:3c:f1:
1e:82:86:39:7c:9e:e9:fc:e5:d9:fd:fa:f0:f8:e9:22:3d:05:
9d:e9:9f:f6:ab:ad:2a:a4:90:21:a9:84:46:a5:76:0f:6d:1e:
38:72:c9:ed:20:3c:d2:0d:c8:fe:ca:70:08:8b:14:36:e6:8c:
e1:a1:71:93:2f:e6:1b:2b:05:0d:45:af:80:84:1b:33:4b:7e:
5b:dd:e9:52:87:b6:9a:49:f2:4d:a2:8f:83:f6:c4:7d:cf:a4:
e6:5d:f6:2e:cd:9e:5d:b7:fa:8f:87:b7:0a:71:9f:ad:2b:65:
37:12:d4:21:00:98:46:f9:a4:2f:80:ec:95:3d:38:55:31:bb:
b8:93:2b:40:57:78:a5:95:20:c4:39:e0:72:5d:5b:4d:21:51:
80:a0:3f:0c:19:fc:46:8f:3c:0c:5c:3c:c0:96:2b:c6:c4:81:
c4:3d:dc:2d:6b:44:65:50:2c:27:d3:a2:59:1c:c4:f4:bd:ae:
51:e0:96:49:d4:f7:86:d2:21:96:04:00:8e:68:49:37:76:0c:
d0:00:45:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:37 2023 by rpki-client on console-fra.rpki-client.org