Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/l1vPQTMl2-KZG1CRkQ-8evA7U4g.roa
File: l1vPQTMl2-KZG1CRkQ-8evA7U4g.roa (raw, json)
Hash identifier: TOF8nCjl7XG9Fi4DPO1BWYme0eVCDFP5fxoXMqgrbkI=
Subject key identifier: 97:5B:CF:41:33:25:DB:E2:99:1B:50:91:91:0F:BC:7A:F0:3B:53:88
Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial: 36F37BE3
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/l1vPQTMl2-KZG1CRkQ-8evA7U4g.roa
Signing time: Sat 01 Jan 2022 12:06:41 +0000
ROA not before: Sat 01 Jan 2022 12:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 80.69.0.0/19 maxlen: 19
89.187.96.0/19 maxlen: 19
195.234.244.0/22 maxlen: 24
37.46.0.0/21 maxlen: 21
185.2.164.0/22 maxlen: 22
2001:1a08::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921926627 (0x36f37be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
Validity
Not Before: Jan 1 12:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=975bcf413325dbe2991b5091910fbc7af03b5388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:a7:5e:68:bd:c2:96:c3:54:27:3e:19:94:
65:c4:4a:41:47:3e:26:f2:26:7b:aa:d1:a7:74:80:
1b:a0:22:f0:74:da:5d:07:ed:fb:a2:2e:12:4c:9e:
85:1f:94:ad:31:70:d8:21:63:cb:a0:27:d2:0b:b8:
ab:c5:f7:63:73:75:40:8b:31:d6:ea:4b:68:58:66:
b5:34:ac:4b:4d:38:8b:f8:ab:28:b6:d4:fb:69:ab:
ce:c3:78:cd:07:e3:f7:3c:3a:37:e9:12:f2:ca:d4:
a3:9c:e5:24:07:09:b4:50:57:7f:32:13:53:ef:c8:
bc:ee:1a:f4:fe:14:47:13:bf:a2:c8:8e:26:da:e2:
78:73:f7:a4:0e:6a:50:80:b8:2e:c4:6f:16:28:09:
34:5d:48:01:04:c9:5e:79:f3:9e:1b:eb:b3:b8:46:
c2:7b:91:b2:09:91:15:4c:b4:25:1c:af:03:46:7f:
c2:2e:d3:d8:e6:a7:6d:db:75:61:c1:15:24:ba:fd:
79:ee:64:5a:c6:71:19:a4:17:d2:bd:1b:bf:d3:d0:
83:d0:0c:3e:e0:97:bd:20:86:a0:22:92:4c:1a:db:
99:e2:a0:44:ed:0f:1f:f9:20:df:87:b1:b2:d2:e9:
28:48:b3:16:f5:52:05:b9:77:8c:75:6c:eb:23:6d:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5B:CF:41:33:25:DB:E2:99:1B:50:91:91:0F:BC:7A:F0:3B:53:88
X509v3 Authority Key Identifier:
keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/l1vPQTMl2-KZG1CRkQ-8evA7U4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.0.0/21
80.69.0.0/19
89.187.96.0/19
185.2.164.0/22
195.234.244.0/22
IPv6:
2001:1a08::/32
Signature Algorithm: sha256WithRSAEncryption
6c:9a:1c:d5:d5:ae:bb:07:0e:45:45:d2:2c:a4:28:1d:40:b4:
4a:5c:ed:a1:41:d2:09:42:60:83:c3:fe:35:8d:4f:67:18:b1:
36:ae:6a:0f:3c:71:c8:df:73:df:4b:d0:cd:f6:09:f1:82:81:
9c:9f:c6:5e:4e:be:31:0d:c5:c8:a1:9f:82:22:b3:9b:46:28:
c3:19:59:91:4a:7e:b0:01:23:6b:b3:3d:25:93:44:ab:9b:37:
ad:67:a2:86:fb:8a:67:d3:0e:a6:f9:1e:9d:79:7f:42:00:d9:
4e:6c:8d:13:e1:71:51:4e:28:fd:5e:ba:d2:df:90:b0:ab:08:
e4:d2:57:82:45:bb:b6:59:f5:9d:3a:58:97:ca:3f:f4:6d:17:
d6:c7:3b:45:36:7f:2d:5c:9f:e6:19:ce:37:0f:8a:86:fe:77:
1b:42:b5:61:fe:33:6e:49:23:f4:91:16:0a:85:46:10:fa:b9:
ac:04:46:90:00:51:10:74:0c:4e:f3:db:9a:38:48:0a:cd:b6:
11:41:b1:06:84:88:c8:d7:a0:7d:b4:60:00:a4:3e:5a:65:76:
d9:0f:2e:f0:de:e1:6f:c4:af:82:6b:7f:dd:0c:14:05:c2:d4:
e5:78:9c:f3:63:9e:7e:0b:0e:59:68:8f:f5:81:a6:9a:ce:1b:
d7:ea:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org