Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/37KPLA6tfIQ_PvblgWFd0r2uN6Y.roa
File: 37KPLA6tfIQ_PvblgWFd0r2uN6Y.roa (raw, json)
Hash identifier: P8b8ES4RHTOq33ewP6kkcAb5YfBamZGotChDgXYM3nY=
Subject key identifier: DF:B2:8F:2C:0E:AD:7C:84:3F:3E:F6:E5:81:61:5D:D2:BD:AE:37:A6
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 03CC9A91
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/37KPLA6tfIQ_PvblgWFd0r2uN6Y.roa
Signing time: Sat 01 Jan 2022 16:01:32 +0000
ROA not before: Sat 01 Jan 2022 16:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8601
IP address blocks: 195.138.166.0/24 maxlen: 24
195.138.160.0/19 maxlen: 19
195.138.164.0/24 maxlen: 24
195.138.160.0/22 maxlen: 22
195.138.165.0/24 maxlen: 24
195.138.170.0/24 maxlen: 24
195.138.167.0/24 maxlen: 24
195.138.171.0/24 maxlen: 24
195.138.168.0/24 maxlen: 24
195.138.172.0/24 maxlen: 24
195.138.169.0/24 maxlen: 24
195.138.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63740561 (0x3cc9a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jan 1 16:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfb28f2c0ead7c843f3ef6e581615dd2bdae37a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:6b:a1:52:81:29:a1:31:92:96:09:34:30:
9b:79:22:49:a4:89:f9:50:4c:2c:ec:a5:16:e7:21:
32:2d:b9:08:89:0a:07:8b:db:80:6f:af:4e:16:5c:
2b:a4:8c:14:c2:5f:7b:7d:26:5f:68:af:db:45:34:
dd:b3:f6:b2:f3:e0:dd:73:4f:59:94:ee:11:54:56:
2d:86:20:dc:a9:64:24:c8:da:6d:f9:de:1f:d3:83:
bd:9d:ee:4f:6e:b9:9d:b6:b1:20:9f:4c:44:b8:98:
4f:d5:45:a4:64:78:2c:45:b9:e1:ff:dd:3f:b3:57:
74:04:e6:be:23:6f:86:19:8c:24:38:ac:60:58:8a:
37:1b:ff:00:f4:e7:94:87:37:4f:1b:4a:77:27:a3:
88:e0:ed:1e:69:9b:1e:ab:b0:5e:ef:03:92:e4:de:
94:9b:d8:77:56:cc:0b:57:32:4f:13:e8:4c:87:0e:
2a:ce:ad:b7:1a:f9:95:3c:80:d5:5a:af:95:6f:c2:
0e:ba:29:8d:8f:19:f6:e4:a9:56:5c:22:73:6c:13:
99:db:35:6e:39:18:4b:cb:6b:e6:79:ab:80:af:46:
fd:9f:5b:ff:c2:15:16:15:23:ef:92:2d:7d:b2:7e:
31:02:dc:c5:21:4d:35:fd:b1:79:c5:79:65:b7:6c:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B2:8F:2C:0E:AD:7C:84:3F:3E:F6:E5:81:61:5D:D2:BD:AE:37:A6
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/37KPLA6tfIQ_PvblgWFd0r2uN6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.160.0/19
Signature Algorithm: sha256WithRSAEncryption
35:a6:94:ea:cc:33:dc:f5:a3:29:34:5c:b4:dc:03:cd:3b:45:
56:7e:69:04:78:b5:06:8b:0e:61:ad:6e:c0:98:ce:57:87:b7:
53:4a:4d:0e:9d:05:2a:c1:75:86:7e:2d:77:33:e5:c8:0f:87:
cd:6a:25:fb:98:ae:fe:43:10:e0:6b:cf:b6:28:85:dc:15:11:
d4:59:dd:6d:f9:da:37:99:a3:a0:9a:2e:0f:fd:02:11:71:55:
0b:71:3c:c1:23:06:23:90:b8:41:29:b7:9a:ba:60:6d:fe:5a:
5a:30:5f:4a:25:0a:d3:0d:34:f5:57:a1:a5:5d:77:f5:ce:47:
9e:c9:8f:d2:6c:aa:46:c3:4c:22:bc:8e:24:3e:a6:21:f1:53:
0f:7a:18:5a:97:bc:90:94:0e:7d:ff:1e:bc:bd:f5:29:1d:ab:
5d:d4:84:1e:97:ad:ea:1d:2f:22:d9:c4:b3:f5:cb:d0:5f:fd:
08:29:62:c7:65:ce:74:bd:5c:94:58:38:fa:ba:b3:80:5c:81:
5a:a6:94:9b:90:ef:cc:5d:4c:6b:02:da:8f:48:77:6e:e5:94:
9f:63:15:9c:82:74:51:bc:e2:a6:e8:ab:83:bf:af:a1:d4:7f:
ac:04:46:cd:8b:68:39:c8:77:cb:f8:48:a4:c5:0f:f6:f9:67:
59:30:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:11 2025 by rpki-client