Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/1-dCLsNe44RQNbSe_sRroH7o0ARM.roa
File: 1-dCLsNe44RQNbSe_sRroH7o0ARM.roa (raw, json)
Hash identifier: dtfdaL/HxHBQAp7ihMTwNhCFVYkwPjM6mQOZKlHWhZ8=
Subject key identifier: F9:D0:8B:B0:D7:B8:E1:14:0D:6D:27:BF:B1:1A:E8:1F:BA:34:01:13
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 33F31E56
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/1-dCLsNe44RQNbSe_sRroH7o0ARM.roa
Signing time: Sat 01 Jan 2022 06:02:42 +0000
ROA not before: Sat 01 Jan 2022 06:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31472
IP address blocks: 185.91.41.0/24 maxlen: 24
185.91.40.0/22 maxlen: 22
185.34.80.0/22 maxlen: 22
185.60.4.0/22 maxlen: 22
185.61.88.0/22 maxlen: 22
195.206.184.0/21 maxlen: 21
37.157.48.0/21 maxlen: 21
185.86.20.0/22 maxlen: 22
185.2.76.0/22 maxlen: 22
2a00:b840:1::/48 maxlen: 48
2a00:b840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871571030 (0x33f31e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Jan 1 06:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9d08bb0d7b8e1140d6d27bfb11ae81fba340113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:b5:19:ab:6c:9a:6a:20:c9:5b:66:45:16:
9b:4d:a5:d3:5d:ef:45:9f:97:4a:31:19:1b:91:25:
f8:c5:94:73:93:de:2a:da:b9:ed:0f:94:58:30:db:
98:9f:ff:29:27:e5:ef:c1:dd:e9:03:ae:9f:44:ab:
fe:6f:42:57:08:64:27:bb:1e:2b:d9:b7:80:d1:e2:
4c:03:05:38:f3:9f:79:d6:90:f3:2e:29:73:04:c4:
05:13:8e:cc:10:99:50:21:ff:b8:5e:84:16:5b:c8:
09:ff:8b:3d:4f:30:83:71:85:52:92:d8:46:9b:47:
fa:02:02:69:3f:f6:a4:57:39:d8:65:ba:88:15:2e:
67:ed:eb:58:8d:87:ae:f3:16:c1:5b:a9:ca:bc:bb:
f1:b4:f5:4c:51:dd:66:77:43:e6:09:83:a3:f4:33:
4e:eb:51:d8:47:25:05:a1:59:02:de:75:56:e0:4a:
30:30:f1:57:b5:a7:08:19:30:62:a7:5e:6b:50:d3:
f6:f7:d3:59:46:c5:e2:c7:0f:5f:eb:f5:14:a3:89:
c0:37:23:6c:fe:5c:3b:f3:df:57:6e:79:f7:ce:a7:
1a:73:8d:91:4b:b2:64:6d:c2:9a:93:59:98:44:15:
30:a4:5d:c7:6c:7c:cc:af:70:72:82:f1:e3:62:b2:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D0:8B:B0:D7:B8:E1:14:0D:6D:27:BF:B1:1A:E8:1F:BA:34:01:13
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/1-dCLsNe44RQNbSe_sRroH7o0ARM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.48.0/21
185.2.76.0/22
185.34.80.0/22
185.60.4.0/22
185.61.88.0/22
185.86.20.0/22
185.91.40.0/22
195.206.184.0/21
IPv6:
2a00:b840::/29
Signature Algorithm: sha256WithRSAEncryption
9f:ca:3b:23:09:7e:02:74:e0:44:62:76:01:82:28:97:74:7f:
e1:d5:84:6b:9e:e0:30:1e:69:5d:76:68:ff:49:13:f1:03:1d:
d2:2c:f4:43:60:f4:72:aa:07:fc:5c:e3:be:32:72:25:a0:e3:
81:3a:eb:62:d8:14:68:df:dc:09:7b:61:3a:eb:76:4a:1a:4a:
77:2c:46:7e:01:e2:4f:73:55:06:c6:59:20:5d:b6:3d:54:22:
b0:d5:34:b5:f4:b6:1b:0e:e5:5a:43:98:86:5d:71:64:ac:a8:
f4:a0:6a:da:6b:37:df:f7:89:2c:c9:14:db:35:82:c1:19:0e:
c3:50:48:34:c7:8c:8c:98:ee:60:a5:65:7d:86:b8:2f:a7:ec:
5e:9b:12:a1:79:da:d4:91:96:1d:e3:f0:a6:4e:a9:b7:31:ed:
4e:a0:d7:c8:e5:26:93:c1:59:c4:bc:ad:02:4d:db:86:e7:73:
09:51:39:50:57:e7:ce:d5:b2:1d:16:c6:32:0e:7a:09:71:3a:
91:65:a9:ad:39:42:fd:2f:93:e5:de:b6:63:60:d9:09:fa:aa:
c0:82:2f:04:c8:63:93:8d:bd:ef:8c:e3:f9:db:e5:1d:f8:c1:
66:f9:c6:0e:0e:0d:9b:43:fa:e5:75:97:68:de:3a:f9:49:9f:
f3:13:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:55 2023 by rpki-client on console-ams.rpki-client.org