Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/6kJjk4FBJdZEjQxowEMKsgBa20A.roa
File: 6kJjk4FBJdZEjQxowEMKsgBa20A.roa (raw, json)
Hash identifier: BkvxoQM5VKvYspizXfhJ50z+c85i+4u5KzioLVnGNFY=
Subject key identifier: EA:42:63:93:81:41:25:D6:44:8D:0C:68:C0:43:0A:B2:00:5A:DB:40
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 2FEBA876
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/6kJjk4FBJdZEjQxowEMKsgBa20A.roa
Signing time: Sat 01 Jan 2022 04:01:07 +0000
ROA not before: Sat 01 Jan 2022 04:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52126
IP address blocks: 147.78.36.0/22 maxlen: 22
185.12.34.0/23 maxlen: 23
95.130.8.0/21 maxlen: 21
185.32.216.0/22 maxlen: 22
37.26.240.0/21 maxlen: 21
77.83.208.0/22 maxlen: 22
152.89.112.0/22 maxlen: 22
2a10:7340::/29 maxlen: 29
2a02:ebc0::/29 maxlen: 29
2a02:a80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803973238 (0x2feba876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Jan 1 04:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea426393814125d6448d0c68c0430ab2005adb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:d4:21:3a:d2:75:82:0d:e3:7e:68:c0:58:
e4:2b:a4:fa:9d:16:35:df:45:5c:b1:3d:43:7e:3c:
3d:c8:7d:22:b4:03:d4:e2:02:aa:b6:5d:ef:23:f1:
1a:12:b4:82:1e:fc:e3:7a:81:af:5c:56:1f:b5:20:
b6:32:ae:39:63:f2:db:18:93:3d:2c:42:22:c1:1a:
d3:5d:41:96:1a:5c:a5:bb:b2:05:e3:13:e9:5b:3a:
21:5d:f7:cf:4a:f0:1e:d8:10:12:f8:90:0d:03:2c:
8a:97:8e:64:d6:dc:7a:fd:f8:2a:ad:35:64:7c:72:
04:ca:b1:8e:88:47:43:b9:35:29:0d:5b:d4:f1:eb:
f2:f6:1f:34:31:1e:c7:c9:81:f4:91:51:1b:cf:81:
ee:62:7e:0a:cd:de:16:20:ee:e9:57:69:1b:9b:51:
75:e0:b5:31:94:d1:80:7d:7e:94:7c:be:35:1f:1e:
98:68:e7:a2:57:5c:e0:72:4f:e8:26:d1:50:6e:e8:
35:e9:b1:5b:a8:20:ed:f9:e9:80:a1:16:4b:ac:00:
7d:8c:c7:3e:e7:e9:88:70:13:61:2a:89:03:74:54:
0e:e5:c8:2a:e4:0c:d2:4a:1b:82:4d:33:b3:6f:69:
73:3a:95:b2:17:15:2e:97:7b:1f:e3:a4:29:0a:cc:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:63:93:81:41:25:D6:44:8D:0C:68:C0:43:0A:B2:00:5A:DB:40
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/6kJjk4FBJdZEjQxowEMKsgBa20A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.240.0/21
77.83.208.0/22
95.130.8.0/21
147.78.36.0/22
152.89.112.0/22
185.12.34.0/23
185.32.216.0/22
IPv6:
2a02:a80::/29
2a02:ebc0::/29
2a10:7340::/29
Signature Algorithm: sha256WithRSAEncryption
20:33:87:b1:26:79:e5:ab:a6:c6:65:a6:b8:f3:84:46:4b:c4:
a6:b3:fa:1e:95:4b:4a:28:a4:86:6f:cf:86:3d:fa:a9:01:54:
47:56:c6:70:47:de:33:24:52:bc:db:26:6e:95:9e:26:22:92:
de:53:d2:5c:32:cc:8e:d5:c6:cb:2f:bf:ae:a4:2c:96:fc:de:
b6:9f:a9:5f:df:0e:3b:73:e1:e3:96:b4:fb:c1:e0:d7:d3:26:
b0:fb:8d:79:62:a8:e0:ac:bd:1b:75:32:c2:57:f9:46:27:09:
12:a5:fc:dc:b2:cb:d2:31:47:54:d0:c7:d5:f4:9c:13:a4:a1:
01:44:e4:9a:e6:07:6a:11:25:72:91:66:d4:f3:05:1f:39:21:
b7:ff:7f:a8:05:80:69:34:77:bc:56:c2:82:3d:d1:3e:b9:ed:
1f:9f:02:d7:e3:20:57:81:d8:ca:df:27:8b:87:d1:90:0e:94:
8d:53:1a:79:bc:59:ad:69:76:e9:c6:6c:6c:b4:d1:5f:a5:6e:
60:84:4f:d0:91:a2:8f:5c:68:a4:81:3e:1e:ee:91:02:f7:ee:
8e:65:a4:ff:8a:af:e2:50:36:9d:e3:0b:07:bb:ec:35:b4:ca:
04:de:60:4f:52:64:4f:f8:19:c8:2d:2d:93:aa:ba:a0:9c:e3:
6e:c3:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org