Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/w2BEQ3GnnHzgc8iZaj5P0tyMzBQ.roa
File: w2BEQ3GnnHzgc8iZaj5P0tyMzBQ.roa (raw, json)
Hash identifier: orkK/YF3snaP8aAy1PfATrfJj28Df9UuDh3Vzid1s48=
Subject key identifier: C3:60:44:43:71:A7:9C:7C:E0:73:C8:99:6A:3E:4F:D2:DC:8C:CC:14
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 06A83757
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/w2BEQ3GnnHzgc8iZaj5P0tyMzBQ.roa
Signing time: Sat 01 Jan 2022 04:56:00 +0000
ROA not before: Sat 01 Jan 2022 04:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34966
IP address blocks: 194.30.174.0/24 maxlen: 24
185.237.33.0/24 maxlen: 24
185.237.32.0/24 maxlen: 24
153.92.184.0/23 maxlen: 24
153.92.186.0/24 maxlen: 24
195.238.224.0/24 maxlen: 24
2a0c:280::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111687511 (0x6a83757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 04:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c360444371a79c7ce073c8996a3e4fd2dc8ccc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:e5:90:8a:a8:5b:ba:3a:83:d1:b5:e1:52:
8c:a5:49:0c:8b:8a:2f:6a:48:89:48:bb:fa:3e:83:
76:8a:5f:77:cf:1a:04:28:ec:0e:d1:f4:c7:dd:f4:
c2:38:d9:77:36:79:eb:7c:b2:73:93:00:81:60:aa:
8e:2b:ca:20:3a:28:ba:16:82:4a:6d:80:e1:dc:a2:
5e:27:aa:47:41:10:52:0f:b2:4b:4a:95:ee:3c:99:
0c:e1:4c:f0:07:2b:10:8f:9c:d6:ed:1d:96:97:e7:
f0:ab:aa:c5:f9:b2:21:cd:58:ed:ab:df:ea:34:2d:
80:94:03:45:cb:6a:5a:fd:cb:f6:61:1b:15:03:f6:
5b:ba:a0:46:b5:fd:08:24:41:c6:cf:e5:2b:a8:5d:
78:73:b9:d2:73:c1:d5:2f:d7:26:e9:a8:3c:2e:3e:
66:de:2c:5c:8e:ed:72:7c:a8:f4:bf:bf:e7:a1:27:
53:d2:2f:6f:2f:fa:cd:d5:f3:a2:5d:22:37:2d:77:
0f:77:5c:d1:77:c8:92:b1:2c:3f:8e:a2:63:cb:d0:
9c:07:bb:ed:87:e3:16:d9:d1:20:49:64:04:e4:ac:
f2:20:7d:0a:76:ed:33:53:14:c8:32:a8:df:6e:da:
b8:ef:0b:d6:3d:6a:9a:33:74:05:1f:6c:95:29:ac:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:44:43:71:A7:9C:7C:E0:73:C8:99:6A:3E:4F:D2:DC:8C:CC:14
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/w2BEQ3GnnHzgc8iZaj5P0tyMzBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.184.0-153.92.186.255
185.237.32.0/23
194.30.174.0/24
195.238.224.0/24
IPv6:
2a0c:280::/30
Signature Algorithm: sha256WithRSAEncryption
34:42:2c:f7:63:99:23:66:28:b6:a5:5e:9d:b2:de:95:3a:0a:
57:0c:b9:d7:02:4a:7e:78:07:11:d6:77:12:d9:eb:5b:cb:5b:
c9:aa:a3:b2:31:a3:ea:7b:3b:17:85:e6:54:2d:cb:6a:55:0a:
a5:c8:58:45:2c:aa:e6:c3:e0:76:96:78:f3:4b:3f:9c:74:41:
d2:89:8e:b1:95:8e:6d:97:52:e0:78:eb:3f:c9:43:5b:db:68:
32:ff:1a:44:3a:e1:a9:89:0a:7b:65:34:6a:03:89:e3:d6:a1:
92:89:c5:50:ea:a0:ab:1e:e7:66:b9:df:8b:8a:22:7d:92:51:
c1:4b:58:20:86:52:b0:25:7e:2f:e5:ce:fe:b5:a1:9e:f1:5b:
a1:ed:7a:46:bb:87:73:0b:3f:d5:fd:9d:17:9f:ba:b9:96:55:
89:74:ec:4d:be:c6:b3:6c:3e:f8:52:ec:dd:a3:c4:44:1d:84:
b6:f7:3f:80:ad:3e:00:20:61:95:ca:59:24:38:f3:65:23:3a:
d6:ab:b8:02:28:8c:84:cd:b5:80:5b:2b:92:97:6b:93:53:41:
48:ef:f1:93:48:eb:42:ec:2b:3b:fb:e7:17:d6:90:e6:81:84:
de:ff:89:b0:1b:f0:93:ba:11:d4:b2:b5:d3:c6:c1:d6:2e:33:
ef:28:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org