Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/3pKCfAeroy8QLWKPdBEXhidOUsA.roa
File: 3pKCfAeroy8QLWKPdBEXhidOUsA.roa (raw, json)
Hash identifier: i74FKCJStpl96gu5dT7CHwaZcE/nZnOy1XslSJONDaQ=
Subject key identifier: DE:92:82:7C:07:AB:A3:2F:10:2D:62:8F:74:11:17:86:27:4E:52:C0
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 0951D0
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/3pKCfAeroy8QLWKPdBEXhidOUsA.roa
Signing time: Tue 01 Feb 2022 09:00:37 +0000
ROA not before: Tue 01 Feb 2022 09:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57391
IP address blocks: 94.139.176.0/20 maxlen: 20
109.162.240.0/22 maxlen: 22
109.162.240.0/20 maxlen: 20
109.162.246.0/24 maxlen: 24
109.162.244.0/23 maxlen: 23
109.162.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610768 (0x951d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Feb 1 09:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de92827c07aba32f102d628f74111786274e52c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:69:f4:fc:fb:f4:63:4e:67:12:cc:a1:c0:
8f:0d:72:36:3e:35:72:50:47:49:1d:c8:4d:2c:24:
d6:9b:13:cd:5f:a5:31:53:6b:32:57:29:90:a5:f6:
52:cf:08:b9:35:5b:90:2a:d4:53:40:ad:87:f1:3e:
3f:6e:c1:dc:dc:5c:38:11:b0:e9:b3:c7:0b:85:f5:
80:7f:db:0b:96:98:16:25:c7:12:1d:fc:f5:7a:ae:
c8:6f:e5:55:f2:f6:16:c4:de:52:bd:d3:b5:1f:66:
43:8f:fe:5c:18:fd:9a:20:4b:01:11:7e:d9:bf:2f:
44:29:8f:68:e6:fc:fb:4d:d4:0e:d7:52:5e:3d:f2:
07:bc:6a:bd:25:03:59:ac:e5:e9:42:6c:7b:a0:e8:
5d:52:f6:33:66:f8:5f:79:ae:d6:c6:35:b7:6a:40:
ab:f7:3b:a0:52:52:81:1a:01:76:c0:25:58:2e:03:
43:82:aa:44:66:a2:4d:5e:8e:5e:5d:14:75:71:74:
96:be:f8:62:1b:0c:fb:de:a0:4a:52:61:c3:52:44:
6f:f9:74:96:d3:9d:86:22:9a:33:c8:78:86:7c:ca:
3b:18:0a:91:39:f5:8d:40:6c:c0:38:fa:09:0e:3d:
65:cc:46:55:ea:40:e2:fa:14:2e:20:60:1b:5f:79:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:82:7C:07:AB:A3:2F:10:2D:62:8F:74:11:17:86:27:4E:52:C0
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/3pKCfAeroy8QLWKPdBEXhidOUsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0/20
109.162.240.0/20
Signature Algorithm: sha256WithRSAEncryption
47:eb:db:ac:c7:eb:04:1b:ed:57:a0:f0:e9:cf:8c:82:d0:da:
6c:98:8d:17:e7:d1:e2:1d:31:0b:d8:72:06:60:df:51:63:c1:
3f:0f:de:ce:ca:d3:d0:8f:87:0d:9f:f8:06:b4:42:07:e1:15:
14:c1:bd:7e:66:74:d1:33:2e:08:81:91:16:47:81:bf:81:d5:
8a:c6:18:d9:de:ec:27:0e:e9:7c:3a:8a:9b:7a:f0:bd:22:3c:
0e:8a:5e:5c:06:a3:66:6c:fc:0a:f7:5c:b3:fa:cc:b5:81:45:
67:b4:01:5f:a5:55:ac:54:72:70:4d:03:59:88:ea:51:e6:62:
ed:77:65:6d:dd:d0:33:a7:ee:94:66:f0:67:c4:ca:a7:77:d1:
43:21:8c:30:89:cf:f6:fb:b5:e6:0e:33:31:91:ef:a0:e7:96:
fe:99:8d:2e:b6:4f:9c:fa:e1:b4:0a:a3:19:c5:c3:dd:d2:c5:
8e:59:7d:35:5a:f7:f9:b6:a0:98:5b:fe:cc:f9:90:89:96:ef:
ca:93:26:f1:5d:41:09:f4:10:e0:f3:c1:2b:ab:44:0f:2b:87:
d7:d5:f7:43:a2:b0:ff:cf:db:7e:49:68:36:95:55:bc:42:bb:
60:62:ab:52:99:9c:75:10:03:bf:f5:70:a7:5a:4b:1e:e4:83:
2c:ba:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org