Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/ivaN1vb1eP5lMJDKMuq3sIc4X8I.roa
File: ivaN1vb1eP5lMJDKMuq3sIc4X8I.roa (raw, json)
Hash identifier: gyPUR+V9EeskVJxbbm7Rg/oSwZ3X/tiETbj69aDUtFs=
Subject key identifier: 8A:F6:8D:D6:F6:F5:78:FE:65:30:90:CA:32:EA:B7:B0:87:38:5F:C2
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 33B8BE92
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/ivaN1vb1eP5lMJDKMuq3sIc4X8I.roa
Signing time: Sat 01 Jan 2022 04:55:47 +0000
ROA not before: Sat 01 Jan 2022 04:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 185.28.221.0/24 maxlen: 24
185.28.222.0/24 maxlen: 24
185.28.223.0/24 maxlen: 24
185.28.220.0/24 maxlen: 24
37.10.30.0/24 maxlen: 24
37.10.31.0/24 maxlen: 24
37.10.63.0/24 maxlen: 24
5.57.16.0/24 maxlen: 24
5.57.17.0/24 maxlen: 24
5.57.19.0/24 maxlen: 24
5.57.20.0/24 maxlen: 24
5.57.21.0/24 maxlen: 24
5.57.18.0/24 maxlen: 24
5.57.23.0/24 maxlen: 24
37.10.0.0/24 maxlen: 24
37.10.1.0/24 maxlen: 24
37.10.4.0/22 maxlen: 22
37.10.4.0/24 maxlen: 24
37.10.7.0/24 maxlen: 24
37.10.5.0/24 maxlen: 24
37.10.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867745426 (0x33b8be92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 1 04:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8af68dd6f6f578fe653090ca32eab7b087385fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:0f:6d:14:f7:1f:bb:bf:c8:e9:15:9c:3d:
36:39:c9:40:ab:18:e2:d6:ef:d1:59:e3:d6:41:0c:
e8:57:ac:74:ab:1a:dc:38:ff:0d:08:2e:5a:59:45:
b6:d8:ca:c1:75:86:ed:dc:9d:aa:c8:53:40:39:2e:
8b:9b:93:e1:da:72:12:bd:24:98:d7:31:58:86:b2:
32:0f:7d:5d:0d:2e:0e:cd:d2:82:41:54:fa:b8:be:
13:30:08:e3:f0:08:28:84:ef:7a:08:fc:7c:64:47:
98:50:85:b1:7d:ae:93:1a:4b:bb:5a:b7:d3:ef:3e:
94:9e:93:c7:43:ac:ea:00:5b:f5:2e:5e:0e:80:cb:
fe:1e:a8:57:73:22:65:6e:12:65:7f:c2:e0:f3:d0:
9d:e5:d3:ba:a6:5d:a6:d0:ea:85:66:f7:bd:e7:89:
54:73:11:66:de:bd:77:39:9f:c8:0f:d4:b1:15:3e:
7c:a4:6e:68:93:43:b4:3f:e9:bb:51:6f:0a:67:85:
c6:26:b7:bd:8b:8b:16:d9:d2:6a:7f:d2:24:94:4e:
69:a1:5d:8f:cd:a4:55:aa:ad:15:e4:c7:b6:70:44:
1c:1c:b7:db:5f:c1:2f:b3:98:57:b7:7f:93:8f:af:
f7:db:c6:a1:5d:96:41:58:08:2b:2a:42:df:97:2d:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:8D:D6:F6:F5:78:FE:65:30:90:CA:32:EA:B7:B0:87:38:5F:C2
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/ivaN1vb1eP5lMJDKMuq3sIc4X8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.16.0-5.57.21.255
5.57.23.0/24
37.10.0.0/23
37.10.4.0/22
37.10.30.0/23
37.10.63.0/24
185.28.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a9:04:14:fd:6f:ec:19:ae:3e:e1:6b:fe:0d:cb:7a:2e:3c:
cd:bc:eb:1a:44:29:bc:c5:87:04:19:d8:ca:98:28:15:a9:fd:
fd:44:b9:07:d5:af:8f:86:5c:e4:3d:98:b4:59:b5:0e:c9:46:
9c:d5:bb:d8:49:37:b5:45:af:62:75:f9:95:da:94:0d:3a:65:
73:d4:be:75:e0:31:c3:32:8c:03:32:bd:bd:d9:f4:b5:a1:c1:
ac:fc:1b:d6:0b:df:a5:01:7d:2f:d5:8d:97:38:fa:08:95:38:
48:bb:01:bc:6a:04:2c:f3:12:af:75:c7:79:b3:fd:ca:da:dd:
e5:5e:55:6c:e5:ae:87:95:ab:80:46:53:46:a4:4d:ba:88:95:
8f:59:c1:35:25:bf:56:d4:f1:99:b8:49:de:b3:bb:59:c6:6e:
ab:c0:a6:d3:17:e6:0b:c8:8c:6a:28:7f:d6:80:3d:05:55:29:
d5:2f:95:98:39:d4:ab:ed:3f:11:5f:21:27:5b:a2:fc:ed:5d:
0f:cf:4a:4e:32:d0:04:51:a7:39:a2:69:af:f8:a8:02:ee:07:
11:2c:24:60:57:e7:ab:2e:37:ae:26:ed:79:5a:90:2f:01:7b:
5c:79:59:18:52:27:29:23:90:67:36:da:0e:c3:60:25:36:0d:
0e:f0:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org