Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/viOAljrlysEZPv-HKtkCjJdP_24.roa
File: viOAljrlysEZPv-HKtkCjJdP_24.roa (raw, json)
Hash identifier: BdHNvZVp4788vLemRI+47uWP0dIfO5S+8N7esptFNak=
Subject key identifier: BE:23:80:96:3A:E5:CA:C1:19:3E:FF:87:2A:D9:02:8C:97:4F:FF:6E
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 018281985B90C899D618F38D130789372858
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/viOAljrlysEZPv-HKtkCjJdP_24.roa
Signing time: Tue 09 Aug 2022 07:53:41 +0000
ROA not before: Tue 09 Aug 2022 07:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61400
IP address blocks: 217.199.223.0/24 maxlen: 24
217.199.221.0/24 maxlen: 24
193.243.182.0/24 maxlen: 24
78.24.92.0/22 maxlen: 22
185.16.212.0/22 maxlen: 22
37.0.120.0/21 maxlen: 21
89.248.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:98:5b:90:c8:99:d6:18:f3:8d:13:07:89:37:28:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Aug 9 07:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be2380963ae5cac1193eff872ad9028c974fff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:72:c0:65:3f:ab:47:e1:d7:16:00:b2:c1:
f4:bf:79:0e:03:34:a3:c1:47:40:7f:c3:32:41:93:
63:99:82:24:62:42:99:cf:b2:cb:56:b8:2e:ba:4a:
e2:63:fe:7f:06:9e:fd:48:35:81:1f:c9:29:20:81:
3c:57:2a:40:07:9d:8b:22:28:b2:2c:11:2d:8b:48:
ec:89:bb:b8:41:1a:d0:74:12:3d:6b:11:89:a7:36:
ff:d9:79:48:82:be:6e:72:29:59:14:c9:87:d8:fa:
dc:1d:64:b0:a9:2f:e5:b1:88:89:cf:7f:8b:c4:ae:
a1:53:5d:d5:1c:f6:3d:1c:7f:5c:51:d0:03:f9:09:
79:27:f7:dc:a5:e8:2f:11:e8:a7:1c:5d:cd:8f:41:
dd:e9:81:2b:32:44:52:e0:11:19:fb:3a:fd:60:a5:
70:9c:b1:ee:b2:08:ee:13:5a:b1:3c:f6:7f:b2:36:
28:f5:26:cf:bb:16:f8:98:47:16:90:29:58:e0:24:
8b:dd:73:b3:82:37:f6:6b:4b:38:01:7f:81:40:fd:
25:1f:58:39:d9:84:69:58:3c:81:71:aa:69:f0:cc:
4d:91:ef:2b:09:85:b9:bb:0e:d6:9d:62:e8:b1:89:
43:cb:32:b2:7c:d0:ba:c0:99:58:e3:5f:5d:59:cf:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:80:96:3A:E5:CA:C1:19:3E:FF:87:2A:D9:02:8C:97:4F:FF:6E
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/viOAljrlysEZPv-HKtkCjJdP_24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.120.0/21
78.24.92.0/22
89.248.235.0/24
185.16.212.0/22
193.243.182.0/24
217.199.221.0/24
217.199.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fc:53:98:64:48:77:33:be:87:62:41:ce:b5:1f:02:61:af:
6c:1d:9e:ad:38:19:12:bd:36:7f:de:79:26:76:0c:ff:d9:d2:
68:69:86:de:1b:f5:c9:cf:7b:8c:e5:0a:06:30:25:a1:a7:27:
4f:18:0c:2c:cf:da:11:c4:3a:5d:e7:6d:11:60:15:c8:96:46:
d4:ac:ad:5d:55:a0:73:e6:85:f1:33:04:a9:45:e0:77:69:e3:
76:ef:b5:8d:00:53:fe:65:1e:99:e9:41:26:d8:99:c5:55:5f:
e7:fe:07:1b:5f:60:48:a4:ec:6d:23:e2:ad:5f:ae:e8:b7:b8:
4c:68:52:3b:bb:3a:12:b8:3f:d2:91:68:a1:54:c3:9d:2f:c5:
3e:75:0a:6b:d1:ac:dc:f5:e8:de:02:cb:94:a8:8e:24:1e:b8:
4b:f5:af:e2:c5:b5:d9:d6:5b:67:ce:f1:09:a9:b5:3c:14:e3:
1f:1b:ef:38:21:86:1b:7f:cb:4a:d3:bd:a4:df:53:eb:fe:f8:
01:6e:4f:43:60:cc:46:05:9d:3e:e3:a7:d8:d1:d6:e7:de:e6:
83:fb:3f:29:13:d7:b3:cf:bf:4e:89:64:ea:6b:be:e6:d6:24:
df:cd:8c:06:b2:fa:de:53:e7:fd:d5:e5:4d:0e:50:ba:36:e5:
5b:9f:55:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:10 2024 by rpki-client on console-fra.rpki-client.org