Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/nC7utZYAF5zOcDycxZ4OFfQYcpw.roa
File: nC7utZYAF5zOcDycxZ4OFfQYcpw.roa (raw, json)
Hash identifier: yU+HsTows0O0fpzQlaCKujSIG/aDQnIfjlhNVWcFkV8=
Subject key identifier: 9C:2E:EE:B5:96:00:17:9C:CE:70:3C:9C:C5:9E:0E:15:F4:18:72:9C
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 06CD23A8
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/nC7utZYAF5zOcDycxZ4OFfQYcpw.roa
Signing time: Sat 01 Jan 2022 06:06:51 +0000
ROA not before: Sat 01 Jan 2022 06:06:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44407
IP address blocks: 37.140.224.0/21 maxlen: 21
185.204.252.0/22 maxlen: 22
79.132.144.0/20 maxlen: 20
86.105.88.0/21 maxlen: 21
185.243.120.0/22 maxlen: 22
185.16.48.0/22 maxlen: 22
80.240.160.0/20 maxlen: 20
217.26.192.0/20 maxlen: 20
89.43.152.0/21 maxlen: 21
185.176.176.0/22 maxlen: 22
85.112.192.0/19 maxlen: 19
185.223.148.0/22 maxlen: 22
45.87.56.0/22 maxlen: 22
185.183.60.0/22 maxlen: 22
185.183.64.0/22 maxlen: 22
185.181.152.0/22 maxlen: 22
194.36.192.0/22 maxlen: 22
45.148.108.0/22 maxlen: 22
45.156.228.0/22 maxlen: 22
46.247.224.0/19 maxlen: 19
185.183.252.0/22 maxlen: 22
195.123.7.0/24 maxlen: 24
185.198.224.0/22 maxlen: 22
185.209.140.0/22 maxlen: 22
185.184.4.0/22 maxlen: 22
89.35.208.0/21 maxlen: 21
45.81.80.0/22 maxlen: 22
195.177.108.0/22 maxlen: 22
2a0a:1c80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114107304 (0x6cd23a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Jan 1 06:06:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c2eeeb59600179cce703c9cc59e0e15f418729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:a0:45:c6:ed:b6:83:f2:b3:50:8f:5a:3c:
bd:6d:51:93:57:67:1b:ad:62:f9:a4:12:dc:1e:1e:
7a:06:1e:e6:29:c9:d6:8d:30:62:90:bd:3e:8c:de:
7c:ed:30:78:ed:16:1d:e6:08:b7:37:00:9c:43:77:
c2:9b:0d:f3:13:94:6f:6e:3a:90:bd:aa:66:ab:b2:
32:9d:ac:48:27:65:70:df:54:5b:97:9e:9b:41:38:
40:f8:f6:63:57:5c:d4:ad:fe:ad:ee:61:96:2d:f5:
9f:75:ba:32:02:17:df:c5:c7:9f:4c:fe:4f:c5:24:
2a:a9:44:33:65:8f:40:f2:2e:41:37:b3:d9:e4:21:
87:30:48:8e:09:23:84:44:89:a4:75:38:c1:d8:be:
25:be:5c:f0:2a:e6:f1:0f:8a:9d:7c:41:a6:49:ba:
ae:7f:da:76:10:90:ef:c4:0d:80:92:20:21:7e:b0:
57:fc:89:7e:0a:d4:eb:20:c0:61:c7:a9:19:f7:8d:
5b:a9:bc:a6:cb:3b:50:9c:06:e6:26:b0:c5:2a:9a:
63:82:bc:92:60:6f:6f:66:03:bc:82:c5:9c:c0:ff:
80:0b:eb:a4:d5:c6:6e:db:20:41:0d:ab:64:07:e3:
ea:36:7b:aa:99:b5:fb:f5:92:7c:3c:87:65:d1:90:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:EE:B5:96:00:17:9C:CE:70:3C:9C:C5:9E:0E:15:F4:18:72:9C
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/nC7utZYAF5zOcDycxZ4OFfQYcpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.224.0/21
45.81.80.0/22
45.87.56.0/22
45.148.108.0/22
45.156.228.0/22
46.247.224.0/19
79.132.144.0/20
80.240.160.0/20
85.112.192.0/19
86.105.88.0/21
89.35.208.0/21
89.43.152.0/21
185.16.48.0/22
185.176.176.0/22
185.181.152.0/22
185.183.60.0-185.183.67.255
185.183.252.0/22
185.184.4.0/22
185.198.224.0/22
185.204.252.0/22
185.209.140.0/22
185.223.148.0/22
185.243.120.0/22
194.36.192.0/22
195.123.7.0/24
195.177.108.0/22
217.26.192.0/20
IPv6:
2a0a:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
18:43:e1:c3:f3:44:59:1d:ef:a8:27:ce:d8:bc:92:cd:0a:3b:
8b:3a:d6:28:aa:ef:8c:2a:c0:10:14:06:e0:53:ca:f2:01:1e:
86:7f:a9:df:a8:95:fc:7d:1a:8c:93:8b:38:5c:98:48:1c:ae:
f4:51:70:a4:50:3c:83:ba:c2:52:49:77:b7:c0:7d:69:4b:46:
1f:a9:85:81:fc:86:e6:98:1e:6d:57:5f:04:8d:1d:f5:ff:77:
48:04:07:d7:a4:84:9c:9d:32:7a:23:b1:85:5e:68:72:9e:b9:
49:1b:ce:91:29:39:99:34:a9:bf:00:25:64:15:70:a2:e5:54:
a0:14:f5:0e:5a:12:53:dd:59:ab:6e:a1:d5:18:c1:05:3f:a0:
63:09:26:96:be:b8:37:1e:2c:af:8d:0e:0b:b2:46:39:34:a9:
5e:3c:01:5f:58:95:84:5d:ce:b5:0a:9d:b5:55:2d:9e:a6:5b:
24:44:9d:4e:2b:18:6e:9f:eb:92:b9:42:f8:48:ca:97:29:5f:
c7:b2:3c:eb:5b:35:38:9c:4f:bf:63:79:de:a2:3f:8c:2d:09:
ec:8b:60:d4:88:c0:bd:56:2a:df:fb:7d:47:55:72:e7:67:15:
0e:38:67:03:77:1e:0f:1f:3d:e2:48:b0:aa:b3:2f:08:69:58:
da:e0:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:46 2024 by rpki-client on console-ams.rpki-client.org