Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/sknXl-p8N8ycgKpKplcM4mpspPo.roa
File: sknXl-p8N8ycgKpKplcM4mpspPo.roa (raw, json)
Hash identifier: MT8QnBk545NSYgbuGeqMDqYxCM3RCiZ0NPR/gAfEceg=
Subject key identifier: B2:49:D7:97:EA:7C:37:CC:9C:80:AA:4A:A6:57:0C:E2:6A:6C:A4:FA
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 23C78355
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/sknXl-p8N8ycgKpKplcM4mpspPo.roa
Signing time: Sat 01 Jan 2022 07:59:26 +0000
ROA not before: Sat 01 Jan 2022 07:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.116.0/22 maxlen: 22
37.139.112.0/21 maxlen: 22
2a00:9f40:5::/48 maxlen: 48
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600277845 (0x23c78355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: Jan 1 07:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b249d797ea7c37cc9c80aa4aa6570ce26a6ca4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:56:03:e2:41:2e:47:b6:61:c6:9e:a8:01:
88:01:5c:a5:a8:51:02:c2:20:9a:40:a4:96:a3:0d:
fa:fb:a4:1f:6f:a3:c6:f8:9e:75:aa:8c:af:4c:f3:
05:ab:40:4f:e1:82:7e:2c:28:82:98:8c:26:f8:bf:
e1:b4:a5:4c:37:15:a8:c3:d9:83:00:0c:5c:67:7f:
da:55:27:5d:7d:b8:1a:49:56:54:b2:d5:82:3e:5c:
a1:58:16:4d:86:d4:3d:c7:e4:fd:5b:07:19:c7:f8:
32:c8:02:08:bd:34:2b:ae:72:13:87:43:79:06:f5:
db:bc:1f:4c:71:c1:0f:9b:cf:12:4a:03:57:7e:1f:
11:bd:3c:62:57:10:ac:fd:26:68:4e:4d:e4:8b:6f:
86:ca:dc:66:5a:1c:81:8c:59:41:4f:b3:3c:fc:a9:
0a:a3:74:8d:d5:b8:d3:30:7c:f3:58:b7:75:b8:e7:
60:fc:c0:b4:53:70:1f:03:16:50:51:40:98:10:5c:
4a:c1:37:1e:c9:f0:16:96:e2:c9:f5:c5:68:7c:5b:
a9:26:88:a2:61:aa:f9:79:b7:3d:69:bf:26:ab:d0:
57:6f:0c:3f:1e:cf:1e:10:ab:4c:7c:ca:29:c1:ac:
e7:61:60:7c:2d:d5:cf:09:a9:eb:ba:d2:8d:1e:80:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:D7:97:EA:7C:37:CC:9C:80:AA:4A:A6:57:0C:E2:6A:6C:A4:FA
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/sknXl-p8N8ycgKpKplcM4mpspPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
45:27:fd:8b:5b:bf:36:a1:9a:1a:fb:b3:54:0f:42:0e:22:08:
fb:9b:85:32:3d:74:19:70:e6:81:70:31:0c:02:6b:a3:1b:7c:
09:3a:8d:7b:ea:43:5e:e0:ee:6d:13:86:14:e6:50:f1:ce:79:
94:83:5a:89:a5:af:4a:6f:22:fc:61:0e:01:13:52:a8:ce:3a:
1d:b9:01:c6:39:51:10:5e:35:8e:1a:93:14:70:6f:d3:7a:da:
a3:72:ab:4a:d9:f3:1b:5e:57:ff:55:8b:9f:03:b0:b9:cf:2f:
4f:21:c0:0d:42:ca:75:2e:d4:93:ec:fb:26:9c:2d:a5:ce:30:
e9:f3:87:67:33:2d:0f:d6:2b:81:9b:c8:ac:75:ff:90:b6:fc:
30:ae:f8:7c:be:eb:c4:d5:6c:ec:d8:e1:c0:03:d8:69:88:8c:
ac:a5:2b:d0:3f:fd:82:17:18:44:4b:bc:e5:ca:37:65:f8:34:
ea:cb:72:06:95:88:23:20:58:0f:3f:6a:a9:27:56:66:6e:2b:
69:af:3d:b1:ce:43:80:ab:48:27:a5:86:08:5b:63:49:c9:5f:
3a:19:46:cf:47:b3:db:00:b7:0a:94:0d:c8:9e:97:e5:ee:5b:
ce:0a:ea:06:11:72:e8:f2:f5:35:ab:17:0c:10:3c:d9:7f:2f:
5b:5b:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:36 2023 by rpki-client on console-ams.rpki-client.org