Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/3M63QMYTWKquc3wHbdWRWDlikKI.roa
File: 3M63QMYTWKquc3wHbdWRWDlikKI.roa (raw, json)
Hash identifier: 6izpOAe0ZjyszmfD7hkCvxBDeLB0tXnzDu2GJc/oqUw=
Subject key identifier: DC:CE:B7:40:C6:13:58:AA:AE:73:7C:07:6D:D5:91:58:39:62:90:A2
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 0379DFC1
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/3M63QMYTWKquc3wHbdWRWDlikKI.roa
Signing time: Tue 24 May 2022 09:47:14 +0000
ROA not before: Tue 24 May 2022 09:47:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60609
IP address blocks: 185.37.212.0/24 maxlen: 24
185.37.213.0/24 maxlen: 24
185.158.170.0/23 maxlen: 23
185.158.171.0/24 maxlen: 24
185.158.168.0/23 maxlen: 23
185.37.215.0/24 maxlen: 24
185.77.159.0/24 maxlen: 24
185.86.11.0/24 maxlen: 24
185.77.156.0/24 maxlen: 24
185.77.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58318785 (0x379dfc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: May 24 09:47:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcceb740c61358aaae737c076dd59158396290a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:43:b6:bf:a6:0d:00:b9:18:96:f8:dd:eb:
5c:11:8f:7c:67:cd:77:2a:e6:77:72:45:42:87:21:
35:6f:22:db:3e:e8:eb:62:4c:fb:86:9b:db:18:c4:
1f:ac:e5:b1:33:9f:3a:3c:32:69:8a:b4:d5:8b:75:
04:10:a9:cb:c9:ab:5d:ac:df:8e:a2:d2:8c:00:96:
4c:31:de:c6:6b:02:88:be:6e:fb:56:a0:1b:38:43:
15:25:6d:5c:e8:89:91:6c:69:9e:29:bc:10:0d:ef:
18:55:8a:88:12:cd:e4:92:52:a7:7e:1f:b4:91:9a:
59:ab:b3:5e:cd:e4:ea:1b:01:30:41:af:de:ae:96:
f5:ee:45:09:8c:25:59:fb:12:52:31:8c:99:0a:49:
cf:a6:22:59:62:06:81:88:2f:37:b1:91:af:ff:8f:
d7:d9:f8:fa:a1:99:d4:cd:f0:35:58:af:af:07:22:
24:b3:12:74:0f:18:e4:b9:d2:d0:68:53:f6:3c:3b:
70:e8:41:6f:e3:ec:76:02:35:f4:c7:ea:89:44:3a:
a3:06:72:d9:69:a4:ab:3f:02:e2:ec:59:5d:8f:61:
28:6b:4d:71:34:9d:23:af:44:db:af:15:bf:fd:a7:
5e:b4:da:4e:32:af:8d:2c:7d:c5:a6:a6:8f:f1:f5:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:B7:40:C6:13:58:AA:AE:73:7C:07:6D:D5:91:58:39:62:90:A2
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/3M63QMYTWKquc3wHbdWRWDlikKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.212.0/23
185.37.215.0/24
185.77.156.0/23
185.77.159.0/24
185.86.11.0/24
185.158.168.0/22
Signature Algorithm: sha256WithRSAEncryption
56:87:61:1a:43:26:b4:db:53:02:cb:9a:3d:23:a0:17:42:7f:
8c:ef:e9:70:0b:5f:fc:7d:4e:ef:a7:d7:5b:93:47:d5:f6:2a:
fb:90:5e:c1:69:4d:9c:d0:8d:08:bb:1e:66:9d:f8:63:99:36:
0c:ef:16:d1:ad:35:c1:a0:40:1f:13:d4:e5:cc:3f:26:3d:c9:
44:4f:e8:26:b1:bf:49:e8:77:fc:ba:eb:47:e3:46:bd:2d:4e:
6a:fb:af:38:ed:f6:a7:6b:d6:b8:85:6d:df:36:b2:df:e2:8d:
9c:ef:18:09:93:d8:b3:57:0f:d1:11:31:9e:01:46:0f:01:ba:
40:b6:a3:d2:3d:20:b5:78:83:b5:5e:43:b2:38:fd:c7:a5:43:
0c:0b:4e:01:7e:13:9c:f2:cc:c4:80:4a:d8:b1:26:07:2a:6d:
b3:ea:5e:03:bd:1f:07:52:6e:a5:83:52:68:6f:a3:3b:5f:29:
23:3a:70:ac:98:49:01:c0:66:d4:ca:ff:05:26:6e:17:8a:ae:
71:c7:f6:82:c8:7d:ca:e5:3b:ed:26:e0:df:49:ba:d2:5b:b0:
44:db:f9:eb:58:63:14:3d:e2:13:70:86:6d:ec:f5:5e:5e:fa:
31:51:d1:10:f0:1a:b1:61:54:d4:bd:27:0c:dd:03:10:a2:47:
0a:da:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-ams.rpki-client.org