Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AzzLewDLmpINgr9PmdEuoW11XPM.roa
File: AzzLewDLmpINgr9PmdEuoW11XPM.roa (raw, json)
Hash identifier: Grcm7UiAP96o2+ykE6EEfphMff7hg0otTkD3NbO2QYo=
Subject key identifier: 03:3C:CB:7B:00:CB:9A:92:0D:82:BF:4F:99:D1:2E:A1:6D:75:5C:F3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CA25276
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AzzLewDLmpINgr9PmdEuoW11XPM.roa
Signing time: Sat 01 Jan 2022 05:04:48 +0000
ROA not before: Sat 01 Jan 2022 05:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 194.76.135.0/24 maxlen: 24
193.26.115.0/24 maxlen: 24
141.98.16.0/22 maxlen: 22
185.150.1.0/24 maxlen: 24
185.35.228.0/22 maxlen: 22
45.65.92.0/22 maxlen: 22
194.61.40.0/22 maxlen: 22
185.165.45.0/24 maxlen: 24
193.187.136.0/22 maxlen: 22
185.217.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211964534 (0xca25276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=033ccb7b00cb9a920d82bf4f99d12ea16d755cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:31:c0:74:6e:0a:03:f3:13:40:bb:8c:cc:
6c:1e:ad:71:0d:13:29:45:70:20:7f:d9:2e:79:b1:
7e:f7:2c:c3:5e:30:07:1e:e3:3b:90:3f:fa:b7:a0:
c5:c7:9a:bb:b2:c4:84:f3:c1:75:6a:98:07:2a:66:
f0:d0:fd:3c:7f:c5:f5:d9:af:c4:d9:2d:c2:99:23:
07:ab:f2:f5:11:47:aa:da:4f:fe:13:3b:60:55:d9:
43:3f:12:35:bd:7f:a7:aa:1a:cc:e9:ba:8c:2c:86:
05:f5:b6:93:7f:2b:5a:a7:52:4f:60:a0:e1:9f:a3:
45:de:c0:03:d0:ea:30:31:ec:c6:dd:f4:82:4d:08:
31:b9:65:0b:86:ba:30:d1:09:d4:c3:ba:e2:20:14:
48:30:ff:8c:47:43:3e:10:34:36:cb:0a:36:59:11:
a1:cf:c3:a1:55:e3:d4:ca:2f:92:4c:80:a8:ed:b8:
ad:f9:2e:0d:ac:1e:58:6a:a5:ff:6b:b4:ff:9d:6c:
b7:67:07:f6:24:d5:6e:9a:cc:1d:bb:02:93:1a:24:
e1:39:47:a6:37:db:10:c2:87:ef:f4:bb:0b:23:d1:
cb:92:a8:da:a3:6a:fa:de:e6:01:f5:d6:42:3d:30:
41:8a:3c:f9:e5:ef:2f:42:df:fc:94:8a:79:e7:ed:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:CB:7B:00:CB:9A:92:0D:82:BF:4F:99:D1:2E:A1:6D:75:5C:F3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AzzLewDLmpINgr9PmdEuoW11XPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.92.0/22
141.98.16.0/22
185.35.228.0/22
185.150.1.0/24
185.165.45.0/24
185.217.116.0/24
193.26.115.0/24
193.187.136.0/22
194.61.40.0/22
194.76.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8c:be:cc:86:0e:67:77:ea:72:f1:44:bb:8d:04:26:e5:db:
0b:95:ac:14:ca:fc:6f:cf:3b:5f:5a:9e:f7:5d:5c:64:16:5f:
cf:33:0b:fa:25:74:30:03:0f:17:f9:4f:ab:45:e0:32:6e:16:
b7:35:f6:23:75:48:01:b9:31:6a:b8:a7:e3:59:a5:4b:e6:c1:
83:9a:81:49:d1:ac:56:51:cb:45:71:f7:94:7b:9e:0b:52:4f:
f7:f7:70:8a:ae:eb:08:c3:86:92:d2:d9:37:17:f6:44:f6:4b:
e6:96:a2:3b:bd:fb:19:ce:f9:f8:72:16:12:cc:fc:71:c9:6e:
60:a0:bb:60:1a:ef:3b:72:0d:40:29:9f:a1:c9:a1:7c:88:21:
f9:fa:2f:f2:a7:84:ee:58:7a:d6:85:c3:eb:8c:dd:8e:df:30:
13:5b:e1:4c:f9:3c:5a:be:44:56:7e:92:6f:b1:1e:be:fc:24:
d5:2c:a1:03:14:d8:b3:8b:7b:fd:f9:91:ec:42:ec:75:63:cf:
a7:55:a6:41:3f:bd:b0:31:67:1c:52:c8:b5:3b:ae:df:f6:61:
97:77:1e:fe:9f:e1:27:c4:72:c9:cd:2b:d3:f4:16:2e:2a:72:
cb:0e:34:79:f2:24:6b:54:70:37:c9:ff:81:b9:dc:da:bc:43:
fd:28:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org