Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/HD7_qN40cKazk1ZBarJkGx0HiWk.roa
File: HD7_qN40cKazk1ZBarJkGx0HiWk.roa (raw, json)
Hash identifier: 3uYCY1zu88Wc3gIReN7WUeNsyv6wW+c3FS6BdExkE+Y=
Subject key identifier: 1C:3E:FF:A8:DE:34:70:A6:B3:93:56:41:6A:B2:64:1B:1D:07:89:69
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 17418994
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/HD7_qN40cKazk1ZBarJkGx0HiWk.roa
Signing time: Sat 01 Jan 2022 16:03:45 +0000
ROA not before: Sat 01 Jan 2022 16:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33977
IP address blocks: 86.106.79.0/24 maxlen: 24
185.244.108.0/22 maxlen: 22
86.106.86.0/24 maxlen: 24
93.118.45.0/24 maxlen: 24
84.247.30.0/24 maxlen: 24
89.39.253.0/24 maxlen: 24
77.81.180.0/24 maxlen: 24
86.107.24.0/23 maxlen: 23
77.81.123.0/24 maxlen: 24
86.105.17.0/24 maxlen: 24
85.204.110.0/23 maxlen: 23
89.33.130.0/23 maxlen: 23
31.14.58.0/23 maxlen: 23
31.14.57.0/24 maxlen: 24
93.113.157.0/24 maxlen: 24
85.204.52.0/23 maxlen: 23
86.105.180.0/24 maxlen: 24
86.104.7.0/24 maxlen: 24
93.114.251.0/24 maxlen: 24
86.104.16.0/24 maxlen: 24
77.81.87.0/24 maxlen: 24
188.214.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390171028 (0x17418994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c3effa8de3470a6b39356416ab2641b1d078969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:64:6c:38:49:01:4e:68:f0:29:f5:25:40:
3c:24:ec:7d:6e:62:27:79:86:38:a8:d2:ce:c9:fc:
a4:ee:d9:47:f6:d2:4a:d8:a6:33:4f:a2:9e:dc:77:
89:11:3d:8a:bd:90:a9:40:c1:07:93:fa:c2:01:32:
c6:53:59:69:a9:39:99:03:82:7b:bc:df:50:85:77:
d3:58:89:38:ae:90:cf:ae:b4:a9:91:d1:40:7a:ea:
cd:da:e3:36:d3:12:9e:ab:d6:f7:b8:7d:42:d3:12:
41:7d:37:f8:a5:b2:8e:6b:a8:37:5c:f3:5c:93:20:
77:6b:1c:03:a1:cd:62:67:96:59:dc:58:fa:eb:28:
10:a6:d5:73:86:b7:3f:66:7e:94:c1:fc:43:86:61:
1f:8d:6f:7a:d5:39:79:5f:09:ce:9e:19:eb:f9:d7:
98:51:1c:e8:99:f9:62:d8:b5:88:c0:22:d3:db:f9:
64:fb:d9:d5:4d:70:09:a9:7f:f7:e7:11:28:7a:55:
f3:52:55:61:a4:01:5f:29:df:1d:df:7f:b2:01:4f:
fd:e6:27:63:56:b3:c0:5a:e5:63:9c:d4:1b:1d:94:
30:94:91:e7:72:f2:8b:c3:28:a7:17:b6:96:d7:a3:
cb:0b:0f:2e:cd:52:1e:17:c3:04:46:e9:32:df:86:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:FF:A8:DE:34:70:A6:B3:93:56:41:6A:B2:64:1B:1D:07:89:69
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/HD7_qN40cKazk1ZBarJkGx0HiWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.57.0-31.14.59.255
77.81.87.0/24
77.81.123.0/24
77.81.180.0/24
84.247.30.0/24
85.204.52.0/23
85.204.110.0/23
86.104.7.0/24
86.104.16.0/24
86.105.17.0/24
86.105.180.0/24
86.106.79.0/24
86.106.86.0/24
86.107.24.0/23
89.33.130.0/23
89.39.253.0/24
93.113.157.0/24
93.114.251.0/24
93.118.45.0/24
185.244.108.0/22
188.214.126.0/24
Signature Algorithm: sha256WithRSAEncryption
97:12:7b:cc:e5:d4:3a:b4:e2:c4:44:ac:5d:76:00:ec:f0:ca:
ec:6d:77:df:a7:30:f9:2d:3c:18:2b:73:8d:86:42:f4:85:09:
05:b4:d0:03:50:45:fa:c0:5f:ad:7f:07:b6:7c:66:d7:b4:8e:
ea:66:0a:da:49:10:e7:71:23:9f:f4:e5:36:eb:ba:e8:fe:9c:
1b:6b:55:3b:55:c4:bd:56:59:0f:79:2e:1b:d6:e5:81:8d:fb:
04:09:67:4d:4c:31:07:2f:2d:63:f2:86:8b:15:bf:25:eb:d3:
1a:89:08:42:e2:0f:bf:d7:7f:19:95:72:ad:32:e2:07:87:c3:
2a:c1:6a:3c:32:8f:95:f2:e3:2f:37:72:ff:5a:8c:b5:36:27:
84:76:24:d3:9c:d1:89:1f:5a:92:e6:b3:53:8e:7a:22:77:c7:
81:77:fe:4b:d4:cd:a4:4b:46:85:20:b9:13:e3:82:7d:0b:64:
02:0f:f8:fe:04:29:3d:ed:77:34:f6:a5:55:ee:ee:00:83:68:
ea:24:4f:71:5f:9e:d1:03:be:42:c4:70:22:04:0b:aa:96:20:
01:26:35:94:95:02:b1:b2:19:4c:86:27:44:a3:52:a8:ed:22:
41:a0:ca:43:d8:70:f8:6e:c4:c2:b6:1b:d1:1b:a5:fb:63:c6:
e4:54:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org