Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/fjS3cVi-N_z7xpr31QZAAGQHEpc.roa
File: fjS3cVi-N_z7xpr31QZAAGQHEpc.roa (raw, json)
Hash identifier: gEIoUIKY88luHrkAKbM8ud5shpfMDcWZZ7xt28rF35g=
Subject key identifier: 7E:34:B7:71:58:BE:37:FC:FB:C6:9A:F7:D5:06:40:00:64:07:12:97
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 35906146
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/fjS3cVi-N_z7xpr31QZAAGQHEpc.roa
Signing time: Sat 01 Jan 2022 12:58:02 +0000
ROA not before: Sat 01 Jan 2022 12:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35834
IP address blocks: 87.237.38.0/24 maxlen: 24
87.237.32.0/23 maxlen: 23
87.237.32.0/24 maxlen: 24
87.237.36.0/24 maxlen: 24
87.237.33.0/24 maxlen: 24
87.237.34.0/24 maxlen: 24
87.237.34.0/23 maxlen: 23
87.237.38.0/23 maxlen: 23
87.237.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898654534 (0x35906146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Jan 1 12:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e34b77158be37fcfbc69af7d506400064071297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:61:c6:f7:8b:fe:11:ae:a5:32:86:a4:fe:e1:
8c:fc:1c:c2:08:d7:6a:06:8a:e6:90:5f:db:ea:fa:
ab:ab:56:a1:a1:82:5a:b7:de:a0:4c:52:2e:b1:b1:
ae:f2:46:ce:ec:fe:e1:f2:42:ca:5c:96:90:a0:7b:
f3:9c:e7:af:97:78:51:3e:81:50:a9:ae:bf:fa:a3:
93:25:f4:01:b5:bb:3c:0c:a1:88:2d:28:ce:c1:44:
85:04:da:f3:02:88:63:9b:91:68:78:28:15:c8:48:
4e:de:ad:74:b1:ad:05:31:0f:49:d1:23:15:91:b1:
31:6c:87:ac:5d:4d:69:10:37:a7:55:ea:c5:d9:3d:
13:80:c5:09:15:c5:9b:80:20:a0:66:e0:c0:b3:c6:
1c:5e:79:54:68:5f:2c:18:42:17:be:d0:f5:82:59:
11:5b:26:94:7d:60:88:5e:7b:87:cf:83:a4:ff:25:
d5:64:43:0b:00:8a:90:7d:89:cd:fc:7c:9b:b8:b6:
51:68:a8:5d:01:29:bd:0a:05:6b:4b:7d:68:e3:cd:
af:4a:0a:05:2c:b6:be:66:25:0b:51:ca:22:0c:d3:
9a:87:31:98:e8:45:83:79:d4:fb:79:df:d7:92:ca:
3a:33:5e:f7:08:e1:a6:16:5e:a1:36:89:9a:01:56:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:B7:71:58:BE:37:FC:FB:C6:9A:F7:D5:06:40:00:64:07:12:97
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/fjS3cVi-N_z7xpr31QZAAGQHEpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.32.0-87.237.36.255
87.237.38.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:71:6d:dc:27:dd:76:f3:86:e4:3e:c0:23:87:88:db:26:fa:
7b:a7:19:eb:42:2d:9b:b2:31:96:33:7c:b1:d4:ee:57:89:32:
c9:5c:51:cc:f0:aa:8d:db:c2:fd:07:fc:f1:40:b4:96:7b:b7:
ec:d9:04:75:8b:b8:b6:13:36:63:74:4c:2c:5a:82:79:3a:3b:
a7:32:cc:b8:6c:d7:45:8a:a7:9a:e7:f9:62:80:96:62:6e:b4:
b2:f3:dd:60:ee:e9:11:13:66:81:6b:12:92:ec:2b:07:30:fe:
80:f2:1b:60:76:5d:30:4f:a4:3b:c4:e6:37:2a:98:0d:02:22:
62:12:be:ed:f1:2c:c2:ea:6b:c0:8b:e0:7d:24:bb:39:54:8f:
33:25:41:5c:6e:1e:67:74:6b:cb:8c:35:42:21:c9:f3:bd:22:
cb:a8:9f:c5:13:6e:8a:b3:ed:97:29:33:c1:8d:3a:5e:9c:11:
05:9f:26:5d:f6:d7:d4:62:fa:f6:cc:6e:7c:f2:02:a4:c1:33:
76:8c:71:75:6c:31:1a:d4:aa:4d:f8:d1:7d:05:95:dc:60:4f:
ad:c0:d5:4b:9a:9e:24:db:35:47:32:8d:62:40:ab:e6:6b:bd:
15:7c:e2:f5:eb:ff:c5:3d:5f:30:2a:1e:4d:8f:2b:19:6a:39:
b5:c6:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org