Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/j3gVj5aiQLz_S-DkfHsCw4XO5rI.roa
File: j3gVj5aiQLz_S-DkfHsCw4XO5rI.roa (raw, json)
Hash identifier: iNjdrP90dR9rXW/rQU2+nihpVQmZUat7J5GDLmLsDC8=
Subject key identifier: 8F:78:15:8F:96:A2:40:BC:FF:4B:E0:E4:7C:7B:02:C3:85:CE:E6:B2
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 09D032FF
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/j3gVj5aiQLz_S-DkfHsCw4XO5rI.roa
Signing time: Mon 02 May 2022 15:09:41 +0000
ROA not before: Mon 02 May 2022 15:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 162.218.95.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164639487 (0x9d032ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: May 2 15:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f78158f96a240bcff4be0e47c7b02c385cee6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:67:9c:96:21:9c:9a:05:a9:42:4a:91:14:
d3:3e:33:5d:d7:c6:54:b3:8b:e0:ad:05:00:a4:f2:
b5:07:84:f2:3d:ff:4f:94:92:fb:58:6d:96:2b:1d:
ec:81:53:52:96:73:e1:ac:e7:65:f7:59:c6:da:f9:
33:8c:d2:d1:f3:fe:cf:cf:f9:7c:4d:00:f4:d7:f4:
d5:ac:38:04:b8:55:94:18:2f:f7:95:e8:8a:83:0e:
d3:97:f3:a5:b9:55:af:d1:4e:de:03:6d:74:72:fb:
a9:e0:d6:4b:bf:de:b6:d1:1b:88:91:24:8b:74:45:
5f:f5:88:de:f9:20:d4:22:2c:10:bc:10:7a:fd:68:
12:d9:59:98:fd:f7:e5:70:e3:29:92:91:40:a9:21:
2b:60:16:a8:7b:15:ee:3f:8f:34:f3:2b:1a:54:51:
e8:05:db:97:0c:76:d8:07:80:38:9d:ff:e0:3e:b5:
0a:75:ab:63:78:25:83:78:c2:00:f2:86:6a:58:6c:
0b:9e:d0:0d:8e:c6:d1:53:06:95:e6:18:dd:5c:f1:
8b:b0:b0:a4:be:28:9b:56:ff:92:52:ae:e5:7b:e3:
34:bd:31:2f:f3:47:10:8e:d9:11:06:11:dc:fc:ad:
1c:39:a3:3f:47:22:a9:5f:bf:f4:d8:5b:f4:4b:6a:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:15:8F:96:A2:40:BC:FF:4B:E0:E4:7C:7B:02:C3:85:CE:E6:B2
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/j3gVj5aiQLz_S-DkfHsCw4XO5rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.140.0/24
63.246.150.0/24
94.154.177.0/24
162.218.95.0/24
185.230.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:13:37:ce:71:84:e0:a7:1c:07:dd:b1:af:82:da:81:6e:b9:
78:5a:20:22:8f:9a:e2:0e:57:27:45:a6:e9:fe:a4:9e:3f:88:
da:9b:1b:a4:a9:0f:35:dd:87:fe:d8:fb:23:e1:17:7e:dd:43:
a4:bf:2e:fa:6a:2a:8c:86:e7:95:2f:71:bf:ee:55:65:bf:36:
80:f4:42:59:a9:31:c8:bb:e9:07:01:42:fb:4c:5d:74:f1:b2:
cf:5b:c7:87:fe:67:6f:c2:a2:90:7d:54:80:e5:d1:b6:c0:0c:
87:81:7d:41:6c:9c:04:91:64:36:98:94:35:3b:c5:72:d0:8a:
0a:78:9c:91:64:b6:2f:d4:cc:08:2d:d5:58:85:b3:80:87:a0:
29:d9:b6:2a:98:07:a0:61:56:3b:04:5a:b3:4b:90:c8:f9:b8:
0e:1e:e3:08:58:8f:3a:7d:22:39:fc:76:f2:78:6d:ef:04:8d:
a4:8f:8a:35:33:96:d2:c8:43:d7:86:12:4f:0b:d0:8e:0d:c3:
ba:87:8e:50:3b:98:83:24:ea:0d:ff:b5:63:9b:39:31:58:e3:
54:84:fc:e0:ca:a8:2b:b4:f5:46:dc:26:57:6a:3f:ab:68:65:
2d:15:a6:53:f1:ad:cb:92:f9:83:bb:e9:22:33:89:d3:69:8f:
49:17:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org