Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/CgJS-9wWWyPPfz8ABG8NtOU6fEQ.roa
File: CgJS-9wWWyPPfz8ABG8NtOU6fEQ.roa (raw, json)
Hash identifier: V6wC/I/cVq6Qhx8jVTus3Hv9cu+PbuVqSMw2AzYgTko=
Subject key identifier: 0A:02:52:FB:DC:16:5B:23:CF:7F:3F:00:04:6F:0D:B4:E5:3A:7C:44
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 291226BB
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/CgJS-9wWWyPPfz8ABG8NtOU6fEQ.roa
Signing time: Sat 01 Jan 2022 10:55:04 +0000
ROA not before: Sat 01 Jan 2022 10:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16082
IP address blocks: 37.77.176.0/21 maxlen: 21
185.15.104.0/22 maxlen: 22
87.117.72.0/21 maxlen: 21
109.238.64.0/20 maxlen: 20
62.133.0.0/19 maxlen: 19
83.218.128.0/19 maxlen: 19
87.117.112.0/21 maxlen: 21
31.24.0.0/21 maxlen: 21
87.224.0.0/17 maxlen: 17
217.13.128.0/19 maxlen: 19
212.237.64.0/19 maxlen: 19
2a02:b90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689055419 (0x291226bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Jan 1 10:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a0252fbdc165b23cf7f3f00046f0db4e53a7c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:64:8d:ac:05:fb:c2:53:05:70:ad:6b:23:
4f:33:c2:f3:d9:3d:9e:35:63:ff:38:4a:9f:7a:95:
58:64:ea:f8:ee:be:33:37:26:32:2a:ac:8f:4b:e9:
41:8c:30:08:0a:4a:29:e8:29:3e:bb:89:fa:ba:34:
3e:08:1a:d1:af:3a:5a:3f:1d:65:c2:f6:14:cc:5b:
05:69:25:57:0b:4c:e4:a1:83:52:e2:11:bc:ca:a6:
e2:a6:8f:17:c2:13:84:88:ac:fc:1d:d8:d6:44:f2:
10:f4:a3:f0:58:27:a5:a6:58:f1:47:be:61:a7:a4:
15:2a:16:a4:f7:b4:00:de:6b:3f:77:5a:7e:3e:1b:
a4:65:fd:08:4b:06:a1:fb:e2:ed:09:22:e2:18:c0:
95:b7:5f:ec:e2:d9:f1:03:b2:21:f1:19:0b:62:5b:
24:b2:d1:7f:98:6c:e7:70:a3:17:64:0e:28:c0:6f:
cc:ec:a3:3a:84:da:6d:74:46:41:e6:33:b1:14:40:
75:43:33:48:8a:b1:37:38:61:1f:97:97:e1:40:da:
45:39:da:6c:99:3c:ed:d7:a6:e7:08:39:3d:44:0b:
60:0e:c4:ed:98:81:d2:fe:c1:2a:29:48:a0:2c:37:
e4:6d:94:13:3c:c3:c4:62:a0:2d:35:b9:62:aa:6f:
80:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:52:FB:DC:16:5B:23:CF:7F:3F:00:04:6F:0D:B4:E5:3A:7C:44
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/CgJS-9wWWyPPfz8ABG8NtOU6fEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.0.0/21
37.77.176.0/21
62.133.0.0/19
83.218.128.0/19
87.117.72.0/21
87.117.112.0/21
87.224.0.0/17
109.238.64.0/20
185.15.104.0/22
212.237.64.0/19
217.13.128.0/19
IPv6:
2a02:b90::/32
Signature Algorithm: sha256WithRSAEncryption
50:b3:5c:fa:a7:90:cd:8f:4b:d3:50:85:49:09:e7:cb:b6:de:
1e:4f:ef:31:03:e3:ee:3a:c4:63:5f:6f:30:e1:f6:db:f1:70:
db:7c:f6:26:ff:3f:e5:20:24:1f:e4:ec:e3:38:e8:d0:ee:9d:
41:77:5e:c0:dd:ca:46:bb:f5:5e:d6:2e:70:a1:74:01:b2:3c:
9b:1d:7a:85:3a:d1:b7:f5:3c:ee:9f:c3:f0:9a:2c:7f:b5:e6:
70:d0:ec:56:9e:11:9b:48:d9:fc:99:e4:1a:c6:62:bf:6e:1b:
7c:b2:80:cd:a5:d0:34:1b:4f:68:17:05:1a:21:40:c6:5f:82:
26:f5:b5:31:65:41:d0:26:a9:73:4f:50:45:ec:65:9a:ee:d0:
f0:17:f7:ea:10:67:f6:6e:6e:11:34:29:4b:87:91:54:f5:5b:
f3:0d:68:e2:cc:e6:39:3f:17:a1:9c:4c:8c:e5:ae:90:0b:56:
4d:2e:ef:e4:3d:46:32:87:e4:44:aa:dc:18:21:33:a2:b4:e5:
d7:1f:d2:48:33:7e:14:94:6f:95:29:4d:a7:26:36:bf:13:41:
54:5b:a0:e1:05:3f:11:3a:46:b8:8a:03:22:67:17:4a:a3:5b:
e5:3d:21:e6:c4:6c:0b:3e:5d:8b:e5:84:93:0c:2e:d9:7e:1c:
5b:09:3e:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:24 2023 by rpki-client on console-fra.rpki-client.org