Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/kVHBZQWpNqKGhNjDUr_a5nm6QvM.roa
File: kVHBZQWpNqKGhNjDUr_a5nm6QvM.roa (raw, json)
Hash identifier: /ZugBmKcPKTUZ6XbXQSo7V0QirRm6iQoLqtqPS4F8aI=
Subject key identifier: 91:51:C1:65:05:A9:36:A2:86:84:D8:C3:52:BF:DA:E6:79:BA:42:F3
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 03DFDF8C
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/kVHBZQWpNqKGhNjDUr_a5nm6QvM.roa
Signing time: Sat 01 Jan 2022 13:04:35 +0000
ROA not before: Sat 01 Jan 2022 13:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198770
IP address blocks: 37.230.248.0/24 maxlen: 24
128.0.67.0/24 maxlen: 24
128.0.66.0/24 maxlen: 24
141.101.228.0/24 maxlen: 24
141.101.231.0/24 maxlen: 24
85.92.117.0/24 maxlen: 24
85.92.118.0/24 maxlen: 24
85.92.116.0/24 maxlen: 24
37.230.152.0/24 maxlen: 24
37.230.153.0/24 maxlen: 24
37.230.154.0/24 maxlen: 24
37.230.155.0/24 maxlen: 24
141.101.204.0/24 maxlen: 24
178.170.225.0/24 maxlen: 24
37.18.76.0/24 maxlen: 24
37.18.77.0/24 maxlen: 24
37.18.74.0/24 maxlen: 24
37.18.75.0/24 maxlen: 24
2a0d:b1c0:ffff::/48 maxlen: 48
2a0d:b1c0:aaaa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65003404 (0x3dfdf8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Jan 1 13:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9151c16505a936a28684d8c352bfdae679ba42f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f5:90:38:b0:aa:52:d3:36:63:00:0c:44:b5:
63:77:89:31:1e:25:c6:0e:40:68:7b:1f:06:82:42:
f5:36:8e:20:72:91:09:52:ae:76:98:46:ba:18:93:
58:b0:b4:48:b3:6f:b6:7a:31:bf:8f:58:77:5b:62:
9c:a7:aa:f1:5f:aa:9b:3a:39:ab:4b:42:56:dc:fc:
64:90:84:e4:09:05:43:aa:6d:f7:11:45:94:13:88:
07:d7:0a:40:23:7b:48:c4:bc:ca:ca:ea:f3:64:ee:
7e:c8:d0:68:ea:f5:20:31:e8:c4:0f:ce:c4:09:00:
2e:85:1b:d7:68:92:71:5b:b7:d9:67:ab:b0:cd:d7:
ff:78:f1:0b:18:ec:db:78:96:67:dc:62:38:17:65:
56:7c:a6:c6:9a:ed:95:01:01:9d:82:3e:3a:81:33:
7b:eb:f2:91:64:a9:b0:9c:e0:54:7e:c4:28:74:3c:
2d:34:91:62:bd:28:b0:54:69:3d:03:c4:16:8e:83:
82:63:69:b9:89:eb:a7:e2:85:f0:39:db:03:8a:cf:
bd:11:7e:ca:be:e8:a2:11:c9:c6:64:43:4d:27:99:
05:52:7b:2a:f7:ca:d7:bd:10:e4:96:23:ec:8e:d6:
41:75:04:ba:3d:4d:20:8a:23:65:9f:7f:da:85:cf:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:C1:65:05:A9:36:A2:86:84:D8:C3:52:BF:DA:E6:79:BA:42:F3
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/kVHBZQWpNqKGhNjDUr_a5nm6QvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.74.0-37.18.77.255
37.230.152.0/22
37.230.248.0/24
85.92.116.0-85.92.118.255
128.0.66.0/23
141.101.204.0/24
141.101.228.0/24
141.101.231.0/24
178.170.225.0/24
IPv6:
2a0d:b1c0:aaaa::/48
2a0d:b1c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
38:51:01:f5:f3:ab:05:b1:7b:15:aa:4a:e6:f8:d6:5c:5d:f1:
75:ed:f0:9f:c9:aa:a1:1f:4a:f0:e3:ed:7a:45:2f:68:14:e7:
79:c0:e9:26:0f:d3:23:31:4f:50:ba:53:91:a7:cf:60:6b:c0:
58:88:80:a3:38:cc:f2:4c:38:22:55:b0:64:bd:4c:b1:c3:4e:
08:ce:b4:83:0d:fe:57:8d:3a:e2:56:dc:7d:24:87:2e:f6:46:
2a:ee:f6:90:fb:ff:75:45:62:af:2c:18:4c:ce:41:e2:83:12:
9f:2a:13:a3:e2:2d:37:03:71:7d:81:be:6e:d7:4b:ba:30:89:
70:cb:de:d9:be:d4:51:48:40:77:b5:26:f1:e0:45:96:1c:42:
f6:a7:36:8a:56:28:80:54:17:7c:4e:ec:d0:06:be:72:ae:71:
86:d4:9b:43:74:4a:26:ca:e3:cb:9c:35:b0:59:d2:90:5f:1d:
2c:0e:f7:d1:aa:0c:c8:47:23:9d:27:db:86:f0:97:e1:6a:a8:
ff:1d:15:0e:4f:63:5e:13:cd:f0:ba:42:49:e1:41:59:67:d1:
de:49:c6:25:ad:b8:e2:cf:0b:f1:5d:62:70:58:e6:09:7a:32:
de:af:57:5a:8f:19:ce:48:88:d2:2f:a6:85:00:84:c2:cc:20:
3e:e2:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:30 2023 by rpki-client on console-fra.rpki-client.org