Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/E_88I2S3Dh6jkZ4-XwhL5GWCo0M.roa
File: E_88I2S3Dh6jkZ4-XwhL5GWCo0M.roa (raw, json)
Hash identifier: ZxE/B0tT9rjn+eTaXZXyXwMRzuGxHdZy9CSQs5uglyk=
Subject key identifier: 13:FF:3C:23:64:B7:0E:1E:A3:91:9E:3E:5F:08:4B:E4:65:82:A3:43
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 03567437
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/E_88I2S3Dh6jkZ4-XwhL5GWCo0M.roa
Signing time: Sat 01 Jan 2022 07:57:32 +0000
ROA not before: Sat 01 Jan 2022 07:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 194.99.62.0/23 maxlen: 32
194.99.60.0/23 maxlen: 32
193.32.96.0/23 maxlen: 32
193.32.98.0/23 maxlen: 32
31.12.78.0/23 maxlen: 32
31.12.76.0/23 maxlen: 32
185.240.128.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55997495 (0x3567437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 07:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13ff3c2364b70e1ea3919e3e5f084be46582a343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:e5:e2:63:10:76:b5:2b:20:93:11:ee:81:
f4:f2:7e:16:c6:0c:aa:41:91:f4:a8:32:64:d2:53:
d2:b3:35:2b:bf:32:59:fe:c5:05:85:45:5c:9d:ff:
ec:f4:bb:cc:53:60:49:0a:47:b2:48:e2:1a:34:43:
24:a6:5e:46:b1:f8:dd:26:22:14:1f:c9:18:2c:9d:
0e:0e:c6:b8:0d:3d:17:31:9b:07:3e:a0:b9:18:5f:
55:c6:cf:51:7d:61:14:f0:26:84:89:e2:d0:b7:02:
4f:94:ae:bc:07:0a:7b:f2:95:b9:cb:2e:39:bf:63:
e2:29:44:55:52:4e:af:f6:89:cb:6c:5f:2c:57:37:
e2:07:b7:4c:87:fe:91:90:80:5f:08:db:0e:66:e8:
bb:bd:e5:8d:92:22:4c:4e:27:ac:e4:da:5d:c2:c4:
0f:bd:e7:48:33:8f:c6:08:7c:a8:d9:c1:1a:e8:35:
2d:14:e8:c6:1c:f9:61:9c:ea:01:e7:6d:ea:c5:83:
1f:8d:c3:49:7c:d5:67:63:cc:35:8e:eb:a7:52:5e:
a9:95:f5:1d:23:1f:52:34:8f:96:0e:d2:16:33:40:
a5:4d:a0:7e:7c:22:0e:05:ce:3e:2c:65:f4:b2:de:
d6:bb:50:97:11:5f:a3:6e:6e:a1:93:fc:75:c7:ae:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FF:3C:23:64:B7:0E:1E:A3:91:9E:3E:5F:08:4B:E4:65:82:A3:43
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/E_88I2S3Dh6jkZ4-XwhL5GWCo0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.76.0/22
185.240.128.0/22
193.32.96.0/22
194.99.60.0/22
Signature Algorithm: sha256WithRSAEncryption
17:3e:2e:4f:ef:7c:d5:d4:b8:5c:90:00:a0:61:67:5d:83:00:
63:e3:1d:6d:54:e9:26:71:0b:57:fb:50:53:e5:1f:c3:cd:44:
ff:4a:83:bd:a9:8f:63:21:b8:c3:a6:f3:32:dd:64:26:81:a4:
54:44:74:84:de:a8:8f:52:7e:e3:ff:78:69:53:c6:2d:07:2e:
d9:65:27:95:b2:10:df:b1:c3:1d:4e:6c:e2:d4:f9:e6:c9:7d:
9e:e1:ac:e4:df:ce:9e:25:01:07:89:d6:7a:1d:3e:40:76:66:
aa:32:8a:ff:cd:ec:89:81:aa:f7:f9:e9:e3:00:e6:83:06:ca:
83:48:9f:35:a7:66:c2:8d:40:2c:ce:f3:0a:26:4b:bc:c1:5f:
23:41:d4:7e:4e:b8:70:04:e1:93:25:bb:b2:a5:8d:e3:2a:72:
b9:c6:a3:59:59:b8:93:10:f2:ca:91:01:33:60:88:3a:bd:16:
05:95:15:a6:54:15:99:d9:da:c5:87:7a:49:3a:57:93:e4:05:
6c:93:12:5e:d1:fb:1e:9e:0e:2f:34:8a:6f:98:f1:9a:17:7f:
5e:6b:84:41:be:e4:8f:f4:51:7c:e8:5a:33:fb:bc:02:e7:21:
a4:9a:3c:8e:80:35:01:50:44:94:03:a5:f0:1b:b3:0d:42:4e:
0e:2e:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:42 2023 by rpki-client on console-fra.rpki-client.org