Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/snTvigP7rd2LM25YjWjeZRXMELQ.roa
File: snTvigP7rd2LM25YjWjeZRXMELQ.roa (raw, json)
Hash identifier: sFjdEUqcRw1qzTLKob20QzmNSHO1dvdzjDrBqqjWRUQ=
Subject key identifier: B2:74:EF:8A:03:FB:AD:DD:8B:33:6E:58:8D:68:DE:65:15:CC:10:B4
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 02935676
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/snTvigP7rd2LM25YjWjeZRXMELQ.roa
Signing time: Sat 01 Jan 2022 03:00:45 +0000
ROA not before: Sat 01 Jan 2022 03:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16178
IP address blocks: 178.77.0.0/18 maxlen: 18
178.77.0.0/20 maxlen: 20
178.77.0.0/19 maxlen: 19
185.14.124.0/22 maxlen: 22
85.158.36.0/22 maxlen: 22
85.158.32.0/24 maxlen: 24
85.158.35.0/24 maxlen: 24
85.158.32.0/21 maxlen: 21
217.75.192.0/24 maxlen: 24
217.75.192.0/20 maxlen: 20
217.75.192.0/21 maxlen: 21
217.75.193.0/24 maxlen: 24
217.75.194.0/24 maxlen: 24
217.75.196.0/24 maxlen: 24
217.75.197.0/24 maxlen: 24
217.75.198.0/24 maxlen: 24
217.75.199.0/24 maxlen: 24
178.77.16.0/20 maxlen: 20
46.36.160.0/19 maxlen: 19
178.77.32.0/19 maxlen: 19
217.75.204.0/24 maxlen: 24
217.75.205.0/24 maxlen: 24
217.75.206.0/24 maxlen: 24
217.75.200.0/21 maxlen: 21
217.75.201.0/24 maxlen: 24
217.75.203.0/24 maxlen: 24
217.75.207.0/24 maxlen: 24
79.142.0.0/20 maxlen: 20
2a00:fe8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43210358 (0x2935676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Jan 1 03:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b274ef8a03fbaddd8b336e588d68de6515cc10b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:8d:c6:ee:4b:cc:da:a8:fd:21:30:c7:a2:
cc:1b:ef:22:31:5c:ec:27:d9:f6:57:01:14:b4:f8:
af:9e:b3:aa:b7:12:2a:2f:87:ed:f0:92:d5:5b:03:
c2:22:ae:71:4a:88:8f:25:ec:05:78:0e:96:78:09:
ad:dc:f3:0c:a4:2a:ec:82:73:cb:a7:0c:25:6a:df:
2f:60:ef:03:97:cf:25:97:c0:5e:66:98:16:7a:6e:
f7:35:73:95:7e:b7:20:2b:e1:88:4d:54:c6:cf:78:
30:23:01:ff:63:54:c0:2b:71:94:d4:64:63:5b:e6:
9e:d4:2a:9c:30:ad:40:2b:62:b1:4d:ab:3a:ca:7b:
95:95:d8:79:c5:44:f0:98:07:5d:61:02:af:0b:02:
54:32:4c:71:b6:c6:d7:78:f2:3f:cd:23:e9:06:67:
ed:65:15:5b:fc:0e:43:c0:81:28:bd:85:66:0a:35:
23:fc:87:da:89:2a:f4:ec:18:1b:a5:71:cc:98:6d:
36:2f:b4:c6:da:80:d0:7c:b2:c8:c0:7e:b7:9f:32:
0d:25:e2:20:47:e5:49:30:64:df:e1:96:bd:f0:5d:
77:c8:7f:6c:86:e2:49:38:11:12:e9:8f:12:ab:9f:
02:28:9f:4a:ca:c8:35:7e:2e:2f:14:a1:ba:81:20:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:EF:8A:03:FB:AD:DD:8B:33:6E:58:8D:68:DE:65:15:CC:10:B4
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/snTvigP7rd2LM25YjWjeZRXMELQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.160.0/19
79.142.0.0/20
85.158.32.0/21
178.77.0.0/18
185.14.124.0/22
217.75.192.0/20
IPv6:
2a00:fe8::/32
Signature Algorithm: sha256WithRSAEncryption
9b:2d:44:21:ed:f8:0d:b2:2e:14:de:d3:04:ef:32:83:9f:c1:
87:c3:80:03:86:75:9f:80:0e:ac:d8:4a:63:c2:07:ae:e3:e0:
42:66:7f:1b:5c:d1:c2:b7:1e:12:d0:f8:c5:a4:29:4b:33:f7:
57:2a:78:5f:fc:b8:4c:24:26:44:d3:1f:d4:fc:84:ea:3d:d2:
85:15:c2:a1:cb:e6:76:3e:34:a9:d6:05:67:48:24:1e:9f:24:
09:75:81:dc:ab:ad:bc:bd:5a:2e:a7:23:f6:47:d9:ed:b5:63:
55:30:3a:28:fe:4a:90:93:4e:d6:ea:fc:97:0f:39:02:6b:e6:
bb:51:b4:07:57:d2:2a:3f:a4:37:69:0d:e1:0c:13:d0:d0:47:
50:2b:b5:9b:d0:1d:42:1a:05:17:cd:e6:fc:7c:c7:85:03:4c:
f1:e6:60:5f:db:98:32:18:7e:e7:36:cd:bc:b6:9e:87:7d:47:
41:a5:56:a1:7a:c4:37:1d:c6:7f:24:98:ee:54:04:7f:d6:97:
c0:b5:38:a8:b3:86:86:4d:43:74:04:b7:23:21:e3:96:37:aa:
40:1d:21:3f:17:94:8e:29:3a:99:94:43:d0:3f:ba:ae:11:30:
85:36:54:07:12:70:f5:4c:dd:a9:a8:e9:be:21:f3:d5:ad:e9:
43:fd:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:35 2024 by rpki-client on console-ams.rpki-client.org