Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/k0CNBrQCDdJETCscfPxgfu5zmvI.roa
File: k0CNBrQCDdJETCscfPxgfu5zmvI.roa (raw, json)
Hash identifier: koUVi5v2VZP/yK4OBdgrQLy1+2gT9GyTNdgZOO3pVJo=
Subject key identifier: 93:40:8D:06:B4:02:0D:D2:44:4C:2B:1C:7C:FC:60:7E:EE:73:9A:F2
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 0246D456
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/k0CNBrQCDdJETCscfPxgfu5zmvI.roa
Signing time: Sat 01 Jan 2022 13:03:56 +0000
ROA not before: Sat 01 Jan 2022 13:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.112.0/22 maxlen: 22
77.239.32.0/19 maxlen: 24
46.255.168.0/21 maxlen: 24
37.35.112.0/21 maxlen: 24
2a00:d420::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38196310 (0x246d456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Jan 1 13:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93408d06b4020dd2444c2b1c7cfc607eee739af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:4c:1b:dd:e8:fa:ee:cf:88:06:58:0a:cf:
cb:9c:51:cd:a3:69:7a:5a:df:b8:9a:37:99:03:38:
87:7a:8d:43:02:d3:67:89:53:96:43:0e:79:8f:09:
b8:59:6a:87:ce:5f:be:bb:f9:cd:df:69:e2:00:2a:
a6:4c:26:53:67:f0:72:e8:89:42:0b:88:8a:0c:00:
b2:5b:a9:66:77:cc:bf:b5:f0:4f:fb:04:cf:dc:2c:
d2:8a:e6:0d:49:62:ab:db:06:3c:9e:67:fa:24:1c:
50:b0:6f:d8:05:63:e2:15:fe:11:38:d4:c7:70:c4:
d1:8c:25:1f:f4:a0:3f:b3:6d:67:ba:fc:46:82:39:
60:28:40:a9:5b:c7:7c:83:7f:bf:74:25:3c:6a:fa:
9f:17:b0:a5:09:15:97:1d:5b:f8:f6:d4:29:ed:16:
a8:83:b0:ea:20:b3:8c:6f:2d:86:a5:23:51:0c:87:
68:ed:d5:9d:71:de:36:37:c2:25:7f:82:b2:43:93:
0a:5e:79:32:8b:f9:1a:a5:d0:4a:65:81:a6:67:6a:
75:78:46:a4:2a:11:ae:71:11:e7:b1:99:50:f5:8e:
e0:84:3b:b5:a0:5a:0a:45:86:be:dc:74:a7:cf:e2:
0a:04:3b:98:f8:ce:d0:f9:c4:6c:81:53:25:83:cd:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:8D:06:B4:02:0D:D2:44:4C:2B:1C:7C:FC:60:7E:EE:73:9A:F2
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/k0CNBrQCDdJETCscfPxgfu5zmvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.112.0/21
46.255.168.0/21
77.239.32.0/19
185.74.112.0/22
IPv6:
2a00:d420::/29
Signature Algorithm: sha256WithRSAEncryption
8a:c4:4a:2e:30:97:74:78:42:73:ad:97:40:16:46:1f:e2:21:
4f:bd:45:58:98:e4:e5:b4:62:b6:8b:8d:03:df:10:fc:8d:6c:
34:10:97:59:a9:5a:da:01:7e:de:89:d8:a5:1a:24:ad:77:ec:
64:94:f7:40:99:4b:48:c9:c3:bc:51:07:2d:33:94:ad:78:bf:
e5:c4:ad:c2:f1:fb:8a:13:02:42:32:d1:e1:77:a3:d9:2d:57:
2c:6c:8e:a9:80:1e:ed:46:17:a2:df:86:88:e2:c7:47:ad:f3:
82:0d:34:83:08:3b:a2:14:29:78:28:18:75:f5:56:af:0b:7b:
9b:03:a9:6f:a0:c6:03:f6:bf:ce:20:c2:16:02:e3:68:96:7e:
a1:04:19:60:4a:33:59:18:4e:43:6d:94:bc:41:02:98:f9:6a:
32:7a:d5:6c:bf:8a:f6:fd:0b:ff:fa:56:de:69:74:88:fa:51:
98:00:72:bd:f8:e5:dc:c5:48:c0:9f:28:c2:cd:74:d3:af:ca:
11:c3:fb:ce:6d:ee:27:c2:15:da:7c:c7:c4:c6:23:3d:c5:1e:
90:0a:93:b9:e5:57:0e:2b:7b:c6:7d:f3:44:42:9d:f4:ed:58:
c9:02:8e:9b:f1:24:39:3d:a1:99:eb:7a:7b:30:6a:f0:64:27:
b0:7b:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-ams.rpki-client.org