Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/3h7Lq9snVT9gPRdR5xBMIpb4lfA.roa
File: 3h7Lq9snVT9gPRdR5xBMIpb4lfA.roa (raw, json)
Hash identifier: 1iRi/DTz4oejFIXGqk5WgSJ72mT/JLvvfwF6FC8YRhM=
Subject key identifier: DE:1E:CB:AB:DB:27:55:3F:60:3D:17:51:E7:10:4C:22:96:F8:95:F0
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 01822F22C1AD8F9A79FB50D6ECA4F0404D55
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/3h7Lq9snVT9gPRdR5xBMIpb4lfA.roa
Signing time: Sun 24 Jul 2022 07:36:23 +0000
ROA not before: Sun 24 Jul 2022 07:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213176
IP address blocks: 212.59.64.0/24 maxlen: 24
212.59.67.0/24 maxlen: 24
212.59.70.0/24 maxlen: 24
212.59.66.0/24 maxlen: 24
212.59.69.0/24 maxlen: 24
212.59.65.0/24 maxlen: 24
212.59.68.0/24 maxlen: 24
209.35.224.0/24 maxlen: 24
209.35.226.0/24 maxlen: 24
209.35.225.0/24 maxlen: 24
209.35.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2f:22:c1:ad:8f:9a:79:fb:50:d6:ec:a4:f0:40:4d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jul 24 07:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de1ecbabdb27553f603d1751e7104c2296f895f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:20:f1:9d:23:4d:8f:1f:ef:5e:97:ea:5f:
9f:cf:10:06:5d:4f:d1:53:16:ce:b3:68:62:b8:54:
fb:7d:cd:a0:b5:4e:96:27:b6:97:6a:38:e6:71:b7:
6f:c1:eb:63:32:b1:11:64:56:89:df:fa:46:64:bd:
27:0f:a0:64:48:e0:da:d1:c4:f6:59:37:72:c5:6a:
e7:26:f0:08:0e:12:9c:5c:b9:3c:81:45:38:d2:1d:
96:3b:fc:a6:16:d3:49:1f:5a:2c:44:4e:45:b9:39:
d4:10:f1:22:bd:8e:ba:97:17:13:88:99:f1:9d:1c:
c2:2c:41:3b:1b:8b:38:a2:94:a9:3d:58:c4:a2:45:
be:ad:c2:e8:ce:db:3e:4f:1b:6d:c7:de:2d:d9:f1:
d1:04:63:ae:6e:61:9b:e8:e5:45:d5:fc:bd:3a:d2:
d1:2e:43:98:4f:24:8c:3a:b1:5c:81:56:52:69:91:
ff:d8:26:35:61:3a:41:86:f7:a1:66:f6:ec:c2:83:
cd:7b:bd:0d:3f:7a:1e:e1:39:9f:06:a9:ad:e7:ce:
ef:15:21:03:82:c6:73:dc:9d:47:ce:4f:94:40:c9:
64:c3:fc:3a:d0:7f:c0:fa:a1:51:59:aa:1c:17:bf:
91:b6:d6:58:ca:f9:de:b5:4c:0d:db:46:d9:68:1e:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:CB:AB:DB:27:55:3F:60:3D:17:51:E7:10:4C:22:96:F8:95:F0
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/3h7Lq9snVT9gPRdR5xBMIpb4lfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.35.224.0/22
212.59.64.0-212.59.70.255
Signature Algorithm: sha256WithRSAEncryption
97:4e:16:d7:ea:b0:5b:59:25:45:99:71:bb:6f:e5:44:21:9c:
42:d3:59:7c:01:40:6f:e8:37:06:d9:1d:6b:82:7a:86:55:90:
f2:7d:dd:c7:ce:37:92:c2:58:79:ad:b1:d9:95:d4:be:fc:72:
ee:b2:8d:82:f4:9e:74:39:e1:80:ab:ac:e8:7e:d5:c3:c8:84:
f9:2c:14:c1:3e:b0:b9:25:07:14:82:95:b4:ea:11:88:5c:bc:
36:de:02:7d:75:5d:6b:97:7a:38:e2:73:0d:66:f4:64:d9:28:
0e:e5:ff:ff:7e:96:40:64:a8:09:e7:2d:7f:63:bf:a1:61:56:
73:2f:12:a1:ba:7b:39:d8:98:7f:2f:f0:05:cc:87:9d:5a:fa:
97:db:64:50:02:2d:f7:52:f0:84:3f:5c:1b:33:26:45:d5:c0:
61:3e:d3:49:b7:9b:34:95:c7:15:51:32:c2:ea:ee:33:fc:71:
77:34:fe:2a:c3:6e:9b:a0:23:c5:67:e3:bc:6b:79:e7:59:0a:
3b:57:b7:89:3e:b5:de:5e:c6:af:d5:0f:6b:01:ce:91:e8:7e:
44:d1:d4:67:da:31:fd:3a:c7:7e:0e:2e:ef:e6:f3:75:ad:de:
e2:10:d1:23:fd:20:56:27:9d:2d:50:f9:bd:a4:02:8f:58:ea:
70:0e:a5:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:13 2024 by rpki-client on console-fra.rpki-client.org