Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/CoCh48-KfUNDSvTjOgZ_if6v94U.roa
File: CoCh48-KfUNDSvTjOgZ_if6v94U.roa (raw, json)
Hash identifier: uYIHiBigr3aqya38WBHf5oE8akDnKNg2lPt/FiJljFw=
Subject key identifier: 0A:80:A1:E3:CF:8A:7D:43:43:4A:F4:E3:3A:06:7F:89:FE:AF:F7:85
Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial: 0491E278
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/CoCh48-KfUNDSvTjOgZ_if6v94U.roa
Signing time: Sat 01 Jan 2022 09:53:56 +0000
ROA not before: Sat 01 Jan 2022 09:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21040
IP address blocks: 185.71.112.0/22 maxlen: 22
213.196.128.0/18 maxlen: 18
109.205.200.0/21 maxlen: 21
185.71.16.0/22 maxlen: 22
185.178.120.0/22 maxlen: 22
84.20.56.0/21 maxlen: 21
185.19.120.0/22 maxlen: 22
37.203.248.0/21 maxlen: 21
2a02:24e8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76669560 (0x491e278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Validity
Not Before: Jan 1 09:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a80a1e3cf8a7d43434af4e33a067f89feaff785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:12:59:f8:b5:d6:38:2a:e4:a6:4e:0b:e4:
d8:44:96:a8:b2:90:81:15:57:ab:7e:f5:0c:02:58:
ea:d2:32:ee:43:9a:57:f0:b8:c4:98:08:b3:03:92:
7b:07:0f:b7:cf:d2:5c:d0:4d:e0:8d:3e:ef:a2:85:
48:bc:c7:91:bd:4a:e9:0a:97:44:f0:97:d9:e4:f7:
fa:49:72:12:03:cd:23:25:f0:f6:5f:44:7d:f5:54:
c2:d2:28:b3:06:5d:a5:39:0f:c2:ca:f7:38:a9:f2:
d4:f4:fc:04:2b:9e:a2:af:c1:78:4a:6a:63:1c:2c:
ba:63:dc:29:86:6b:02:e0:5e:6b:81:26:ca:2a:71:
a9:0f:6f:5d:df:60:cd:9a:51:ca:28:8f:0c:46:6b:
b6:e9:bd:1b:73:10:6c:ed:32:da:6c:56:2a:3f:db:
98:7b:7a:99:96:f6:0a:3c:f5:74:c5:2b:5c:e8:91:
fd:22:af:02:0c:32:0a:ff:8a:1f:02:19:24:48:d1:
84:f1:03:2c:b6:47:60:be:d7:79:ec:1a:99:54:db:
75:3d:fc:15:10:47:5b:20:85:04:48:b0:52:08:69:
06:2d:fe:66:70:a2:bd:94:37:9f:4d:d6:bf:12:dd:
95:3b:61:74:26:58:d5:b7:42:e1:66:4d:c0:b1:97:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:A1:E3:CF:8A:7D:43:43:4A:F4:E3:3A:06:7F:89:FE:AF:F7:85
X509v3 Authority Key Identifier:
keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/CoCh48-KfUNDSvTjOgZ_if6v94U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.248.0/21
84.20.56.0/21
109.205.200.0/21
185.19.120.0/22
185.71.16.0/22
185.71.112.0/22
185.178.120.0/22
213.196.128.0/18
IPv6:
2a02:24e8::/29
Signature Algorithm: sha256WithRSAEncryption
03:e2:be:00:b0:62:2e:3e:77:e8:69:8b:79:ce:32:9e:83:04:
66:e8:70:d3:ab:80:6a:2f:c7:1d:6d:89:c3:9e:66:d5:23:f6:
1b:73:6c:3e:46:1b:1a:98:bf:81:55:0d:4d:7b:6e:d7:f6:47:
d2:18:bd:e1:16:36:1a:eb:ab:1f:ca:06:1c:fc:6e:b3:84:08:
8c:2d:75:3f:8b:c4:56:1f:69:f6:b5:ec:4e:ca:e2:32:d7:c4:
31:73:a1:85:43:88:e2:c6:1b:c3:e8:99:e5:e3:e2:61:de:1b:
6c:4e:21:2b:2b:99:4c:e2:15:1f:56:9e:1a:05:0f:0e:8c:b3:
37:60:f4:d2:d0:47:3c:09:1b:f0:c5:7c:e7:3b:4a:54:35:bf:
56:ab:a9:b6:93:3e:ed:5a:93:b7:b5:43:71:6e:19:e7:eb:34:
f1:ae:bf:d9:49:66:22:55:d4:e6:88:8e:99:a3:b7:73:89:2f:
bd:1a:89:70:6d:a6:9a:d4:24:a2:df:48:51:a0:4f:5c:bd:6e:
33:b0:db:ac:33:01:77:db:fa:60:e1:3c:ef:79:69:47:0b:5c:
9e:bd:e7:36:b6:d3:76:74:b0:58:d8:45:34:bb:e2:66:c2:10:
a9:0d:d9:fc:f0:30:f8:e8:44:8d:d5:47:75:1a:8d:bd:2f:0a:
c7:07:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:47 2025 by rpki-client