Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/KoOPOIPczbeWJug-0SBjktzO5Ag.roa
File: KoOPOIPczbeWJug-0SBjktzO5Ag.roa (raw, json)
Hash identifier: 2zFJiqqM+LwGMv8r8+f/l/MaM/aGrMW3Ufz/RLvdy3M=
Subject key identifier: 2A:83:8F:38:83:DC:CD:B7:96:26:E8:3E:D1:20:63:92:DC:CE:E4:08
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0184D2FEDB8BF82DEFB9BEF3D677E8B7F420
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/KoOPOIPczbeWJug-0SBjktzO5Ag.roa
Signing time: Fri 02 Dec 2022 13:20:28 +0000
ROA not before: Fri 02 Dec 2022 13:20:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15723
IP address blocks: 37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
88.151.192.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:fe:db:8b:f8:2d:ef:b9:be:f3:d6:77:e8:b7:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 2 13:20:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a838f3883dccdb79626e83ed1206392dccee408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:d0:5b:76:2e:26:a2:ae:ae:85:cf:67:3f:
8a:5b:d4:81:ab:84:b1:6c:5d:6b:3b:d7:b0:09:a9:
ee:f1:83:0e:f1:bf:0a:a0:d3:72:24:98:76:b6:53:
ce:d3:21:36:25:85:75:4e:21:64:2d:29:9d:e4:39:
ad:3c:70:48:23:63:ca:f6:29:fb:ba:da:76:ee:ef:
03:2e:5f:8c:b1:00:f6:31:90:05:50:ef:a0:21:89:
27:d6:91:96:f8:88:77:7b:c3:8b:fe:93:3a:1f:65:
13:50:57:7f:d0:23:8f:85:39:ce:eb:ab:a5:43:bc:
a6:10:6c:38:70:5a:ed:64:1f:43:9d:7c:41:83:ec:
24:d8:9f:f2:24:fa:af:b1:bb:3d:d6:6a:73:00:f3:
bf:b1:72:c7:5c:e8:97:96:ed:1b:86:75:8c:ca:b6:
b0:8c:e1:f3:2b:93:f8:15:86:3c:fd:65:da:f7:3c:
43:7c:9d:93:f7:17:09:e0:7f:f5:6a:8c:5c:04:e1:
4c:ed:ab:09:1b:7b:a0:32:78:46:58:c3:ae:01:fa:
aa:33:d1:bd:99:33:23:fc:68:e5:79:da:38:5e:92:
1c:0e:44:2b:b9:ea:69:39:9b:c6:1e:14:84:4e:ef:
03:16:7c:be:0f:e8:c0:18:50:19:4e:18:d8:e0:6d:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:8F:38:83:DC:CD:B7:96:26:E8:3E:D1:20:63:92:DC:CE:E4:08
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/KoOPOIPczbeWJug-0SBjktzO5Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.201.0-37.128.203.255
88.151.192.0/24
185.81.216.0/23
Signature Algorithm: sha256WithRSAEncryption
db:74:f8:ff:e2:0d:f5:60:3c:b1:8c:60:04:aa:4c:6f:58:b1:
db:14:f7:f6:92:f1:62:91:76:db:a0:39:bb:4b:50:59:00:c7:
72:eb:93:d3:df:f9:3a:67:6f:de:78:98:03:45:0a:fa:12:4e:
86:0f:0c:50:01:3a:7d:04:3f:a0:80:8a:de:68:b5:9f:ed:33:
b7:ed:74:19:3e:f1:67:fd:0c:1b:11:22:cf:ff:ba:e3:6f:d3:
d1:e9:72:36:17:72:0a:a5:5d:1d:64:1e:da:bc:19:1f:a0:9c:
4e:22:aa:84:79:96:0b:fd:45:2d:f8:ab:e4:24:48:f3:99:d9:
3e:57:9a:8d:eb:a8:8f:a4:e6:c4:15:22:b3:8b:31:e4:9b:32:
c3:15:be:27:7f:91:67:ae:8a:00:e3:6e:a2:cb:5c:ec:57:1b:
2f:c9:98:f6:8e:52:1f:67:a5:ef:8a:a3:2e:c1:b0:ad:b2:6a:
01:8c:32:86:92:a5:2b:53:a1:2d:22:12:0d:0c:9c:37:0e:a8:
d9:e5:c7:65:c8:55:40:3c:36:9c:8a:db:ef:fa:c1:b3:0f:62:
e8:31:76:3f:3d:18:a4:41:44:c3:a9:dc:5d:77:18:aa:41:35:
5a:b7:dd:7d:3e:69:0d:b6:18:b3:5c:e3:65:cc:81:62:a3:85:
3d:da:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org