Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/P-Fca4Q4NwaL0lQdb1umQ-35X5w.roa
File: P-Fca4Q4NwaL0lQdb1umQ-35X5w.roa (raw, json)
Hash identifier: l99OHfu+IvVa8ZqBak3woHTy6pMPtilBmAklpDhEnck=
Subject key identifier: 3F:E1:5C:6B:84:38:37:06:8B:D2:54:1D:6F:5B:A6:43:ED:F9:5F:9C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 039068CF
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/P-Fca4Q4NwaL0lQdb1umQ-35X5w.roa
Signing time: Tue 10 May 2022 12:42:03 +0000
ROA not before: Tue 10 May 2022 12:42:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15723
IP address blocks: 37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.200.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
88.151.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59795663 (0x39068cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 10 12:42:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fe15c6b843837068bd2541d6f5ba643edf95f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:2b:6b:2e:54:65:8a:27:8c:7f:f3:f2:45:
83:93:e5:0b:e0:2c:7f:de:34:7d:c0:d3:8b:2c:81:
c8:d6:bf:fb:40:ff:ca:b2:64:4e:48:fb:09:1e:7d:
cc:2b:78:15:dc:70:dc:2f:84:97:98:71:fc:42:96:
b8:3c:87:c1:fc:a8:59:29:da:15:4e:ec:ce:b6:6e:
06:59:16:a9:02:7d:33:82:02:e0:a7:f3:f0:58:93:
03:cc:65:21:56:a3:65:81:24:67:9a:24:6f:fd:cc:
64:42:2f:1b:1f:3f:41:ca:a3:74:b1:88:47:26:8b:
db:5d:57:6e:39:ab:b3:cc:b6:35:e1:9f:fc:e7:94:
af:c3:2d:46:13:9b:40:35:fd:01:0b:25:c1:74:86:
5b:94:1f:d8:62:59:dd:c2:8a:a7:8f:3d:8b:be:11:
b6:a5:37:ce:b7:71:b8:f9:ed:a1:c4:a1:64:fa:44:
2c:db:3b:4a:16:49:cc:05:d4:eb:08:6d:82:31:8d:
be:35:0c:86:a0:59:f5:82:af:08:64:5b:9b:c9:2c:
63:c7:f7:39:7b:5a:89:1d:d5:49:80:11:8c:04:24:
90:60:59:6b:e3:4a:c3:6d:96:ef:77:b1:16:f9:3d:
46:f7:aa:9b:06:c3:5a:0d:70:9d:3d:19:d6:a9:98:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:5C:6B:84:38:37:06:8B:D2:54:1D:6F:5B:A6:43:ED:F9:5F:9C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/P-Fca4Q4NwaL0lQdb1umQ-35X5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.200.0/22
88.151.194.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d6:b5:7c:32:60:c9:e3:1d:e2:33:12:0b:78:82:6b:92:d4:
7e:94:ae:2b:25:c6:6f:4f:27:79:76:21:20:76:03:51:85:f7:
bf:23:f1:d3:22:fc:07:f1:b5:ce:f0:51:6f:0a:50:9c:91:f7:
db:be:f4:d5:14:ea:7e:c7:0c:61:e5:98:83:94:46:4f:d9:6c:
43:9e:99:2c:cc:28:e3:a8:e0:f9:ec:cb:66:5a:d5:77:ac:bc:
ae:7c:1d:31:02:5f:87:ce:f6:eb:33:f7:3d:8f:d7:5b:e2:ab:
c9:08:dc:e0:73:61:9c:e0:99:e4:df:df:2b:3b:7b:ec:c4:31:
ba:c2:e7:38:a0:ba:91:c5:dd:77:5d:57:5b:48:8a:db:db:22:
71:68:a6:79:1a:1b:dd:4d:cc:88:ac:81:cf:54:b7:7e:c7:47:
2b:44:9e:56:61:fc:6a:a6:7c:db:94:55:be:23:3d:0c:6d:b6:
66:0d:96:ca:30:b6:b3:b5:89:c6:26:01:bb:89:66:7c:56:f1:
4d:d4:82:0e:fd:82:bc:30:a7:b8:70:b5:64:5a:69:33:f9:0b:
f5:c5:89:03:6e:49:6f:b5:ee:a4:ca:f8:8f:92:8b:9f:dd:53:
f7:e5:3a:05:08:5b:a0:d5:75:47:fe:08:e9:da:bb:fc:cf:1f:
61:64:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org