Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/tLlVJWuWzMJL_gNPbkSbVIzb5J8.roa
File: tLlVJWuWzMJL_gNPbkSbVIzb5J8.roa (raw, json)
Hash identifier: eb7Gq0e1eTuMP2AlBrdJANjCxcMDSD7EVO1Em103YcQ=
Subject key identifier: B4:B9:55:25:6B:96:CC:C2:4B:FE:03:4F:6E:44:9B:54:8C:DB:E4:9F
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 1A957DCC
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/tLlVJWuWzMJL_gNPbkSbVIzb5J8.roa
Signing time: Sat 01 Jan 2022 01:57:04 +0000
ROA not before: Sat 01 Jan 2022 01:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34545
IP address blocks: 37.130.192.0/24 maxlen: 24
37.130.193.0/24 maxlen: 24
37.130.194.0/24 maxlen: 24
37.130.195.0/24 maxlen: 24
185.45.81.0/24 maxlen: 24
185.45.82.0/24 maxlen: 24
185.45.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446004684 (0x1a957dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 1 01:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4b955256b96ccc24bfe034f6e449b548cdbe49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:14:c7:8e:77:06:8c:7f:be:ec:93:0c:bd:
10:11:de:9f:eb:c6:46:b6:27:50:2d:bb:f7:b7:09:
3a:3d:7c:ec:00:dc:44:62:c6:c6:b0:6d:3c:1a:7d:
61:ba:a5:81:a6:35:ba:32:9b:9a:d0:91:6b:a1:34:
ed:56:ec:0c:1e:a9:88:eb:18:7d:12:64:60:66:01:
5c:fa:8e:08:a7:c6:5f:e0:b7:77:73:6e:1e:00:9c:
4c:9b:5c:78:91:ed:c1:b5:f0:82:32:42:59:dd:0d:
7d:09:9c:26:05:50:bd:b1:89:dd:8b:82:3e:a3:95:
12:dd:f3:8b:8b:6c:e9:71:e3:cc:22:c3:6a:04:13:
04:f7:ea:c9:32:d2:27:9b:ec:95:f1:17:ac:0d:32:
b1:a7:58:ef:c5:ed:11:d9:ad:28:f7:b0:f8:61:51:
c2:bf:07:ce:25:6d:59:39:73:38:b7:ed:7b:ba:da:
8c:ff:78:83:5f:21:69:65:99:b2:d1:02:89:d3:6a:
07:e2:1d:8e:3c:c0:95:2e:b5:c7:a2:55:65:0b:86:
0a:10:0e:bf:35:73:3b:a5:76:a0:d5:fc:ae:db:21:
8c:ad:1f:11:a1:83:01:6a:98:e8:47:ec:7f:d3:bd:
bf:11:d5:2b:22:57:a3:95:90:e8:fb:b5:4e:47:9d:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:55:25:6B:96:CC:C2:4B:FE:03:4F:6E:44:9B:54:8C:DB:E4:9F
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/tLlVJWuWzMJL_gNPbkSbVIzb5J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.192.0/22
185.45.81.0-185.45.83.255
Signature Algorithm: sha256WithRSAEncryption
4e:94:15:93:2c:0e:c8:17:31:64:f4:be:84:98:cc:bb:11:b6:
02:42:6f:af:59:3a:3d:b4:67:df:30:bd:8e:f5:37:96:82:b9:
d2:bf:81:50:b5:2b:98:c5:cb:dc:95:47:55:c4:49:05:66:92:
0b:64:3d:7c:ca:23:3a:a0:9e:8d:e3:3f:71:ab:98:ad:70:5c:
69:43:de:a3:8a:11:81:c8:17:7b:26:c1:7f:83:1a:75:38:ed:
e7:94:0d:75:d9:49:ef:58:b9:3a:77:86:13:a1:5e:59:59:84:
6d:8e:a5:5b:42:12:e4:3c:58:35:23:1b:11:ff:e0:96:9d:e1:
1c:45:3d:cb:c0:f8:39:c3:a6:cb:39:c9:4c:62:1c:8c:54:1f:
5b:70:e2:7a:36:58:88:84:81:f9:87:68:6e:78:e0:a8:fe:f4:
7d:50:b0:c7:b9:37:44:5c:01:44:d2:e0:fc:3e:51:f7:a1:b3:
a1:04:2f:fd:f0:ce:e9:53:d6:05:ea:52:e1:7a:8c:2d:24:b7:
95:91:52:2c:be:39:aa:f0:13:26:ef:60:8b:62:eb:92:6f:e0:
f3:c7:39:d7:d8:ed:c3:cd:5c:aa:71:27:f0:6a:b1:fc:12:b3:
22:aa:ac:e4:de:ac:4d:d8:24:18:26:13:f9:a5:5f:91:4d:aa:
a5:a3:e9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org