Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/Yj3PXSwAMqb2ay1SSmyPLG0HzMg.roa
File: Yj3PXSwAMqb2ay1SSmyPLG0HzMg.roa (raw, json)
Hash identifier: 8BNTkpWvCPUpyLYE1vK650i1DOj+3onqpAtYWZOBHcw=
Subject key identifier: 62:3D:CF:5D:2C:00:32:A6:F6:6B:2D:52:4A:6C:8F:2C:6D:07:CC:C8
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 0905F42B
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/Yj3PXSwAMqb2ay1SSmyPLG0HzMg.roa
Signing time: Sat 01 Jan 2022 12:00:30 +0000
ROA not before: Sat 01 Jan 2022 12:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205473
IP address blocks: 37.77.71.0/24 maxlen: 24
37.77.70.0/23 maxlen: 23
37.77.69.0/24 maxlen: 24
37.77.70.0/24 maxlen: 24
37.77.66.0/24 maxlen: 24
37.77.66.0/23 maxlen: 23
37.77.65.0/24 maxlen: 24
37.77.67.0/24 maxlen: 24
37.77.68.0/24 maxlen: 24
37.77.68.0/23 maxlen: 23
37.77.68.0/22 maxlen: 22
37.77.72.0/22 maxlen: 22
37.77.72.0/23 maxlen: 23
37.77.73.0/24 maxlen: 24
37.77.72.0/21 maxlen: 21
37.77.74.0/24 maxlen: 24
37.77.75.0/24 maxlen: 24
37.77.74.0/23 maxlen: 23
37.77.72.0/24 maxlen: 24
37.77.78.0/23 maxlen: 23
37.77.77.0/24 maxlen: 24
37.77.78.0/24 maxlen: 24
37.77.76.0/22 maxlen: 22
37.77.76.0/23 maxlen: 23
37.77.76.0/24 maxlen: 24
37.77.79.0/24 maxlen: 24
37.77.64.0/21 maxlen: 21
37.77.64.0/23 maxlen: 23
37.77.64.0/20 maxlen: 20
37.77.64.0/22 maxlen: 22
37.77.64.0/24 maxlen: 24
185.217.88.0/23 maxlen: 23
185.217.88.0/22 maxlen: 22
185.217.89.0/24 maxlen: 24
185.217.90.0/24 maxlen: 24
185.217.91.0/24 maxlen: 24
185.217.90.0/23 maxlen: 23
185.217.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151385131 (0x905f42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Jan 1 12:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=623dcf5d2c0032a6f66b2d524a6c8f2c6d07ccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:6b:d1:63:5a:52:44:e4:df:6b:6e:fb:3a:
c2:5d:18:7d:f5:82:08:55:37:aa:18:a2:b7:78:60:
18:6e:66:3d:12:37:6e:1e:b1:75:3f:57:89:c3:4e:
0a:d0:d0:cb:19:70:a8:2c:98:7d:ec:c4:ca:93:f5:
ea:aa:91:d1:b5:5e:34:9d:68:f8:a5:af:b3:e2:43:
af:f6:2d:d1:45:62:f1:a9:55:67:c7:38:c2:b5:a3:
98:30:2d:4b:87:31:8e:57:fe:74:90:7a:75:8b:40:
6f:42:e6:22:bc:37:9a:e3:b5:9e:49:58:2e:8a:61:
cf:66:c3:42:8b:44:58:c7:c0:63:b9:48:8e:bd:c1:
f4:19:6f:50:c7:a0:fa:e3:99:d5:ea:99:78:77:40:
84:76:8a:3c:62:31:09:1d:4c:b8:30:67:26:cd:9f:
11:d1:fb:28:3f:01:66:74:ab:ac:9e:e0:45:f7:b4:
ee:bb:c3:37:d8:f5:d2:b6:d4:35:70:88:dd:c0:60:
91:9c:ac:10:99:92:a7:ee:3e:0c:bf:15:e1:58:94:
37:9d:f5:b0:52:02:be:42:85:e5:aa:f2:b5:b0:cb:
77:eb:38:74:d0:4a:20:69:68:ba:c8:f9:f2:2e:e4:
c0:89:ed:e4:ec:5c:56:57:6d:19:17:79:88:81:a6:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:CF:5D:2C:00:32:A6:F6:6B:2D:52:4A:6C:8F:2C:6D:07:CC:C8
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/Yj3PXSwAMqb2ay1SSmyPLG0HzMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.64.0/20
185.217.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:eb:9d:7e:0a:7f:4a:e0:0f:a1:6b:ac:48:9f:5e:b9:f8:9d:
b2:3e:ba:38:ee:f6:d3:3b:ad:e6:9c:b8:0a:cd:e7:a1:fa:b1:
f6:f9:35:de:27:87:55:ea:fc:36:13:3d:ea:e3:ec:5a:c5:c8:
f9:73:fa:a5:e9:9b:1d:0f:5b:a0:ed:65:73:d2:9c:4e:90:82:
e1:67:ed:32:f1:ff:cd:93:f4:91:9a:81:d4:68:8c:20:23:91:
47:c4:25:05:78:a9:bd:c1:13:1f:a4:35:32:27:82:13:6e:0b:
0f:3a:3e:87:41:b6:0a:53:b8:b5:fd:3a:52:85:27:94:15:5b:
66:84:2a:35:3a:5d:79:d1:36:58:89:d6:24:dc:41:db:ee:72:
85:41:69:0e:5e:e2:70:ac:f2:28:14:97:19:b3:ba:3a:0f:60:
c5:1a:80:1c:8a:f8:5b:e4:e1:f7:0d:60:2f:db:1b:79:32:d1:
b8:ec:1f:11:e9:44:0b:8c:70:1e:87:66:ce:75:73:d2:c7:20:
10:fe:17:95:78:78:71:53:0a:ca:fe:6e:21:02:82:f7:6d:8f:
69:9e:29:65:23:a0:a2:98:e0:ef:0c:60:b4:9b:12:1f:89:a5:
5e:b5:24:bf:8e:5e:40:95:cd:48:f7:fe:e2:12:7f:79:44:9b:
f8:bf:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org