Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/IWajvKOOOuKArYVoGWsZHZXT6fU.roa
File: IWajvKOOOuKArYVoGWsZHZXT6fU.roa (raw, json)
Hash identifier: g2GiIqti4Uvr5+mYeK8AuScFQAG3+wTxu1+YV7oH1r0=
Subject key identifier: 21:66:A3:BC:A3:8E:3A:E2:80:AD:85:68:19:6B:19:1D:95:D3:E9:F5
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 09D34CDE
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/IWajvKOOOuKArYVoGWsZHZXT6fU.roa
Signing time: Sat 19 Mar 2022 17:06:01 +0000
ROA not before: Sat 19 Mar 2022 17:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47962
IP address blocks: 176.106.224.0/24 maxlen: 24
176.106.230.0/24 maxlen: 24
37.122.153.0/24 maxlen: 24
37.122.157.0/24 maxlen: 24
37.122.156.0/23 maxlen: 23
37.122.156.0/24 maxlen: 24
37.122.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164842718 (0x9d34cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Mar 19 17:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2166a3bca38e3ae280ad8568196b191d95d3e9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:20:0c:23:87:a4:11:00:c8:e4:5a:3f:b8:
41:d7:04:fa:18:5a:6d:8c:4e:b0:43:ef:6e:54:c7:
ec:28:8f:39:bf:53:9d:03:16:89:12:a7:9b:73:34:
ec:f9:52:b2:25:00:53:83:a3:84:84:91:4f:ba:01:
b0:00:f8:fd:17:61:00:0a:e1:da:38:9e:2a:51:8b:
10:5f:29:14:38:c1:f9:6a:cf:c0:59:99:b2:3a:df:
6d:4e:a2:ae:11:65:b9:a9:a3:ad:df:0a:5c:26:c5:
91:34:49:33:19:60:70:03:bb:27:26:2f:ac:a7:3d:
82:61:90:78:2a:bf:2a:e9:b8:39:7b:7c:64:64:f2:
84:30:99:ef:a4:d4:77:76:4a:d2:f9:f1:d3:c7:c5:
60:65:5b:22:e7:cb:55:27:de:fe:96:43:c0:43:a2:
c7:78:89:85:82:b7:b1:74:f4:f4:5e:bf:6c:99:06:
4c:45:fd:9d:9a:9f:b2:47:61:e6:b0:67:8a:bc:fa:
da:ef:36:d8:25:e3:5e:7b:88:54:18:f0:6a:b4:1f:
0b:57:07:29:79:18:72:0e:f5:7c:c5:9a:7c:40:2e:
40:4e:88:d6:23:2f:1b:1e:b9:ef:48:f0:1f:6a:fc:
2b:ba:b5:60:17:67:3d:17:5a:59:68:88:6c:60:2e:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:66:A3:BC:A3:8E:3A:E2:80:AD:85:68:19:6B:19:1D:95:D3:E9:F5
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/IWajvKOOOuKArYVoGWsZHZXT6fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.153.0-37.122.154.255
37.122.156.0/23
176.106.224.0/24
176.106.230.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f6:fb:2c:f5:16:5a:bc:32:96:76:62:8c:77:2f:df:0f:1b:
76:f8:ee:4f:ea:a1:84:2e:e7:90:14:0c:cf:1e:dc:23:63:6f:
f5:c0:05:3f:1b:b1:8d:bb:74:16:c9:c3:e8:86:a1:e5:62:a8:
2a:ef:d5:bb:f1:5c:fa:aa:a9:6d:df:95:c4:b2:cb:8b:41:04:
ba:9e:13:c2:4a:4c:a7:7b:15:4e:ca:5f:d9:8d:be:5a:b9:78:
ea:29:56:ab:73:8a:41:65:eb:4d:31:df:fe:e8:95:11:92:cb:
24:2d:28:1b:87:34:84:ae:41:48:b1:6d:e9:da:18:8c:1b:08:
60:ac:94:fc:45:cb:1d:87:0e:8d:28:60:16:21:d5:92:0a:0e:
0f:8b:9b:46:a5:50:48:b6:93:32:43:fe:e1:ba:42:29:d1:c2:
de:a6:6f:f8:d0:ad:f0:26:a0:f1:ea:50:8e:27:41:5b:b5:b2:
69:a0:26:9c:fc:74:2b:a5:a6:51:15:eb:c3:bd:09:0b:df:37:
1d:a8:78:01:c9:03:ab:f2:29:bb:f0:87:9a:21:94:6f:66:e9:
27:e6:5c:0e:c5:7a:77:9a:30:f4:0a:c7:4e:00:5b:5f:f6:d9:
07:37:c5:3e:ce:9e:17:4b:a9:34:77:83:aa:b1:98:76:f4:cf:
b5:de:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org