Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/_2MzXds42p6rECTQ3Xdi88SEXr8.roa
File: _2MzXds42p6rECTQ3Xdi88SEXr8.roa (raw, json)
Hash identifier: XP309P1qA0BJKFqtwOGF8okEsaQMhssb1k3TyHcZGHc=
Subject key identifier: FF:63:33:5D:DB:38:DA:9E:AB:10:24:D0:DD:77:62:F3:C4:84:5E:BF
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 07AD8D06
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/_2MzXds42p6rECTQ3Xdi88SEXr8.roa
Signing time: Sat 01 Jan 2022 14:03:49 +0000
ROA not before: Sat 01 Jan 2022 14:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60109
IP address blocks: 37.16.100.0/22 maxlen: 22
185.57.180.0/22 maxlen: 22
2a00:4cc4::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128814342 (0x7ad8d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jan 1 14:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff63335ddb38da9eab1024d0dd7762f3c4845ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:76:6b:b9:5f:f9:4f:04:0a:de:01:4b:a1:
8e:8a:db:ca:14:e3:2d:17:9a:bb:f1:95:8f:31:75:
f9:3e:3f:e1:9e:b7:98:56:a1:3e:fb:f6:e9:fa:df:
25:d7:17:7d:22:7e:a8:25:f2:4e:54:ca:f0:3a:a0:
4f:46:93:eb:91:f2:cd:0d:d9:b0:42:03:8f:15:e5:
e2:ea:c0:1d:95:4d:3a:72:54:76:02:3b:ce:7b:50:
85:a3:68:bb:46:56:aa:6b:9c:e7:4f:a1:71:d1:5e:
c0:00:5a:ae:08:b3:c1:41:f1:0a:96:1f:bf:1e:58:
4d:e5:f6:96:7e:c6:08:76:53:bc:df:93:55:bd:0e:
49:1d:46:be:51:e5:c9:69:b1:03:6b:57:9e:37:6d:
97:df:3b:51:22:7c:b0:7a:f3:5a:73:7c:c2:85:7e:
96:4f:1b:55:74:1f:06:cf:6a:a5:d9:ff:5d:76:77:
95:a7:b3:26:32:77:9c:40:cc:1e:c9:f3:51:cc:d0:
23:54:30:c3:02:a0:df:03:47:0f:e4:b1:ac:40:96:
f2:8d:21:41:99:0c:75:d7:71:79:df:e2:43:e7:35:
2d:78:5e:9b:c0:e4:6e:c9:ec:2a:45:9f:e5:d7:11:
78:b6:0b:69:f9:26:b5:30:6b:71:7d:ed:08:df:45:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:33:5D:DB:38:DA:9E:AB:10:24:D0:DD:77:62:F3:C4:84:5E:BF
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/_2MzXds42p6rECTQ3Xdi88SEXr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.100.0/22
185.57.180.0/22
IPv6:
2a00:4cc4::/32
Signature Algorithm: sha256WithRSAEncryption
36:c3:ca:bf:c2:b0:44:ae:96:39:41:31:ed:3d:8b:83:17:35:
28:35:91:9b:3c:9d:87:b7:77:61:73:e0:5a:34:73:0f:ad:21:
ed:3a:ed:f6:71:d4:8c:f3:c6:d6:8e:e6:e5:bf:3d:59:74:97:
4b:c0:ec:6f:34:7e:c6:e7:f1:25:69:0c:e2:64:53:e2:85:06:
12:ed:ab:ee:00:ff:b0:37:17:b3:03:d6:58:da:c2:25:24:00:
78:78:10:14:52:f9:b4:06:34:5c:94:ce:b5:af:44:f7:26:f6:
5c:f1:61:a0:cb:f1:3f:4e:4b:58:8d:9a:37:9e:a6:5c:85:52:
19:c7:f0:3d:c2:87:88:99:2a:38:ee:eb:90:b4:38:9a:e0:91:
0d:17:f1:64:69:bc:83:f0:8d:99:56:68:92:cc:e6:d0:1f:f5:
53:e9:99:05:c2:bc:1d:5e:99:4a:8f:5e:f2:71:e8:9f:21:38:
7c:b6:9d:8e:71:69:be:8c:ec:9f:10:ee:7b:07:d0:55:8d:9b:
b2:b5:2b:00:4a:4d:95:79:57:48:89:ad:22:ed:66:e7:9a:03:
66:e4:59:37:c3:ff:6b:ba:76:fd:e7:9f:c2:b5:00:23:a6:45:
2b:9e:9c:f8:8a:fc:1b:89:18:6a:2d:79:69:a1:b2:1a:cb:15:
b9:82:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org