Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/X37grcHaKcUxu3XDdz5yCEXuX04.roa
File: X37grcHaKcUxu3XDdz5yCEXuX04.roa (raw, json)
Hash identifier: 4PLLvswOkG+cSxrhXt5Ru+zNZ9Lgi4WqIGzckEUxkeM=
Subject key identifier: 5F:7E:E0:AD:C1:DA:29:C5:31:BB:75:C3:77:3E:72:08:45:EE:5F:4E
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 434CD016
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/X37grcHaKcUxu3XDdz5yCEXuX04.roa
Signing time: Sat 01 Jan 2022 07:59:58 +0000
ROA not before: Sat 01 Jan 2022 07:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51290
IP address blocks: 37.235.48.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
2a03:f80:48::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129107478 (0x434cd016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f7ee0adc1da29c531bb75c3773e720845ee5f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:4b:21:c1:3b:aa:d3:44:0a:48:ff:43:cf:
0f:f3:1c:57:44:cc:4d:3b:89:53:8d:15:39:dc:c4:
ad:16:f1:85:2a:da:7f:5f:ef:eb:36:30:88:18:8e:
34:c5:40:49:be:ed:7e:9d:01:b2:3c:8d:db:47:33:
35:16:27:67:b3:6e:7c:c3:66:e6:1b:76:cd:09:7b:
75:f7:f6:2f:b0:bf:87:0e:80:ee:c7:cb:f9:f5:e0:
8e:1e:3b:5c:a6:b3:fe:d6:a5:f5:e1:7d:da:b4:20:
24:c9:43:38:26:39:f4:33:53:13:87:a4:51:8c:ed:
75:78:75:60:5f:95:a1:75:9f:02:01:13:24:69:33:
81:5f:51:98:c0:2b:d3:8e:f9:00:61:de:e8:5c:3f:
54:54:22:40:08:83:c3:1f:3c:38:53:62:bd:79:a8:
f1:6c:92:87:af:1b:f2:f8:44:7b:8d:b2:17:93:25:
d2:2a:11:92:70:e1:22:ab:8b:61:47:78:0f:60:9e:
c6:08:05:64:7c:96:d7:55:dc:f2:fd:67:6b:c9:40:
3b:ed:f5:bf:a0:47:fa:0b:d7:cd:82:1d:e3:70:ab:
0e:a2:ee:75:d2:36:61:7b:0e:d5:cc:92:4d:82:72:
e1:57:2b:63:45:5f:9f:e6:10:f8:65:bb:30:4c:b3:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7E:E0:AD:C1:DA:29:C5:31:BB:75:C3:77:3E:72:08:45:EE:5F:4E
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/X37grcHaKcUxu3XDdz5yCEXuX04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.48.0/24
151.236.25.0/24
IPv6:
2a03:f80:48::/48
Signature Algorithm: sha256WithRSAEncryption
8e:b5:d6:d1:a1:fd:8c:e3:1a:25:af:da:fe:a4:13:e8:e1:66:
dc:7b:34:79:e8:81:5d:ac:40:ce:a4:0f:39:0b:c9:40:6b:6b:
1c:7a:b3:b2:75:7b:6f:a0:d7:11:cd:8f:27:8a:c2:9a:06:68:
38:b1:44:0f:d6:81:e5:e8:d9:eb:67:b7:2f:a4:ec:cc:71:a5:
ae:62:1d:9f:c0:a4:01:a0:5c:ad:da:51:ec:9f:23:fe:c5:a0:
57:84:eb:4e:3c:00:b4:76:91:b9:04:98:4c:5d:78:6a:dc:e9:
a7:64:a4:67:ad:7c:54:17:03:20:e0:90:aa:22:78:18:ae:eb:
d6:8a:04:bc:4c:97:6b:dd:fa:6c:4d:a4:2b:fc:8b:c0:b7:e6:
9e:1a:3e:ed:06:e2:47:a6:29:ca:c1:bc:b2:c4:2a:cb:8e:ab:
d7:9c:7d:1e:ee:1a:78:6d:96:42:ed:b1:88:73:3d:9d:7d:34:
9a:8b:b0:43:72:5d:84:64:c9:cf:f1:47:60:2b:cf:a2:3d:fa:
11:68:0f:d7:4e:dd:64:08:f6:25:99:05:35:1b:52:60:28:ea:
45:5b:92:35:4e:8a:75:92:90:8e:c1:eb:93:84:79:c3:9e:3d:
7f:b8:21:52:8e:82:4c:5c:0f:d5:e5:b7:fa:50:bb:40:6c:aa:
d1:4e:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org