Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/F6qVrE7m2rWESTu1Rcms8c3kBU0.roa
File: F6qVrE7m2rWESTu1Rcms8c3kBU0.roa (raw, json)
Hash identifier: MK3PQMnwrQzdmW8gO/bKO2m0xzVLCUaraqJAxMMUvdo=
Subject key identifier: 17:AA:95:AC:4E:E6:DA:B5:84:49:3B:B5:45:C9:AC:F1:CD:E4:05:4D
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 0A2BA0E7
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/F6qVrE7m2rWESTu1Rcms8c3kBU0.roa
Signing time: Sat 01 Jan 2022 08:00:56 +0000
ROA not before: Sat 01 Jan 2022 08:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199430
IP address blocks: 37.203.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170631399 (0xa2ba0e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Jan 1 08:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17aa95ac4ee6dab584493bb545c9acf1cde4054d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:df:43:7d:43:f0:c1:fa:7f:bb:58:ed:7c:
f0:3f:c3:1f:68:42:51:0f:56:2a:3e:5b:b0:9b:8f:
a3:af:61:c1:ac:1f:65:bc:de:2a:65:4b:80:27:c0:
af:b5:d5:76:fc:e5:96:d5:fd:ad:fb:ca:b2:16:25:
e1:8a:cd:1e:b0:ea:4e:c3:36:19:64:8f:0a:bd:a0:
4e:4b:d7:97:93:02:a4:66:87:a7:dd:0e:46:17:52:
45:58:b8:b8:d9:96:81:08:8a:b1:d6:d6:7b:6d:4e:
3d:2d:be:c8:7e:63:83:bd:c0:08:92:1e:ab:f9:0a:
3e:c7:f4:cc:c6:fe:7c:47:47:19:c4:db:d8:1f:b5:
b5:36:93:b4:11:4c:0a:d5:bb:48:18:23:c4:0d:62:
74:88:16:fa:b1:18:47:a8:7e:d1:c2:eb:16:3d:46:
0d:83:bf:b1:d5:c3:44:d6:89:be:24:20:c8:07:02:
c5:1a:90:b2:14:a1:df:12:7a:fb:b6:2e:9e:a1:6c:
fb:aa:16:80:79:71:1d:b1:7c:6b:df:4c:bf:13:f3:
2a:2e:59:ef:06:b3:36:53:07:97:d0:9b:81:55:62:
b1:72:24:5f:69:34:78:fa:8f:ec:64:5e:c7:b3:2e:
ef:a2:47:d1:13:39:03:a9:da:05:3e:de:f7:c7:a1:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:95:AC:4E:E6:DA:B5:84:49:3B:B5:45:C9:AC:F1:CD:E4:05:4D
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/F6qVrE7m2rWESTu1Rcms8c3kBU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4c:00:65:23:4a:85:4f:9b:e5:b9:42:7d:e5:de:86:1d:c9:
b4:e8:ec:91:15:9d:09:c6:24:af:59:65:6e:e5:25:a4:3f:dd:
94:7d:51:cb:e7:87:01:99:f2:97:e6:39:5a:bc:ea:c2:ca:51:
47:2b:41:7f:de:c7:88:17:54:be:e1:82:d0:69:ae:f7:8d:cf:
76:fd:51:3b:68:ac:36:39:c3:18:ff:a6:b8:20:13:d7:f4:e2:
8e:78:24:b7:28:c6:91:2c:f5:58:1c:02:48:ea:ce:23:f4:a0:
45:45:fe:86:60:eb:fd:a6:78:da:4d:1f:88:7a:b6:60:9b:e4:
dc:57:16:9e:8b:1f:cb:1d:9f:e8:42:b8:e0:c5:c2:6f:7a:56:
76:ee:92:60:8b:71:ee:f5:ad:aa:80:91:21:b4:08:e5:4b:4e:
ec:f3:2d:27:62:b9:9a:99:47:df:cb:43:c8:35:e8:ce:50:20:
50:19:7f:a2:8a:1b:78:2c:7f:ac:5b:a0:bd:80:5a:25:0c:7e:
6a:9b:20:20:4e:1c:2f:20:69:61:c1:d2:4c:86:2f:fa:c1:43:
01:b5:99:0f:8a:2f:3f:d2:af:ec:c9:dd:f3:88:db:e0:7f:46:
b6:18:d0:14:18:ac:26:29:fa:03:3d:2d:02:58:f7:04:78:aa:
9c:9f:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org