Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/ijvifMwsPlLYBuw2k19nF4wovpE.roa
File: ijvifMwsPlLYBuw2k19nF4wovpE.roa (raw, json)
Hash identifier: 4OoivOQaw4SrVtMhxv4FXNfuBAGELB8LD41n653kt+E=
Subject key identifier: 8A:3B:E2:7C:CC:2C:3E:52:D8:06:EC:36:93:5F:67:17:8C:28:BE:91
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 2932C747
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/ijvifMwsPlLYBuw2k19nF4wovpE.roa
Signing time: Sat 01 Jan 2022 03:57:26 +0000
ROA not before: Sat 01 Jan 2022 03:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60397
IP address blocks: 37.152.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691193671 (0x2932c747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jan 1 03:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a3be27ccc2c3e52d806ec36935f67178c28be91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:6f:d8:b2:7a:2e:05:2d:aa:d5:7b:fc:c2:
6d:28:82:ad:f1:f4:45:49:4f:58:38:40:6e:40:f6:
8b:88:f2:3b:7d:ab:ad:e9:16:49:ea:4a:5f:62:f3:
61:c2:c5:cb:e9:33:ce:65:52:42:29:39:12:66:a1:
09:b6:c4:b7:22:ef:89:b2:9b:1d:50:83:f8:7e:63:
a7:4b:7a:cf:9b:1a:35:ad:44:81:df:0a:3b:03:c2:
38:39:d8:a9:d7:7e:2e:ed:f3:c2:01:85:56:c9:3c:
13:00:8f:fe:ed:16:c3:cb:03:df:50:48:95:db:7d:
6f:f4:91:00:35:d6:fa:45:e2:51:fe:f2:f0:b3:64:
5e:3f:fd:25:15:52:68:43:28:3d:a5:00:2f:8d:93:
b8:06:77:a5:e8:69:ab:a8:03:a4:80:16:31:8f:0f:
dc:6a:6a:a1:7f:8d:b8:81:d3:0c:98:11:1b:7a:80:
9a:b0:4b:aa:c2:d5:8b:bd:25:3d:ed:51:fb:bc:b9:
8a:82:5f:38:a4:cb:99:13:94:37:9b:48:0a:36:24:
cd:81:b5:d8:91:65:ab:2b:20:06:29:af:30:db:46:
15:ba:ba:ac:ed:e3:0a:b2:a8:7d:30:25:52:e8:e7:
2d:9d:51:33:9c:dd:bf:86:44:71:de:37:8e:3c:57:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3B:E2:7C:CC:2C:3E:52:D8:06:EC:36:93:5F:67:17:8C:28:BE:91
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/ijvifMwsPlLYBuw2k19nF4wovpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.134.0/24
Signature Algorithm: sha256WithRSAEncryption
80:41:1c:84:8f:b2:48:36:d5:37:0d:73:06:85:73:14:bd:35:
2a:db:39:b1:c4:02:cf:28:ec:aa:75:78:ec:5d:f6:e1:31:df:
52:2b:e3:40:2a:97:31:27:fd:1e:05:cd:07:71:32:b6:bf:29:
60:eb:7d:91:93:5d:99:4a:9c:ed:ab:79:b3:dc:8e:ff:af:35:
5c:9c:29:32:ef:56:a0:c7:14:59:cb:72:52:80:cd:1d:8d:09:
c3:29:27:49:df:c5:8b:8c:ab:29:94:9a:04:d2:9a:73:e4:e2:
46:5d:03:64:4b:99:7d:12:0a:a1:9c:57:1d:da:bf:6b:16:02:
a5:74:f7:70:13:39:b9:de:2b:12:41:65:6e:a3:83:ca:ae:b9:
00:d5:89:84:a4:74:cf:b2:c0:d3:0a:ea:a7:aa:50:89:3a:41:
7f:02:58:be:ae:60:1d:f3:77:e4:5a:2c:ab:4a:05:54:de:a3:
59:9b:41:72:87:62:a1:7c:85:0c:3a:9a:b4:54:22:20:6f:07:
d0:73:7a:81:6e:c9:c8:07:ec:a0:bd:ce:b2:c8:c4:71:a0:ae:
90:3c:b4:0a:a2:5e:96:6e:28:ef:90:e1:be:16:7f:c9:b0:18:
46:86:82:eb:51:b4:cc:44:4d:ee:72:f0:0a:35:bd:59:66:4f:
74:9d:e1:ef
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKTLHRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTNlM2YyOGU2NDdlOTJhYzhhNzEwYzMwNWMyZTIxYjYyM2VkYzFjMB4XDTIyMDEw
MTAzNTcyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGEzYmUyN2NjYzJj
M2U1MmQ4MDZlYzM2OTM1ZjY3MTc4YzI4YmU5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlRb9iyei4FLarVe/zCbSiCrfH0RUlPWDhAbkD2i4jyO32r
rekWSepKX2LzYcLFy+kzzmVSQik5EmahCbbEtyLvibKbHVCD+H5jp0t6z5saNa1E
gd8KOwPCODnYqdd+Lu3zwgGFVsk8EwCP/u0Ww8sD31BIldt9b/SRADXW+kXiUf7y
8LNkXj/9JRVSaEMoPaUAL42TuAZ3pehpq6gDpIAWMY8P3GpqoX+NuIHTDJgRG3qA
mrBLqsLVi70lPe1R+7y5ioJfOKTLmROUN5tICjYkzYG12JFlqysgBimvMNtGFbq6
rO3jCrKofTAlUujnLZ1RM5zdv4ZEcd43jjxXOwkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSKO+J8zCw+UtgG7DaTX2cXjCi+kTAfBgNVHSMEGDAWgBQ1Pj8o5kfpKsin
EMMFwuIbYj7cHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05UNF9LT1pINlNySXB4RERCY0xpRzJJLTNCdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvNzY3OTMzLTRhNzMtNGIyZi1hYzg0LWRhY2EyNmRlNmY3Yi8x
L2lqdmlmTXdzUGxMWUJ1dzJrMTluRjR3b3ZwRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
NzY3OTMzLTRhNzMtNGIyZi1hYzg0LWRhY2EyNmRlNmY3Yi8xL05UNF9LT1pINlNy
SXB4RERCY0xpRzJJLTNCdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWYhjANBgkqhkiG9w0BAQsFAAOC
AQEAgEEchI+ySDbVNw1zBoVzFL01Kts5scQCzyjsqnV47F324THfUivjQCqXMSf9
HgXNB3Eytr8pYOt9kZNdmUqc7at5s9yO/681XJwpMu9WoMcUWctyUoDNHY0Jwykn
Sd/Fi4yrKZSaBNKac+TiRl0DZEuZfRIKoZxXHdq/axYCpXT3cBM5ud4rEkFlbqOD
yq65ANWJhKR0z7LA0wrqp6pQiTpBfwJYvq5gHfN35Fosq0oFVN6jWZtBcodioXyF
DDqatFQiIG8H0HN6gW7JyAfsoL3OssjEcaCukDy0CqJelm4o75DhvhZ/ybAYRoaC
61G0zERN7nLwCjW9WWZPdJ3h7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:07 2024 by rpki-client on console-ams.rpki-client.org