Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/SQHtpLJog3Rq6OSvNGT-f9SKglw.roa
File: SQHtpLJog3Rq6OSvNGT-f9SKglw.roa (raw, json)
Hash identifier: F0Uy4RRM/AtqYH+98N01xxSIZ7nl8InXSA15GBsKSXc=
Subject key identifier: 49:01:ED:A4:B2:68:83:74:6A:E8:E4:AF:34:64:FE:7F:D4:8A:82:5C
Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial: 0310204E
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/SQHtpLJog3Rq6OSvNGT-f9SKglw.roa
Signing time: Sat 01 Jan 2022 08:58:59 +0000
ROA not before: Sat 01 Jan 2022 08:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58045
IP address blocks: 37.209.240.0/23 maxlen: 23
37.209.240.0/24 maxlen: 24
37.209.241.0/24 maxlen: 24
37.209.242.0/23 maxlen: 23
37.209.243.0/24 maxlen: 24
37.209.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51388494 (0x310204e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Validity
Not Before: Jan 1 08:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4901eda4b26883746ae8e4af3464fe7fd48a825c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:a2:ae:ff:0b:8f:3e:13:13:af:de:d8:b6:
12:b4:2a:98:7e:9d:47:51:18:b6:44:35:ad:00:cb:
51:99:5f:83:87:33:0c:c3:a3:8b:47:7d:e2:cb:bd:
29:4b:86:fc:82:fa:82:67:23:5c:01:51:da:4b:42:
7e:33:de:80:85:c0:3f:84:29:a8:f1:65:d1:2b:51:
78:b7:df:8b:0c:1a:a5:26:ec:c7:82:0a:c0:cc:5a:
75:6c:93:60:ed:f0:cd:29:b0:c5:e0:63:0e:9f:47:
88:c2:fe:95:8d:54:4a:d7:0d:e9:6d:2d:23:5b:06:
75:29:f8:5d:60:0f:4e:66:a7:0d:0f:e8:9c:d7:2f:
4d:35:89:f6:70:3d:5b:1c:d3:43:aa:1c:39:c9:b1:
0c:67:41:fb:fe:f7:e1:32:0b:c2:90:b5:c8:a6:04:
db:ae:b5:e2:ca:0f:1e:79:2f:56:24:f5:ed:c3:81:
bf:64:60:f3:16:02:2a:d8:ef:3e:bb:12:3e:43:f8:
06:3f:8b:ce:0e:67:a3:e1:a5:82:1c:07:da:27:46:
8f:22:63:bc:91:69:c4:d6:c4:03:27:12:5e:b8:39:
3f:15:49:55:57:40:05:63:2a:ff:3c:c0:32:f6:53:
b7:81:5d:22:d8:f5:a4:d0:78:72:b2:0b:c3:ba:98:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:01:ED:A4:B2:68:83:74:6A:E8:E4:AF:34:64:FE:7F:D4:8A:82:5C
X509v3 Authority Key Identifier:
keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/SQHtpLJog3Rq6OSvNGT-f9SKglw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.240.0/22
Signature Algorithm: sha256WithRSAEncryption
30:e4:d2:cd:53:21:a1:2e:b9:e5:d7:3b:5e:e8:12:a3:36:3f:
8f:ce:3f:ea:3f:51:a4:4b:7d:2a:71:95:98:e2:f4:17:f2:2e:
df:6e:12:d7:83:8c:4e:0a:60:3a:9f:80:55:cc:44:9d:61:87:
76:7e:d0:2b:8f:9e:60:3f:2b:14:1a:d9:58:12:3c:9e:c8:a5:
f3:36:40:eb:20:bb:ae:c3:2c:fc:40:b4:2a:5d:c1:ee:cd:37:
d1:1b:82:4f:78:a0:c6:bd:e9:14:f0:14:56:df:7e:45:ac:85:
3d:2e:f0:4c:9b:ed:e6:81:21:86:f2:1d:5e:c8:64:b3:7d:4a:
e4:07:32:01:01:74:5f:0c:60:c1:30:1b:e8:6d:37:67:9e:e1:
28:12:98:3d:7f:45:aa:f6:ee:64:b5:f1:ea:17:81:cd:9f:d7:
6c:85:be:ab:cd:4f:45:b1:95:e6:52:f0:dc:1f:65:d1:ae:c4:
2e:bb:1a:cf:ed:da:8e:ee:c3:19:bd:ef:42:65:6d:a0:f8:fe:
23:3f:3f:50:ad:d9:7d:f6:bf:a5:1d:af:f6:70:dc:b3:d7:dd:
90:39:92:25:99:27:05:90:87:f9:41:8e:99:6f:2f:05:ed:0c:
ad:47:4b:11:8c:4a:3f:9f:33:20:f2:26:1c:57:7e:e5:e2:da:
f0:fe:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:14 2024 by rpki-client on console-ams.rpki-client.org