Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/1-H8YnHywTnkCx0nnlLVrP88efYI.roa
File: 1-H8YnHywTnkCx0nnlLVrP88efYI.roa (raw, json)
Hash identifier: nWEVqEIdyCF6VKya1isCRy4VjhVnc45Ja6e00eMCoUk=
Subject key identifier: F8:7F:18:9C:7C:B0:4E:79:02:C7:49:E7:94:B5:6B:3F:CF:1E:7D:82
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 0182649BB881737A4B14E7D756FC5CA7F678
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/1-H8YnHywTnkCx0nnlLVrP88efYI.roa
Signing time: Wed 03 Aug 2022 16:48:23 +0000
ROA not before: Wed 03 Aug 2022 16:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208673
IP address blocks: 37.49.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:9b:b8:81:73:7a:4b:14:e7:d7:56:fc:5c:a7:f6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Aug 3 16:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f87f189c7cb04e7902c749e794b56b3fcf1e7d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:fd:b7:8a:1e:80:d2:d0:fe:1f:de:d9:67:
a0:93:c3:75:ce:9e:92:1e:1a:a3:1b:13:9b:2c:16:
06:e7:72:61:d7:22:7e:c4:08:a5:f3:0d:28:95:26:
4a:33:7a:e9:a7:cd:b8:f0:e6:a9:32:75:9d:36:f1:
88:3b:23:1a:1f:4a:ab:69:68:cd:7e:c1:b3:e7:74:
c7:c9:c6:a6:4b:27:96:72:5f:b0:2b:ed:78:14:70:
ec:bd:a4:a7:4a:5e:66:f4:d3:85:8f:c3:c4:20:ee:
54:68:82:64:1b:c8:1e:04:e0:87:4c:c8:8b:86:92:
ef:b3:b0:3c:8d:ac:1e:dc:58:ee:44:d7:04:25:87:
80:e3:08:ba:aa:20:98:35:3f:69:46:95:a5:9d:dc:
37:9b:ad:ba:50:3d:c7:4e:29:ef:63:02:b7:9a:17:
11:07:83:33:97:5c:94:ae:01:49:b6:a7:98:bf:db:
3f:f5:60:86:7b:19:44:1f:90:af:b6:08:38:0d:af:
76:f8:4e:83:10:4c:95:b6:10:4f:db:ff:e1:a7:3f:
8f:c9:0b:f0:67:82:8b:5a:96:e7:e6:60:58:c1:a7:
c5:03:17:3f:76:18:95:20:f9:31:18:e0:9d:0e:28:
e7:58:86:ea:84:eb:20:29:88:01:08:c0:d7:1a:61:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:18:9C:7C:B0:4E:79:02:C7:49:E7:94:B5:6B:3F:CF:1E:7D:82
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/1-H8YnHywTnkCx0nnlLVrP88efYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9d:53:41:09:72:e8:ca:6d:96:80:cc:ce:5f:03:71:13:a6:
a9:b9:af:7c:c0:2e:11:c7:ac:b9:e4:eb:d5:1b:55:71:bd:23:
36:53:98:16:c9:1b:30:d5:90:15:9b:62:7a:4c:81:e7:a1:49:
d5:27:0f:f7:3c:de:ef:d1:11:c5:2f:92:23:3a:e2:cc:6d:f7:
a3:f8:41:b0:42:63:14:50:8a:31:7b:5b:44:db:2c:0f:8a:e9:
48:77:55:97:0e:ed:18:b4:99:62:76:22:c4:d5:73:92:bb:6c:
f0:fc:7d:ea:9e:02:a6:15:e2:29:a3:66:b2:ae:13:57:5d:f6:
d6:0a:86:7e:f5:dd:40:c2:51:15:ae:26:1a:eb:8a:7b:23:d1:
8f:db:f6:4c:4c:b1:14:38:2b:a5:71:20:8f:59:21:f2:6d:08:
7f:83:5b:ec:5c:1d:ee:9a:65:46:93:83:13:60:ae:9f:f6:80:
63:ff:31:3d:d2:ee:ed:68:bb:c2:72:d2:57:0a:75:a8:ad:c0:
20:25:b6:eb:0d:f4:7c:16:c4:0d:58:74:3b:f9:7c:ed:dd:22:
5b:bf:9e:39:32:31:c2:4e:65:14:25:8a:22:c6:08:a4:43:c4:
4a:0a:44:ec:c3:e1:61:f6:28:24:ad:fc:d7:15:2c:03:79:c2:
d1:a6:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:39 2024 by rpki-client on console-fra.rpki-client.org