Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vRk1g_-0CHRzOy3WiihlmFabsWo.roa
File: vRk1g_-0CHRzOy3WiihlmFabsWo.roa (raw, json)
Hash identifier: 2LyHNEQMR81i0387DX5J3oLCCV9lYeUxcm/5MarhmKc=
Subject key identifier: BD:19:35:83:FF:B4:08:74:73:3B:2D:D6:8A:28:65:98:56:9B:B1:6A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 4298032E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vRk1g_-0CHRzOy3WiihlmFabsWo.roa
Signing time: Sat 01 Jan 2022 06:04:55 +0000
ROA not before: Sat 01 Jan 2022 06:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13056
IP address blocks: 37.76.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117258542 (0x4298032e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd193583ffb40874733b2dd68a286598569bb16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:d2:b7:6b:06:e5:05:9d:dc:d7:37:e7:59:
b0:80:d6:10:e2:1c:46:1e:14:29:6b:f7:aa:45:a4:
f0:21:fd:ab:76:c4:b3:b6:c9:ab:2e:5c:48:da:45:
ff:c3:a2:e6:f4:01:4b:a6:4b:3b:0b:90:e3:ba:b5:
b5:f7:69:85:0c:4d:2a:44:8a:e4:e9:b3:c4:a8:af:
3c:0b:d0:8d:5e:f5:fe:2c:1d:ae:a6:cb:45:e8:bf:
04:0c:16:a1:d1:7a:e9:91:4b:f6:95:e6:a4:53:0a:
6e:de:46:09:cb:a2:df:d0:7a:3a:fa:d0:a7:6a:d9:
7b:43:20:3d:83:cb:7b:1b:51:a5:f8:3f:f1:0f:0f:
6c:c1:58:d0:c4:ad:e8:88:c9:16:63:88:e2:b3:8e:
85:2f:36:97:ea:30:e6:06:da:6d:c9:4b:41:23:ce:
5b:c2:3b:9d:14:77:62:d2:0f:b1:ff:30:4f:2e:61:
d4:ae:b3:7b:50:14:2e:8f:f2:01:f9:3d:32:d0:4f:
28:de:32:f7:66:07:fb:da:31:af:00:85:1c:40:b6:
46:40:61:9c:67:44:da:51:cf:f0:e1:a5:14:29:5a:
da:29:72:6e:5d:4f:51:f0:98:c3:c5:e0:0f:2d:d6:
a7:13:14:42:1a:53:1c:4f:3c:43:83:20:0a:3b:58:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:35:83:FF:B4:08:74:73:3B:2D:D6:8A:28:65:98:56:9B:B1:6A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vRk1g_-0CHRzOy3WiihlmFabsWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.76.160.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:93:31:32:54:55:f9:cf:2b:3d:4a:13:47:ba:ea:c2:b2:9a:
0f:9b:d5:7e:aa:a9:7e:66:6f:cd:02:c3:7b:5e:25:32:07:56:
d7:af:f6:cf:a2:60:4a:28:cb:e3:90:c1:d7:23:d7:56:ab:50:
de:d1:67:0d:3e:a9:10:47:7f:ef:7d:ae:65:92:1d:cf:a2:20:
8e:ef:01:6a:1e:a3:4d:1c:a2:0e:2a:04:0e:09:bf:a4:1a:28:
ac:93:df:6b:d2:d8:eb:62:27:1e:55:ee:e0:13:60:da:94:03:
cb:df:fd:02:99:92:c2:30:d8:19:1d:1f:98:c3:76:ed:27:f6:
1c:73:98:f0:b0:56:1b:c9:d0:4d:62:12:f9:19:1d:a5:a9:f4:
6d:37:23:ae:a9:ed:37:b2:77:a6:06:66:11:0c:bb:ba:e6:c2:
a5:dc:2a:7c:26:a7:0f:a9:f0:d3:a5:8e:c1:5a:32:35:3d:c9:
bf:66:d4:da:72:1f:aa:1f:2b:8b:23:8f:e5:a3:5a:26:bf:99:
f6:ab:4d:60:20:2d:a4:67:ca:23:08:87:60:3c:e9:d3:31:43:
50:5f:29:16:28:08:8a:92:ce:12:86:f4:6f:85:e8:56:88:3b:
0f:25:d3:f4:c6:be:1a:47:9a:0d:70:c5:0b:db:63:f4:05:c8:
00:de:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org