Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/au6_4D9LWfM9Tl4n7aD8uEtDxoA.roa
File: au6_4D9LWfM9Tl4n7aD8uEtDxoA.roa (raw, json)
Hash identifier: cacxgzAx6NOpJnXnkJ/ZBRq/VTHI1e+qkeslOjr5+GE=
Subject key identifier: 6A:EE:BF:E0:3F:4B:59:F3:3D:4E:5E:27:ED:A0:FC:B8:4B:43:C6:80
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0DA3C561
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/au6_4D9LWfM9Tl4n7aD8uEtDxoA.roa
Signing time: Sat 01 Jan 2022 04:59:51 +0000
ROA not before: Sat 01 Jan 2022 04:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211612
IP address blocks: 37.19.204.0/24 maxlen: 24
37.19.219.0/24 maxlen: 24
2a02:6ea0:e400::/40 maxlen: 40
2a02:6ea0:e500::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228836705 (0xda3c561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Jan 1 04:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6aeebfe03f4b59f33d4e5e27eda0fcb84b43c680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:7a:57:b6:74:2b:eb:f0:30:29:93:e8:47:
08:fd:71:da:71:6e:2d:18:aa:65:d7:e9:d3:c5:97:
9b:a9:87:ff:c7:ab:70:75:8f:08:35:46:95:4a:af:
38:5a:1c:f5:1c:24:a5:63:22:7b:40:cd:5b:18:f6:
34:21:9e:8d:18:1d:6f:93:af:d3:14:50:b1:67:29:
80:f2:bb:dd:4f:8d:70:6b:51:31:5b:44:37:d7:f5:
75:4d:ea:92:7c:fd:8d:68:57:82:be:07:29:ca:f9:
64:23:3e:b7:b8:c6:16:b7:a7:f3:32:90:95:a7:71:
98:c0:d8:36:1c:47:1a:f0:c0:6a:f0:16:33:d9:16:
01:97:6a:2e:42:4f:1c:18:c9:03:b0:85:20:35:f0:
49:fe:67:f4:29:63:28:d1:c1:e0:b9:36:a9:50:59:
28:e5:39:81:d4:09:e1:55:51:61:ea:b4:62:ed:86:
b7:38:42:57:5d:17:87:63:62:5e:b6:75:c1:e1:53:
3f:9e:9a:ca:37:ae:f0:f6:72:ca:9c:d8:65:ae:7c:
3b:eb:99:99:79:0c:90:5a:5e:16:9f:8d:08:e9:06:
23:45:ce:8e:fa:22:2a:91:c0:eb:95:0d:63:6e:f0:
da:87:66:ef:7f:b8:d5:3c:b9:99:f4:ec:ad:54:10:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:BF:E0:3F:4B:59:F3:3D:4E:5E:27:ED:A0:FC:B8:4B:43:C6:80
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/au6_4D9LWfM9Tl4n7aD8uEtDxoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.204.0/24
37.19.219.0/24
IPv6:
2a02:6ea0:e400::/39
Signature Algorithm: sha256WithRSAEncryption
37:da:9f:e4:d8:58:8c:88:fd:3a:e3:f3:eb:9e:02:1a:9d:ac:
43:64:41:01:87:f9:8b:5f:8a:37:9b:35:87:8d:ce:ba:34:72:
46:10:0c:79:66:9c:1a:d0:0d:e2:67:d4:4a:a5:99:65:80:c1:
ee:7a:66:8c:12:c9:38:48:17:25:f8:fc:60:7a:83:ed:b3:58:
ea:a0:b5:96:ab:4e:52:16:65:a0:e9:07:fc:4c:67:15:79:a4:
c5:05:b7:b2:f2:0e:bd:b7:f3:4e:f3:9d:d7:6d:bd:73:cd:f2:
ac:98:b6:d2:c9:18:2c:54:e0:e6:21:bc:ac:32:e9:3b:87:93:
8d:30:e9:0a:5d:1d:8c:5f:aa:48:ae:65:f2:36:71:07:83:5c:
ba:09:2c:e0:36:ca:0a:20:73:a2:27:4b:9f:27:7c:08:26:e2:
ec:de:e0:a3:b5:ce:58:4e:16:4a:e3:6b:a1:30:dd:08:15:d8:
f7:ba:61:69:65:5b:1d:08:f4:b2:59:f5:30:24:95:1f:aa:39:
7f:21:4b:78:c9:c3:5d:16:70:94:7e:31:92:3b:63:6d:12:eb:
7f:e0:43:59:24:8c:94:0c:00:b7:9f:a4:7a:8d:2d:88:42:a0:
1b:41:f4:1e:57:68:ff:76:8a:65:a0:c0:30:42:00:3e:4a:b7:
70:f8:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:41 2024 by rpki-client on console-fra.rpki-client.org