Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/zPIPV90mEqQRMijo5Xcw8Gzb8Ac.roa
File: zPIPV90mEqQRMijo5Xcw8Gzb8Ac.roa (raw, json)
Hash identifier: szLG6iQYMuad9s2SNvNmVrhwZ9tqN2bfyiaHve4B7Cs=
Subject key identifier: CC:F2:0F:57:DD:26:12:A4:11:32:28:E8:E5:77:30:F0:6C:DB:F0:07
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0183697B3EF1D71E16C56BC3347A1C63BA28
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/zPIPV90mEqQRMijo5Xcw8Gzb8Ac.roa
Signing time: Fri 23 Sep 2022 08:33:48 +0000
ROA not before: Fri 23 Sep 2022 08:33:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211612
IP address blocks: 37.19.204.0/24 maxlen: 24
37.19.208.0/24 maxlen: 24
37.19.219.0/24 maxlen: 24
2a02:6ea0:e500::/40 maxlen: 40
2a02:6ea0:e400::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:7b:3e:f1:d7:1e:16:c5:6b:c3:34:7a:1c:63:ba:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Sep 23 08:33:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccf20f57dd2612a4113228e8e57730f06cdbf007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:2a:cc:61:6a:ee:cf:61:c6:59:35:2b:e1:
e3:d6:69:1d:b1:d0:a8:ba:62:67:3d:b4:aa:d8:fc:
6d:37:7f:c7:09:02:ee:93:69:d7:f4:b8:77:18:d7:
b7:b7:97:9d:f0:2b:99:f8:6e:9b:39:c6:c5:89:4e:
d7:3f:de:42:58:f5:da:48:0b:c0:ab:98:94:87:a5:
87:8c:10:7c:01:f6:e4:4a:ea:e4:8d:57:53:27:9f:
b1:1e:c1:7b:a8:da:5b:f8:51:c6:c6:eb:ec:e2:b8:
1f:87:ba:af:7e:05:44:0a:8b:7f:24:c4:82:ec:00:
05:be:a9:3c:d6:fe:d7:91:5b:d8:e7:d0:04:92:0d:
b9:0c:77:a2:08:48:ab:99:49:e2:23:ea:3d:9f:ec:
7c:d2:30:dd:39:1b:fe:6d:be:d5:43:cb:2e:a9:55:
cf:00:32:4e:c3:f7:ab:81:91:2e:cb:20:72:4b:56:
d8:33:b7:48:95:43:b8:c8:fd:7d:e7:29:e8:b7:f7:
68:32:62:51:2a:4e:42:86:40:fc:03:47:31:40:7d:
8e:05:63:5b:2f:d9:05:ae:62:b8:f3:0f:dd:cb:5b:
3a:26:a6:c8:00:03:37:81:e0:bc:a5:b9:19:e3:76:
aa:36:b0:61:04:53:19:9d:45:56:af:8f:2f:bf:c3:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:0F:57:DD:26:12:A4:11:32:28:E8:E5:77:30:F0:6C:DB:F0:07
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/zPIPV90mEqQRMijo5Xcw8Gzb8Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.204.0/24
37.19.208.0/24
37.19.219.0/24
IPv6:
2a02:6ea0:e400::/39
Signature Algorithm: sha256WithRSAEncryption
09:65:f2:a0:36:5c:d6:8a:ff:34:61:df:26:bf:a0:23:61:f9:
4f:b7:2a:2e:d3:77:38:ff:ec:1c:43:9e:73:f7:7e:9e:4b:c3:
ca:02:ef:8d:60:a2:fd:d0:06:dc:4c:cb:f2:e6:24:7b:19:cf:
05:c6:c7:2b:86:19:6f:97:de:54:71:9f:5a:20:5a:80:a3:fd:
f4:32:27:65:f1:4d:d7:99:9c:3e:98:15:aa:bc:af:ca:8a:fd:
75:72:f0:04:05:2a:96:27:25:ec:72:be:1b:2d:1f:c4:f0:38:
f9:f4:e1:a6:da:2e:b3:7a:02:d6:4a:74:bf:dc:81:fc:1a:21:
66:c8:c7:db:9d:83:fb:59:85:2e:1d:43:93:1f:a5:34:10:bd:
3d:a3:77:4c:52:2d:24:8e:15:41:8a:72:e9:ef:53:d9:d3:8b:
cf:e4:76:46:80:0e:64:f7:e1:d4:2d:99:e0:ab:54:ac:4b:62:
e7:1b:89:b4:a6:67:b7:11:69:20:e7:4a:ca:c4:da:96:64:ae:
94:a0:bb:81:65:c5:6a:7e:f2:67:a5:27:a5:05:9f:4b:48:16:
f5:df:85:4f:06:64:91:81:a4:e8:26:28:8d:eb:7a:93:fe:6d:
6b:41:05:44:47:90:54:ff:b5:55:21:7b:5a:11:f4:4a:c9:79:
61:e3:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:42 2024 by rpki-client on console-fra.rpki-client.org