Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/7KG1i6HhipfiUSN-iJ_fgXN8VS4.roa
File: 7KG1i6HhipfiUSN-iJ_fgXN8VS4.roa (raw, json)
Hash identifier: Ny0cobUXWfwfFU5ITUq4JVmHQKYznGuRSpPFgUvPstk=
Subject key identifier: EC:A1:B5:8B:A1:E1:8A:97:E2:51:23:7E:88:9F:DF:81:73:7C:55:2E
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 43472800
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/7KG1i6HhipfiUSN-iJ_fgXN8VS4.roa
Signing time: Sat 01 Jan 2022 07:59:55 +0000
ROA not before: Sat 01 Jan 2022 07:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42455
IP address blocks: 37.235.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128736768 (0x43472800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eca1b58ba1e18a97e251237e889fdf81737c552e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:46:de:a9:1d:e5:81:1e:1f:39:4d:5c:f9:
d4:9f:87:cf:e7:28:68:ee:b6:38:48:45:4a:30:a2:
d0:89:12:5b:a0:5b:2b:54:c3:b8:0c:fe:e3:02:7e:
d9:ea:6d:28:89:0d:8a:58:7a:15:4c:dc:9a:95:d8:
ad:20:ef:4e:c0:dc:e1:75:c8:d9:0a:57:60:01:e9:
f5:48:44:cb:4c:0c:f0:ab:b8:79:d1:26:5f:be:fc:
3d:b2:52:e6:c8:48:8d:5e:16:dd:8e:a5:9a:5b:0c:
19:06:2d:d9:ca:37:fc:21:be:35:49:6e:1e:a5:c0:
40:f1:21:26:0e:fd:43:4d:ed:0c:5d:4c:e9:9d:3e:
0c:0c:fb:f8:90:c3:80:4d:c2:ce:11:13:73:17:7f:
ef:65:aa:38:18:94:e4:8a:c4:82:3b:28:9d:7d:b0:
bf:f7:6f:8a:8f:de:11:5d:29:2c:c4:67:83:f2:3e:
f2:5f:2d:1d:5a:6f:64:c3:9a:c8:ec:e4:21:02:7e:
e3:8a:73:aa:c7:52:d0:e1:e4:05:17:47:7f:c7:63:
ae:03:74:c7:d7:5d:5a:89:f4:5a:31:aa:6e:a2:9f:
de:de:2b:3c:3b:c0:f1:64:99:d3:f6:b3:15:ea:3b:
73:df:b3:11:8e:2e:ff:ea:b7:01:0a:96:ab:c8:86:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A1:B5:8B:A1:E1:8A:97:E2:51:23:7E:88:9F:DF:81:73:7C:55:2E
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/7KG1i6HhipfiUSN-iJ_fgXN8VS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:62:c0:d7:fd:98:bb:d8:42:42:aa:b8:c5:3c:21:20:28:b8:
15:ff:11:d1:70:57:6e:80:23:60:bf:ba:25:d1:5d:69:84:33:
5c:95:ec:80:cc:6f:76:b9:33:82:36:1f:84:36:7d:74:d9:78:
1a:81:7e:01:71:ff:39:4b:02:49:30:de:b9:39:ff:1c:c3:4d:
3b:0f:87:49:39:36:f5:0c:7a:32:17:2b:09:06:a5:a1:76:38:
3a:db:8a:43:90:ab:a9:b5:be:85:a6:5e:e4:bf:43:c2:48:66:
cb:dc:b0:6d:dc:a4:28:4c:b1:6e:16:c4:f0:31:41:88:7c:65:
45:9e:78:46:6d:24:84:e1:8b:74:69:ce:28:02:4e:5f:df:2a:
c3:69:68:d5:e1:e5:63:ef:8e:3c:31:9c:62:56:ad:94:9b:d4:
59:1f:4d:5b:44:86:5e:8f:05:dc:32:c7:92:37:05:e7:af:a3:
d0:e4:01:7e:68:dd:3e:ea:30:d2:df:84:09:4e:2d:4a:4d:ff:
ec:f5:d7:db:94:04:dc:5f:82:7c:45:fa:fb:1c:6e:8f:9f:ba:
e2:14:db:c7:67:a8:57:38:85:d5:ad:aa:4e:d9:0c:10:c2:01:
83:bf:ee:00:ea:97:d2:54:d5:05:dc:85:01:aa:75:01:c2:26:
0f:13:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org