Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/aGjJFJSup1qnPwxTVWyjPq9LmV0.roa
File: aGjJFJSup1qnPwxTVWyjPq9LmV0.roa (raw, json)
Hash identifier: 4I5hbRYQDi13sHBckSV8upUbw4A1D/q3CgZHJ/GjKU4=
Subject key identifier: 68:68:C9:14:94:AE:A7:5A:A7:3F:0C:53:55:6C:A3:3E:AF:4B:99:5D
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 4340A7E6
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/aGjJFJSup1qnPwxTVWyjPq9LmV0.roa
Signing time: Sat 01 Jan 2022 07:59:51 +0000
ROA not before: Sat 01 Jan 2022 07:59:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28099
IP address blocks: 37.235.52.0/24 maxlen: 24
2a03:f80:56::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128310758 (0x4340a7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6868c91494aea75aa73f0c53556ca33eaf4b995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:e4:f7:a5:90:95:3e:f9:ad:ba:cf:6e:ed:
ba:92:8c:e4:ae:a4:fe:94:79:1c:dc:23:5d:dd:eb:
c5:d5:3b:30:6e:35:dd:70:1d:7b:14:5a:16:ee:5b:
24:b0:3c:b6:4c:8a:fb:f7:b8:87:a0:e1:3e:c1:e4:
94:55:38:4d:83:95:08:56:91:30:df:53:e6:f6:47:
4b:f8:4d:9b:64:9a:56:36:c2:d8:75:b3:cf:30:3d:
24:e6:c6:38:9b:6b:d0:d0:e4:24:5d:97:13:61:bb:
91:b4:8b:20:ae:0d:20:2f:5b:60:20:53:93:56:1b:
77:af:75:5c:be:37:f7:da:27:8a:d4:8b:96:41:52:
b7:6e:9f:ff:0b:a1:2a:0c:ed:09:f8:3e:cc:93:f2:
ca:62:fb:bd:7f:37:80:02:d0:77:68:55:52:2b:8c:
24:d6:d5:b5:39:53:5c:19:89:de:12:1d:ae:03:89:
bd:e3:a3:b3:dd:39:2b:55:73:6b:45:21:7f:2b:67:
3f:c6:75:27:50:15:0d:5a:4d:45:07:16:c5:c5:a3:
aa:52:8e:19:f3:3d:ae:59:e2:7e:4f:fa:c5:26:11:
10:36:19:90:18:62:77:de:d3:bb:bc:bf:4a:71:3f:
5b:7b:67:c9:d6:6d:5f:00:42:26:84:21:c1:bd:94:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:C9:14:94:AE:A7:5A:A7:3F:0C:53:55:6C:A3:3E:AF:4B:99:5D
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/aGjJFJSup1qnPwxTVWyjPq9LmV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.52.0/24
IPv6:
2a03:f80:56::/48
Signature Algorithm: sha256WithRSAEncryption
bb:9f:65:94:4e:ea:7b:3a:f8:63:fd:cd:c9:34:7d:04:65:f4:
e3:5e:bd:c2:08:3c:7f:ff:fe:f7:1d:83:74:75:a3:41:d9:5a:
4b:27:f5:07:24:a7:04:e8:8d:de:0b:0e:05:ce:14:36:46:22:
5f:04:45:06:cf:d4:78:b4:9c:ba:78:b7:67:3c:79:f7:df:6d:
ea:25:4c:d8:b8:7d:59:95:01:af:ea:bd:83:f8:5f:f1:ad:03:
b9:aa:b4:6f:97:a2:40:7f:03:63:a9:80:7b:5e:88:83:08:b6:
3d:df:07:1c:f5:cb:45:65:ac:89:e9:e3:2c:2b:51:2b:e6:12:
ae:31:1e:63:f0:ef:de:b6:fe:5f:91:e4:89:45:a5:20:a1:63:
58:bb:13:72:4f:ce:38:0a:1e:af:3b:f0:65:34:4f:d6:39:08:
57:09:70:bf:2d:dd:2d:cf:5f:4b:43:65:ca:08:78:c1:67:28:
81:44:15:26:09:b1:4d:de:84:8f:86:69:22:5f:56:77:56:07:
2c:fe:28:55:37:e5:ae:b5:64:81:1e:af:8f:35:c3:96:5f:b3:
f5:cd:14:1e:6d:7f:d1:13:f6:e1:2c:79:af:28:f4:2d:e7:58:
7b:d4:39:0d:dd:ea:05:03:a8:12:cf:fd:fb:ea:66:48:a8:e1:
98:fa:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org