Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/C1WI4nGsaL6F4XoOgMsW91CxuQE.roa
File: C1WI4nGsaL6F4XoOgMsW91CxuQE.roa (raw, json)
Hash identifier: nTVQNwiuWQBG03Eu7CwBn/KQ4uw1PCVmpYEDBRi0ipY=
Subject key identifier: 0B:55:88:E2:71:AC:68:BE:85:E1:7A:0E:80:CB:16:F7:50:B1:B9:01
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 4191AE30
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/C1WI4nGsaL6F4XoOgMsW91CxuQE.roa
Signing time: Sat 01 Jan 2022 11:54:57 +0000
ROA not before: Sat 01 Jan 2022 11:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13037
IP address blocks: 37.252.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100066352 (0x4191ae30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Jan 1 11:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b5588e271ac68be85e17a0e80cb16f750b1b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:b5:53:b2:ca:f6:c0:21:ce:6a:2b:c2:b0:
52:be:bd:35:a5:be:52:59:08:57:7e:00:f2:91:18:
2d:5d:e8:7f:16:3b:6a:ee:3d:8f:d8:df:87:64:82:
93:85:03:55:48:38:a5:5f:d1:8b:f1:e5:26:c8:37:
53:92:b1:0d:1c:97:f4:7a:6a:11:cb:5e:41:de:d9:
22:17:c3:f0:77:81:d9:04:70:c5:9c:61:4a:e8:da:
45:83:26:70:70:56:cb:b1:ad:eb:fc:a7:0f:33:ff:
7b:25:66:37:91:df:7d:b1:b7:1d:80:07:cf:56:b4:
2f:ab:8b:c1:67:09:d3:81:88:99:00:15:cf:0b:c8:
27:3f:7a:0d:64:7b:38:7d:4e:b9:3a:94:e4:1d:70:
71:de:ae:9e:25:e4:a6:cc:26:de:2d:1c:99:26:ab:
ac:b4:62:6e:d2:99:02:81:0d:4f:f7:8b:ad:7a:f8:
8a:73:df:eb:e2:e4:b2:72:d0:7e:41:bd:e0:60:d5:
1f:10:0e:c3:2d:04:60:e5:6e:f4:78:9f:8f:63:a2:
89:7d:95:79:b3:e8:02:0b:d6:29:8b:3e:9c:c5:2b:
44:1f:6e:25:d1:95:6d:e9:ab:5b:16:14:15:a2:fc:
b0:41:9f:c8:f3:05:2d:1e:d2:fc:c4:78:86:d1:f0:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:88:E2:71:AC:68:BE:85:E1:7A:0E:80:CB:16:F7:50:B1:B9:01
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/C1WI4nGsaL6F4XoOgMsW91CxuQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:3f:fd:15:50:54:48:0f:e7:37:4e:b8:25:89:37:c1:ad:60:
88:f0:aa:2e:9d:3f:e9:db:fc:f5:69:06:8f:df:1e:fd:f5:61:
af:06:71:ec:76:09:2b:b5:ea:7f:d4:8e:36:8e:f5:f1:59:42:
74:8f:7f:4d:41:01:7a:bd:bd:af:be:79:43:86:b4:57:ea:09:
bf:ce:00:90:62:8f:39:a6:7b:54:0c:d4:06:4b:7d:f2:99:b9:
d4:38:a7:37:c8:06:91:91:7e:7b:a1:e6:32:3a:2f:7a:36:67:
3a:3f:a1:0d:9c:cb:79:0d:35:6c:b3:07:36:e6:a9:76:cb:43:
51:8a:98:be:68:48:8d:d2:67:17:94:f3:a8:3a:72:bd:61:63:
67:ae:46:d0:75:4a:df:98:04:38:6c:4c:2d:d8:08:12:ec:f4:
7d:ef:e1:1c:78:13:51:3f:09:92:0a:33:3f:4c:9f:4a:ac:6b:
d9:b4:22:97:94:10:6e:81:55:5b:f1:36:6b:47:1b:23:3e:dc:
87:67:87:12:70:52:b9:52:a2:00:83:07:95:05:ef:c3:fc:68:
0e:65:c4:39:f1:af:dc:1d:e7:10:87:36:b9:24:76:c8:f4:7c:
09:4d:32:70:82:01:a3:4d:55:8e:bd:0f:db:08:bb:57:ad:5a:
06:44:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org