Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/efBM_0izjp3H6uwIEA-NWD5HBWQ.roa
File: efBM_0izjp3H6uwIEA-NWD5HBWQ.roa (raw, json)
Hash identifier: 804iOPWK+a5SZU6pb34yeXLl8MZOWYshbwa17npkxyo=
Subject key identifier: 79:F0:4C:FF:48:B3:8E:9D:C7:EA:EC:08:10:0F:8D:58:3E:47:05:64
Certificate issuer: /CN=179d6d74584f8b75803107e5c42ff9ec6915e866
Certificate serial: D9E96D
Authority key identifier: 17:9D:6D:74:58:4F:8B:75:80:31:07:E5:C4:2F:F9:EC:69:15:E8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F51tdFhPi3WAMQflxC_57GkV6GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/efBM_0izjp3H6uwIEA-NWD5HBWQ.roa
Signing time: Sat 01 Jan 2022 09:57:31 +0000
ROA not before: Sat 01 Jan 2022 09:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 37.72.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14281069 (0xd9e96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179d6d74584f8b75803107e5c42ff9ec6915e866
Validity
Not Before: Jan 1 09:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79f04cff48b38e9dc7eaec08100f8d583e470564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:01:a9:8e:f0:26:c5:69:e6:76:92:26:a0:
5a:e4:84:2d:2d:0b:f1:8f:1d:0a:d8:c8:7c:85:1d:
25:07:cc:2a:21:32:f4:bc:93:e9:4b:a6:69:0b:d7:
07:a3:fe:ad:76:8f:fd:da:2f:f4:f0:38:8c:b2:b8:
83:be:8a:b1:51:8e:81:3f:f2:3f:3f:55:61:68:f7:
f9:b0:d2:79:91:ac:9f:1b:b4:ff:f4:ff:d0:e5:17:
d8:85:64:64:a1:e8:53:f7:01:01:58:9b:ed:aa:23:
72:59:d7:69:3f:20:79:00:42:b1:ca:9a:60:54:ef:
ed:4c:3a:6f:02:63:60:23:98:9b:47:a1:71:20:e6:
a1:27:22:9e:30:ef:dd:8d:ef:7b:e3:16:ea:71:90:
02:a3:83:25:ed:66:fd:14:87:71:c2:47:3a:9b:cd:
c7:4c:6c:b1:c5:d4:da:16:b6:3b:4f:e9:aa:ca:a0:
2b:d0:89:48:ef:3c:36:46:70:84:1c:a6:eb:48:99:
15:9c:51:f5:18:45:65:97:65:a2:52:4b:bd:7d:af:
47:ba:4c:15:ac:86:8a:91:1a:8e:ba:98:fa:e9:79:
55:6f:3e:75:a0:5f:de:ad:ba:f0:cd:23:fb:fb:13:
14:c8:c9:eb:24:ef:9a:e9:bf:7c:39:6e:5a:52:6f:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:4C:FF:48:B3:8E:9D:C7:EA:EC:08:10:0F:8D:58:3E:47:05:64
X509v3 Authority Key Identifier:
keyid:17:9D:6D:74:58:4F:8B:75:80:31:07:E5:C4:2F:F9:EC:69:15:E8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F51tdFhPi3WAMQflxC_57GkV6GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/efBM_0izjp3H6uwIEA-NWD5HBWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/92c696-3889-49b4-9e97-c219f41a5cc2/1/F51tdFhPi3WAMQflxC_57GkV6GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.134.0/24
Signature Algorithm: sha256WithRSAEncryption
62:84:76:de:83:31:01:8a:7e:5f:20:c3:72:a1:62:87:27:08:
d2:e1:c2:b3:a0:4c:e0:81:bd:ec:73:f5:ef:e7:d3:fd:6c:38:
be:e2:2c:63:fd:1a:8f:7d:21:58:f4:84:c4:43:ab:7c:c2:9b:
79:ba:aa:18:4d:5f:f6:f9:a4:06:2e:ee:02:ae:e0:50:ce:71:
ff:0f:9f:e9:72:a6:7c:c4:b1:f0:6a:1d:63:ad:0f:d3:e7:da:
eb:ae:0c:a8:f2:db:90:07:93:b8:0b:ba:d2:8d:78:1a:11:d6:
b4:4d:5b:cb:3d:07:9a:69:f7:b9:2d:e9:19:ca:be:47:e7:d7:
58:2a:be:f2:4a:88:5d:d2:d8:32:06:f2:d0:bb:e8:ca:38:7d:
24:4b:b8:60:80:2b:38:0f:32:8a:7a:cb:99:61:13:48:11:69:
7d:29:72:fa:7a:d7:4f:c5:05:1f:a3:b0:e3:10:a3:49:6a:42:
b1:45:56:6a:b6:88:01:71:2f:5f:80:8d:be:7c:32:1b:cd:15:
dc:1e:ee:bb:b3:fb:63:e5:33:b4:02:2f:0f:12:04:83:7f:c6:
75:0b:9f:b1:73:ee:e5:fc:b6:c7:09:f9:11:8b:e2:63:d3:e9:
e5:6e:e6:e9:93:a4:9c:ae:39:3e:da:4c:d6:99:fe:15:97:4a:
0a:9c:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:37 2023 by rpki-client on console-fra.rpki-client.org