Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/8e3YH8g4zUKtdFFJbw8QYAFfDJA.roa
File: 8e3YH8g4zUKtdFFJbw8QYAFfDJA.roa (raw, json)
Hash identifier: bZ4+bvqOgl68CalsCabE/zRrabHCZ8YAMOcnfo36a2M=
Subject key identifier: F1:ED:D8:1F:C8:38:CD:42:AD:74:51:49:6F:0F:10:60:01:5F:0C:90
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0156C58B
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/8e3YH8g4zUKtdFFJbw8QYAFfDJA.roa
Signing time: Sat 01 Jan 2022 05:05:19 +0000
ROA not before: Sat 01 Jan 2022 05:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.140.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22463883 (0x156c58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 1 05:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1edd81fc838cd42ad7451496f0f1060015f0c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:a2:47:79:94:e1:fd:be:30:5b:1c:3b:de:
83:a1:b0:31:63:b6:cb:d9:b9:d9:02:86:6b:39:80:
66:9f:a9:ce:af:7f:c1:5b:b2:f1:75:a9:be:c2:dd:
3f:aa:11:0c:3a:88:1e:51:bb:c3:d8:98:5d:08:5e:
b2:9e:2c:67:23:5c:dc:6e:5e:f0:df:51:93:80:a4:
87:7a:45:33:6a:38:12:73:9c:70:8a:72:68:27:90:
1e:33:b8:1d:db:9f:15:a9:d1:34:6f:cd:db:2f:20:
1a:f8:82:92:1c:3b:de:f2:da:f9:31:7e:92:1d:82:
fd:49:cf:be:da:ee:77:fc:77:9a:40:fb:f4:04:59:
4f:d0:ea:c7:f0:d2:f3:e6:e6:2c:5a:d4:2d:53:56:
7a:5c:37:e2:3e:30:b6:c8:f8:ee:48:38:e3:e8:bf:
ba:9a:c9:28:50:75:e5:3e:a6:21:31:ea:db:4c:b3:
b9:13:41:87:a0:b8:d8:c7:30:9a:d7:39:67:d2:2c:
5d:54:b6:cc:93:3a:f6:d5:2c:66:9d:60:49:f1:78:
62:31:4c:bf:ef:ec:81:c0:33:66:c8:87:30:01:cf:
6f:ad:7a:69:03:26:e6:cd:bf:36:61:55:56:d9:1a:
6e:5a:1b:21:1e:ab:92:6b:78:d5:66:b3:6e:c3:c5:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:ED:D8:1F:C8:38:CD:42:AD:74:51:49:6F:0F:10:60:01:5F:0C:90
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/8e3YH8g4zUKtdFFJbw8QYAFfDJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e2:fe:01:61:63:3d:e5:0a:dd:4c:5c:b1:b4:39:cb:0d:df:
4f:50:0e:08:1b:22:d2:03:70:8c:b1:e5:46:84:b8:32:22:24:
d8:f5:d2:b8:49:18:49:b1:9c:5f:b6:5e:c5:60:a1:ee:a7:8d:
44:d9:18:ea:8d:21:90:81:ef:c5:cd:00:22:49:f0:e0:f3:4d:
e8:e7:bd:b6:c9:21:ce:ed:8a:f6:a4:d5:c0:0d:2b:e9:a1:cb:
11:10:10:75:de:03:f0:99:83:62:0b:64:5a:12:9b:65:ab:19:
9c:2b:c2:e8:9e:20:e0:d2:62:60:13:15:0f:d6:73:0d:3e:46:
eb:32:e8:47:f3:d4:96:d1:3d:6f:96:7b:6f:09:51:76:b0:be:
ea:fa:ec:4c:51:41:3a:f9:89:24:23:d1:9d:8d:cb:0f:92:07:
0b:ba:7d:09:54:54:34:0c:08:af:bf:15:6d:ea:26:29:88:5f:
7e:15:28:6c:f8:d1:0a:f7:11:b3:db:ff:6e:18:22:1f:15:45:
44:26:4e:7d:d4:c0:a3:17:c0:f7:3c:c6:e5:56:8c:b7:d4:8b:
33:c2:62:7f:04:8a:11:9b:af:36:b4:9d:9d:e8:41:c0:42:ac:
a4:87:5f:5a:5b:28:8e:20:ea:a4:bd:a1:52:5d:70:1a:eb:bf:
ea:b3:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org