Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0l_aLHa62DGqXVmPQXRCnBD8hgc.roa
File: 0l_aLHa62DGqXVmPQXRCnBD8hgc.roa (raw, json)
Hash identifier: 6fZOuBliuRR1ven8Z3dufV77mpD/YXWAZzvNDCJY/kM=
Subject key identifier: D2:5F:DA:2C:76:BA:D8:31:AA:5D:59:8F:41:74:42:9C:10:FC:86:07
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 48599279
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0l_aLHa62DGqXVmPQXRCnBD8hgc.roa
Signing time: Sat 01 Jan 2022 03:00:20 +0000
ROA not before: Sat 01 Jan 2022 03:00:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 37.9.43.0/24 maxlen: 24
91.243.88.0/24 maxlen: 24
91.243.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213829753 (0x48599279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d25fda2c76bad831aa5d598f4174429c10fc8607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:8b:4f:50:27:22:4f:29:f1:96:85:29:bb:
27:52:0b:a3:16:0e:d1:67:27:e5:00:ca:21:c4:55:
1d:f0:e5:ec:e7:07:2f:b7:b5:d9:fd:56:b5:30:a6:
66:70:95:57:de:13:d8:36:4b:2a:2a:13:73:ec:2d:
5b:1c:e8:34:19:90:e2:78:0b:c7:f4:99:49:a9:69:
67:33:bf:80:bf:bb:e4:8f:ba:c0:a5:e3:72:75:94:
14:57:ed:2f:6a:22:78:a0:32:32:9e:f3:7a:34:1c:
91:d2:df:c6:f4:5d:cf:91:40:a3:e3:a3:70:9e:98:
b6:2b:c4:31:b7:da:11:b7:8d:7a:b2:85:58:dd:6f:
f1:f4:e7:2b:d2:b7:5a:83:2c:38:24:1d:01:5f:1d:
0c:f2:d4:e1:3a:54:04:9b:58:9f:8f:03:3e:e3:d0:
aa:01:fe:6d:98:d4:4c:12:92:eb:59:d2:87:07:0e:
b4:73:d2:ac:31:ea:f2:2b:69:c2:53:53:82:77:33:
14:59:3e:23:1d:4b:cb:b8:ae:b8:bf:4c:2d:e9:fa:
e1:b6:9d:61:50:6b:a4:62:8d:0d:4a:e3:f3:06:75:
c2:23:47:f0:31:12:e3:34:dc:39:81:24:b9:0a:5f:
30:a5:b4:c5:75:24:95:3b:ca:1e:ba:ea:4b:dd:53:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5F:DA:2C:76:BA:D8:31:AA:5D:59:8F:41:74:42:9C:10:FC:86:07
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0l_aLHa62DGqXVmPQXRCnBD8hgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.43.0/24
91.243.88.0/24
91.243.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:aa:31:d5:f2:31:46:6d:9d:e6:fd:55:ec:7b:8a:88:98:14:
e2:90:6d:09:10:d4:9b:ec:22:3a:21:ad:7c:3a:e8:3f:8a:9e:
c5:1b:8f:7e:81:b8:84:35:f7:2d:d8:38:84:76:96:9b:c5:d1:
11:ae:4e:99:91:2e:94:fe:6c:18:9d:f5:6d:00:52:78:ab:07:
a9:23:38:de:1f:44:87:95:ea:43:13:43:74:1e:51:83:5e:56:
83:7f:cc:61:ca:e5:7a:c9:fb:44:2f:df:54:7f:c1:89:66:9f:
fd:d7:10:9b:17:d3:85:32:3b:f2:a6:d5:b9:31:78:ae:20:f3:
22:ea:6d:d0:5e:a4:3c:41:e3:27:47:d8:37:21:98:3e:32:8f:
e3:4e:e2:dd:2f:1c:d5:35:ce:5a:7e:42:76:87:97:e7:3f:a0:
1a:e6:c3:b8:ef:db:2f:1d:0c:78:25:c9:a3:d1:84:28:c9:be:
e8:56:45:9a:5c:19:cc:89:45:d1:9f:a2:4e:ca:8b:2c:58:7c:
f3:c5:54:8f:92:7f:a2:fc:e8:26:6c:f5:f7:91:e3:d4:ab:b8:
b6:ef:f9:2d:a5:4c:e9:d1:b9:96:42:53:0e:91:79:b3:5b:b3:
14:32:45:0e:6d:54:50:f5:3d:3b:41:09:1b:a2:27:8d:99:a7:
f1:06:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org