Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGSBOK5uEoy7vBjRJ7s8DXtKl2Q.roa
File: AGSBOK5uEoy7vBjRJ7s8DXtKl2Q.roa (raw, json)
Hash identifier: fbxWAXJJvv+jut8C7cOYDy6OZjOcHPljh+r7JPnKpLw=
Subject key identifier: 00:64:81:38:AE:6E:12:8C:BB:BC:18:D1:27:BB:3C:0D:7B:4A:97:64
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 487B9F58
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGSBOK5uEoy7vBjRJ7s8DXtKl2Q.roa
Signing time: Sat 01 Jan 2022 03:00:40 +0000
ROA not before: Sat 01 Jan 2022 03:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205454
IP address blocks: 37.139.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216061272 (0x487b9f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00648138ae6e128cbbbc18d127bb3c0d7b4a9764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:18:a4:b0:73:7a:3c:04:da:99:9e:75:b4:
d1:cc:5a:a5:f6:c3:03:0e:8e:5d:af:f9:e1:c4:9f:
77:5a:30:87:18:76:bf:d2:f6:69:f4:01:21:e4:28:
bc:a9:d7:54:fd:39:db:d4:be:9f:59:a8:76:7d:78:
6a:ab:fc:a0:23:ba:17:28:df:5d:5a:22:31:b7:ea:
7c:6d:3c:6d:5f:a6:d1:13:9c:0d:24:c9:b3:e3:2d:
c3:02:6f:1b:76:d4:fe:cd:3c:51:3b:c0:15:b3:47:
a4:a1:9f:40:f0:64:d8:a0:2e:9d:b8:0e:8c:c2:06:
2c:eb:8a:69:9c:25:e6:7e:5c:7c:6e:c5:d7:64:c5:
c3:a0:98:2a:29:d6:8c:71:75:ce:4a:b7:02:37:05:
a3:fa:52:46:8a:1a:d2:2d:32:b9:8d:76:39:a9:eb:
33:4d:80:14:38:76:e8:3e:56:9f:aa:42:a0:85:a0:
0b:82:d3:7d:df:75:69:a4:c1:4f:2a:d4:56:8c:50:
55:0a:b9:54:91:50:ec:46:2e:7b:50:a3:ef:c1:d3:
07:44:54:83:8b:17:37:7e:95:15:33:88:ad:2f:ba:
92:98:5f:09:71:56:36:fd:cc:97:7d:9c:17:cb:33:
32:ad:79:78:0f:50:bf:a8:47:70:6e:96:c4:26:51:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:81:38:AE:6E:12:8C:BB:BC:18:D1:27:BB:3C:0D:7B:4A:97:64
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/AGSBOK5uEoy7vBjRJ7s8DXtKl2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:29:00:d3:f2:70:42:cb:46:ce:db:63:12:17:3c:43:1d:81:
70:f7:f4:c9:07:76:ad:92:4c:9c:0d:92:32:3f:bf:6c:cb:fc:
ce:b4:c1:26:1e:84:08:8d:4e:c5:6a:65:e1:12:07:8f:cf:86:
86:c7:d9:22:23:28:5a:78:f7:f2:64:3b:8b:8a:46:16:06:bb:
01:2d:5c:83:62:33:6e:2f:bc:90:2d:cf:f8:0c:bb:a5:cd:14:
b5:42:5f:91:59:ea:bf:40:af:42:58:2e:23:bd:f9:bf:a0:06:
36:f2:40:84:5a:89:fd:e7:54:65:a9:63:8f:f1:78:65:6f:74:
42:7f:55:d8:38:5f:25:ab:ab:a9:54:10:6a:8c:44:d3:45:22:
3a:7c:a4:45:c9:91:62:03:86:49:ef:ac:6d:42:3f:3b:fd:3d:
49:5d:61:9e:e1:d9:3f:72:10:26:fc:57:6b:12:a6:48:54:79:
2f:8c:8e:da:11:86:e8:b4:c6:4e:cb:ab:f4:2a:e5:05:ba:37:
b0:64:cd:0f:92:28:94:7a:6b:d7:eb:e4:0f:5a:de:a1:4c:11:
6d:37:b7:26:4b:00:93:d4:aa:3b:f0:bb:42:c2:88:16:48:1f:
61:ed:84:67:ea:49:78:5b:aa:47:59:1a:34:f8:10:db:dd:76:
67:f5:57:0a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIESHufWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMB4XDTIyMDEw
MTAzMDA0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDA2NDgxMzhhZTZl
MTI4Y2JiYmMxOGQxMjdiYjNjMGQ3YjRhOTc2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvJGKSwc3o8BNqZnnW00cxapfbDAw6OXa/54cSfd1owhxh2
v9L2afQBIeQovKnXVP0529S+n1modn14aqv8oCO6FyjfXVoiMbfqfG08bV+m0ROc
DSTJs+MtwwJvG3bU/s08UTvAFbNHpKGfQPBk2KAunbgOjMIGLOuKaZwl5n5cfG7F
12TFw6CYKinWjHF1zkq3AjcFo/pSRooa0i0yuY12OanrM02AFDh26D5Wn6pCoIWg
C4LTfd91aaTBTyrUVoxQVQq5VJFQ7EYue1Cj78HTB0RUg4sXN36VFTOIrS+6kphf
CXFWNv3Ml32cF8szMq15eA9Qv6hHcG6WxCZRMFECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQAZIE4rm4SjLu8GNEnuzwNe0qXZDAfBgNVHSMEGDAWgBTqqooKX9/WmOEE
vjairuyBOuygcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8x
L0FHU0JPSzV1RW95N3ZCalJKN3M4RFh0S2wyUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBq
aEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWLMjANBgkqhkiG9w0BAQsFAAOC
AQEAaykA0/JwQstGzttjEhc8Qx2BcPf0yQd2rZJMnA2SMj+/bMv8zrTBJh6ECI1O
xWpl4RIHj8+GhsfZIiMoWnj38mQ7i4pGFga7AS1cg2Izbi+8kC3P+Ay7pc0UtUJf
kVnqv0CvQlguI735v6AGNvJAhFqJ/edUZaljj/F4ZW90Qn9V2DhfJaurqVQQaoxE
00UiOnykRcmRYgOGSe+sbUI/O/09SV1hnuHZP3IQJvxXaxKmSFR5L4yO2hGG6LTG
Tsur9CrlBbo3sGTND5IolHpr1+vkD1reoUwRbTe3JksAk9SqO/C7QsKIFkgfYe2E
Z+pJeFuqR1kaNPgQ2912Z/VXCg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org