Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CG4NHUSoxit6f6r-s6Mwgv8wdkU.roa
File: CG4NHUSoxit6f6r-s6Mwgv8wdkU.roa (raw, json)
Hash identifier: BOx6+AUb6SgjUFTHJXCZ6sa4xHDB6yeFr1sOXDIPtvw=
Subject key identifier: 08:6E:0D:1D:44:A8:C6:2B:7A:7F:AA:FE:B3:A3:30:82:FF:30:76:45
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 486E03C6
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CG4NHUSoxit6f6r-s6Mwgv8wdkU.roa
Signing time: Sat 01 Jan 2022 03:00:32 +0000
ROA not before: Sat 01 Jan 2022 03:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56534
IP address blocks: 37.139.44.0/22 maxlen: 22
37.139.44.0/24 maxlen: 24
37.139.39.0/24 maxlen: 24
37.139.45.0/24 maxlen: 24
37.139.46.0/24 maxlen: 24
37.139.36.0/22 maxlen: 22
37.139.36.0/24 maxlen: 24
37.139.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215169478 (0x486e03c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=086e0d1d44a8c62b7a7faafeb3a33082ff307645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:4f:db:a0:cb:02:a1:4b:be:1a:42:2a:fd:
dc:89:aa:8c:41:e4:62:c6:a6:28:94:13:3e:da:43:
fd:8d:af:23:e2:6f:6b:98:a2:e4:1c:f6:9b:2a:17:
99:eb:e0:6c:d2:7b:9d:b1:ad:0d:05:c0:63:6c:fe:
37:a7:5d:fe:1c:cd:f3:b0:77:7b:a5:92:25:da:30:
ad:da:37:68:f0:ff:96:64:b9:79:31:dc:39:ea:47:
69:c4:9d:5d:fd:fa:d3:7f:80:72:b8:29:22:a4:d3:
a5:53:43:2d:e3:46:58:b2:a5:c0:87:6b:8b:d1:f9:
45:b5:73:79:4a:cd:08:b0:32:af:7e:2a:88:d6:e9:
e0:59:f8:8c:7b:6e:69:e2:44:42:f7:00:72:7f:3e:
4b:c8:e9:1c:b2:e6:81:7a:a6:b8:8b:65:38:ba:74:
e5:5d:00:50:c7:66:f7:99:b0:49:31:0e:78:57:e4:
17:89:cd:50:f2:e2:48:24:6b:5e:c3:3a:a8:02:c1:
e0:0a:56:5a:8c:26:b9:55:61:22:5b:60:8a:b7:70:
8d:91:b1:bc:af:c8:75:35:f5:8b:ea:5e:3b:e7:4b:
56:91:20:75:e3:06:5e:2d:4a:f5:e2:d7:ae:ca:0e:
9a:7f:b3:6d:2a:a4:ca:18:2f:25:d0:5a:4e:a7:68:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:0D:1D:44:A8:C6:2B:7A:7F:AA:FE:B3:A3:30:82:FF:30:76:45
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CG4NHUSoxit6f6r-s6Mwgv8wdkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.36.0/22
37.139.44.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:35:f3:2d:12:a1:13:e0:6e:52:4c:ff:93:7f:86:b6:0d:b8:
93:3a:12:98:76:3a:89:a1:ee:85:21:37:27:0e:ee:9e:a5:d6:
ee:3a:b7:bd:ba:90:a1:5d:df:63:ed:ef:3b:90:8f:21:f8:1b:
5f:e8:7d:5f:d0:8c:34:6c:ae:8d:00:ed:0a:fa:74:62:ec:e3:
88:90:6d:ba:81:19:72:66:5c:99:1d:7f:0f:58:f5:c4:d2:83:
1d:c6:d5:4e:da:6e:9f:bf:04:f5:9c:29:c1:44:bb:a7:4c:2e:
49:e6:81:d7:30:0a:f0:57:4e:96:e5:23:f7:d1:ca:0b:28:90:
58:5c:9d:12:05:ea:51:80:55:bc:ce:bd:48:76:11:6a:73:b4:
4a:e6:75:1c:8c:02:f2:a7:4c:68:7c:90:cf:86:3e:21:6d:d6:
03:bd:16:0f:a3:28:b6:25:bd:92:91:18:59:71:a0:48:b8:a2:
1a:b8:2b:95:90:6e:7f:6b:7c:30:75:6b:cf:0c:2f:1c:c1:7b:
84:c1:26:27:8f:7b:c8:05:49:5c:f6:fd:0c:90:db:a1:63:20:
59:f4:f2:77:7b:f1:c3:14:df:a4:e2:7c:e7:7d:ba:9e:60:f0:
b7:99:e8:e1:4b:96:31:20:9a:10:f3:b8:4e:73:7c:de:92:0d:
29:a6:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org