Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/ShsbTa8i2wr8odPw8VdvPlLvRg4.roa
File: ShsbTa8i2wr8odPw8VdvPlLvRg4.roa (raw, json)
Hash identifier: GPcq94UHtcmgdcYbUYvhP9qwI+EKBjRCT8YqKLbYAds=
Subject key identifier: 4A:1B:1B:4D:AF:22:DB:0A:FC:A1:D3:F0:F1:57:6F:3E:52:EF:46:0E
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 04DC64BD
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/ShsbTa8i2wr8odPw8VdvPlLvRg4.roa
Signing time: Sat 01 Jan 2022 01:00:41 +0000
ROA not before: Sat 01 Jan 2022 01:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61349
IP address blocks: 37.46.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81552573 (0x4dc64bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Jan 1 01:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a1b1b4daf22db0afca1d3f0f1576f3e52ef460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:4e:78:b9:93:b7:c4:9b:43:92:75:ee:eb:
ac:5b:0b:18:71:63:1d:f4:f9:14:8a:d3:70:c8:24:
ae:52:6a:7f:48:1a:bc:67:df:3f:89:0d:aa:f8:ad:
56:6f:a4:30:f4:a8:cc:49:b0:12:79:43:a3:77:fd:
81:5e:4e:26:5d:6c:2f:97:92:98:d6:76:3a:eb:89:
58:2c:51:fc:60:9d:00:dd:6a:3f:b9:8d:a3:83:b0:
e9:f1:33:7a:7d:b3:aa:17:e7:7f:63:e4:5f:e2:a0:
a9:13:89:bf:40:f3:19:0d:9c:79:78:ab:3c:ca:e2:
8f:84:40:72:7b:3f:59:b0:48:67:08:b4:08:2a:ff:
f2:3f:bb:6a:13:a9:fa:80:6e:43:62:1e:2e:6c:04:
70:5d:f6:fd:da:4f:85:2e:b2:50:de:f7:c1:9d:52:
14:0c:8e:57:4f:c5:03:30:38:50:63:a6:a7:51:2b:
1e:0b:1d:82:31:2b:3e:4f:c0:c1:a2:6f:21:f9:44:
80:fb:91:77:fd:71:1b:6c:33:48:5a:e0:2c:bd:f1:
5e:72:10:3b:16:b0:48:4a:ff:5d:8d:e5:fa:dd:d2:
76:60:2e:c9:c3:bc:69:7d:cf:ae:9d:3e:a7:79:f9:
5c:19:7f:16:5c:6d:3e:53:69:b2:b5:5d:c3:9d:c3:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:1B:4D:AF:22:DB:0A:FC:A1:D3:F0:F1:57:6F:3E:52:EF:46:0E
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/ShsbTa8i2wr8odPw8VdvPlLvRg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a5:8d:89:c0:ab:46:16:fd:7a:a0:26:f7:cd:ae:c4:21:fa:
9c:89:d8:7f:9e:72:3e:91:6f:10:ba:fd:8c:fa:14:26:17:c4:
c5:e9:36:53:4e:aa:31:60:0c:05:ea:11:99:75:d9:04:ff:ab:
b6:e8:45:c0:a4:0e:65:f2:61:7d:a1:60:14:32:8e:4f:c9:1b:
59:6a:1f:db:ff:ef:f5:b0:e2:c2:60:29:dc:9a:4f:b5:8a:a0:
86:0a:ba:51:9a:a2:b9:1f:2d:16:62:1b:53:e0:87:c4:6b:f1:
61:28:15:42:e8:4e:38:59:09:8f:c4:2a:53:b7:97:1f:ac:61:
b2:00:97:64:b1:19:41:ab:31:c4:e9:29:91:33:6d:73:ce:23:
5a:2e:94:54:0b:6e:75:1c:b7:14:f6:5e:9e:44:26:42:8d:4a:
ff:18:88:09:7f:80:4b:2e:bb:02:92:51:84:56:26:15:70:c9:
1e:f2:f5:fd:20:3e:c8:93:4b:b9:f9:4a:dc:c7:50:b8:87:42:
d4:a5:1a:0a:aa:bb:7c:31:30:26:17:b5:e4:7c:3c:f5:d4:5a:
c5:f8:19:aa:d8:cd:86:dd:01:42:44:eb:49:5d:6a:56:b6:97:
26:05:d2:bd:02:e4:ba:76:6d:4d:a8:d3:2b:f6:90:6d:e3:ca:
0b:cb:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:40 2024 by rpki-client on console-fra.rpki-client.org