Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/IYIA1hTAlmCrWStm_RXGLH_In9Q.roa
File: IYIA1hTAlmCrWStm_RXGLH_In9Q.roa (raw, json)
Hash identifier: vFRKDHLxNf4xbSdrxglaLGUmIqRZ3ER7PHuIGCjI6MY=
Subject key identifier: 21:82:00:D6:14:C0:96:60:AB:59:2B:66:FD:15:C6:2C:7F:C8:9F:D4
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 0184C92FC0917CFA4F98FAA1B4E2CBBFEC54
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/IYIA1hTAlmCrWStm_RXGLH_In9Q.roa
Signing time: Wed 30 Nov 2022 15:37:40 +0000
ROA not before: Wed 30 Nov 2022 15:37:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 37.75.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:2f:c0:91:7c:fa:4f:98:fa:a1:b4:e2:cb:bf:ec:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Nov 30 15:37:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=218200d614c09660ab592b66fd15c62c7fc89fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fd:b4:b1:26:36:26:f3:dc:03:73:c2:bf:a8:
10:4b:6a:18:85:ba:03:8e:8e:56:e7:56:13:25:d0:
6f:73:33:f2:78:06:10:cc:03:4e:31:2c:98:d5:c7:
c6:fd:74:64:ac:a9:8f:ee:9a:1b:24:87:b5:1a:34:
6e:1a:aa:5a:78:e7:02:fe:ef:78:f1:c4:1e:50:e3:
1f:85:a0:f5:73:a8:60:1f:2e:80:6d:e1:e1:27:37:
2f:25:eb:03:04:1c:cf:f9:2b:9a:90:04:12:c3:80:
fa:f9:8c:8b:8b:d8:1b:a7:6c:91:8c:5a:24:67:8b:
82:66:00:a4:f6:cd:d4:b3:77:76:ef:26:47:2a:a0:
a2:4e:f5:11:38:f1:ea:f9:2f:b9:59:11:8d:1e:a3:
c5:9a:a0:26:ad:81:a5:83:df:74:87:3f:07:ae:ca:
85:9a:8c:80:f8:fb:c6:e3:3c:f9:e4:38:af:68:3b:
98:fd:e4:cf:81:51:f8:94:58:89:85:d4:e1:12:60:
78:fa:cf:ab:77:81:43:32:2c:98:ea:f6:a7:54:4a:
eb:e3:22:49:6c:1e:58:f6:42:6e:13:60:e9:c9:8f:
22:12:3f:9f:3a:a7:ab:8b:8e:8e:06:36:76:a9:ae:
a7:d6:a8:d0:1b:18:67:e6:34:86:3b:bf:e1:ca:26:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:82:00:D6:14:C0:96:60:AB:59:2B:66:FD:15:C6:2C:7F:C8:9F:D4
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/IYIA1hTAlmCrWStm_RXGLH_In9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:98:c7:c0:14:8f:05:b8:1e:7b:31:04:2e:c0:88:06:9e:18:
7d:a6:dd:88:3f:d9:0d:ea:03:c3:39:3c:16:b7:82:92:81:e5:
dc:78:55:84:20:6b:b7:f1:4a:49:fc:11:5a:a2:d1:8c:6d:ef:
0c:31:5a:b4:c5:f2:94:71:cc:06:cc:bb:7d:5a:86:e2:da:59:
70:bc:d6:f7:6b:02:cd:04:01:fd:d5:b7:d7:ad:1f:cf:28:a8:
62:fb:0f:00:4d:70:31:a7:da:bd:75:8c:53:0b:bd:21:4a:b7:
1e:ae:80:f0:c4:69:40:0a:9a:cb:00:e3:f0:c2:d3:2a:59:29:
72:05:94:8e:4d:d2:c6:38:6c:78:4c:af:ff:d7:d8:b5:fc:7b:
5c:78:cc:a0:e4:3a:bc:e2:52:f4:83:0f:10:a9:73:76:97:e7:
35:14:d1:4e:2c:74:9c:e1:c6:85:7a:c7:c7:b7:1a:72:d2:66:
8c:59:2e:7d:af:9e:8a:a6:98:0f:fb:f8:b9:fc:2b:53:d6:40:
d9:66:fa:ea:4e:88:82:df:61:f8:84:bb:8f:11:e3:75:ac:b1:
64:5e:db:a7:be:90:22:c4:33:34:88:90:64:2a:3f:88:5e:32:
c9:cc:fd:87:0a:be:6c:9f:7d:82:03:13:8c:60:d6:12:bb:10:
5d:6a:38:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTJL8CRfPpPmPqhtOLLv+xUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj
NjYwODkwHhcNMjIxMTMwMTUzNzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTgyMDBkNjE0YzA5NjYwYWI1OTJiNjZmZDE1YzYyYzdmYzg5ZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv20sSY2JvPcA3PCv6gQS2oYhboD
jo5W51YTJdBvczPyeAYQzANOMSyY1cfG/XRkrKmP7pobJIe1GjRuGqpaeOcC/u94
8cQeUOMfhaD1c6hgHy6AbeHhJzcvJesDBBzP+SuakAQSw4D6+YyLi9gbp2yRjFok
Z4uCZgCk9s3Us3d27yZHKqCiTvUROPHq+S+5WRGNHqPFmqAmrYGlg990hz8HrsqF
moyA+PvG4zz55DivaDuY/eTPgVH4lFiJhdThEmB4+s+rd4FDMiyY6vanVErr4yJJ
bB5Y9kJuE2DpyY8iEj+fOqeri46OBjZ2qa6n1qjQGxhn5jSGO7/hyiZRdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGCANYUwJZgq1krZv0Vxix/yJ/UMB8GA1UdIwQY
MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt
NTRhMjVlMmNkYWE5LzEvSVlJQTFoVEFsbUNyV1N0bV9SWEdMSF9JbjlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5
LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUvrMA0G
CSqGSIb3DQEBCwUAA4IBAQChmMfAFI8FuB57MQQuwIgGnhh9pt2IP9kN6gPDOTwW
t4KSgeXceFWEIGu38UpJ/BFaotGMbe8MMVq0xfKUccwGzLt9Wobi2llwvNb3awLN
BAH91bfXrR/PKKhi+w8ATXAxp9q9dYxTC70hSrceroDwxGlACprLAOPwwtMqWSly
BZSOTdLGOGx4TK//19i1/HtceMyg5Dq84lL0gw8QqXN2l+c1FNFOLHSc4caFesfH
txpy0maMWS59r56KppgP+/i5/CtT1kDZZvrqToiC32H4hLuPEeN1rLFkXtunvpAi
xDM0iJBkKj+IXjLJzP2HCr5sn32CAxOMYNYSuxBdajgi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:32 2024 by rpki-client on console-ams.rpki-client.org