Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/fZVmQfhvRt74z-r_MY0dPmytn_8.roa
File: fZVmQfhvRt74z-r_MY0dPmytn_8.roa (raw, json)
Hash identifier: dqn4mwa61t1parvcmDiB0vDMSLpzU3jayhxfUCnzjeE=
Subject key identifier: 7D:95:66:41:F8:6F:46:DE:F8:CF:EA:FF:31:8D:1D:3E:6C:AD:9F:FF
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 35370FC5
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/fZVmQfhvRt74z-r_MY0dPmytn_8.roa
Signing time: Fri 20 May 2022 07:36:29 +0000
ROA not before: Fri 20 May 2022 07:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211225
IP address blocks: 37.205.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892800965 (0x35370fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: May 20 07:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d956641f86f46def8cfeaff318d1d3e6cad9fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:7d:1e:c9:79:3e:5f:58:d5:29:fd:fd:20:
aa:9d:48:2c:7d:b8:d5:87:e9:f2:0a:c5:b9:35:6c:
6c:8d:d1:92:e8:da:fa:9c:b6:f8:90:41:e5:a8:84:
b8:49:d6:a2:b3:d8:cd:63:89:cc:52:91:5c:c5:16:
fb:bc:5d:10:83:2c:8d:7e:3f:1e:e1:0d:e0:44:3a:
e4:15:d9:05:8a:e3:6b:ab:a0:8c:d9:bf:c4:8f:90:
a7:fe:f1:c3:12:f2:ac:4f:d8:a8:d9:4c:21:a5:89:
a5:e6:da:42:08:54:4a:f8:ee:85:26:b1:ec:47:dc:
15:1e:3b:8c:b3:c1:be:d4:0e:8e:7f:45:07:05:7a:
e8:da:48:20:2a:d2:f2:19:2c:89:49:83:9e:94:8c:
bc:bf:c8:42:46:2c:54:f5:a1:8f:65:64:e2:fb:7c:
9e:61:06:03:7c:41:12:f4:07:5d:aa:57:69:f7:cb:
de:cb:f6:13:74:99:6e:68:46:ea:33:23:43:03:c6:
62:c8:dc:bc:01:67:6a:c8:76:c0:fc:c7:29:1c:55:
be:9c:b4:6c:80:f8:9f:a7:68:98:9c:3e:ca:5e:9d:
8d:ef:d7:23:57:e5:e5:8f:04:5d:3d:54:b3:2d:d4:
b1:10:a9:1d:5b:00:a4:5f:49:fc:21:07:70:d8:cb:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:66:41:F8:6F:46:DE:F8:CF:EA:FF:31:8D:1D:3E:6C:AD:9F:FF
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/fZVmQfhvRt74z-r_MY0dPmytn_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.3.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d9:07:82:fc:ee:42:e3:5b:f8:e9:d3:56:e7:30:44:2c:82:
c7:25:9a:bc:bc:c4:07:b1:2e:d0:10:b6:2b:9a:02:ba:12:6a:
9b:85:52:29:d3:69:17:e7:00:86:2f:ce:a9:b1:d9:03:90:e2:
46:81:8a:41:75:e3:ab:24:b2:12:96:05:2a:eb:b0:ac:96:85:
a8:65:c2:74:75:85:e4:30:63:ff:96:5b:2e:94:9d:6d:19:72:
45:07:5e:3c:c2:1b:5e:fd:5d:ee:a2:08:30:53:81:b6:60:11:
cf:ba:30:c2:21:ee:e3:10:c0:af:e6:56:41:57:eb:fc:a5:28:
41:cd:a1:64:bb:c0:50:43:d3:69:c4:67:d5:26:de:dc:d0:f5:
0b:27:eb:2e:09:16:f1:22:18:04:89:94:7b:98:67:ee:83:91:
84:4e:cd:d3:47:2f:b9:c1:74:b0:16:4c:bc:da:f1:7d:71:d4:
4d:11:d2:b6:88:53:a4:ff:94:34:fe:52:d2:bc:1a:f7:d6:e0:
d2:95:97:7e:7f:cb:d4:e1:e1:d2:9d:a3:2e:07:14:33:3c:17:
a7:2c:bf:5a:f3:ad:22:d9:15:99:b5:98:fb:cd:c0:ae:99:e6:
8d:8f:83:d6:8d:4b:2f:27:ce:59:cc:47:2e:75:61:d7:61:7f:
fa:ea:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:39 2024 by rpki-client on console-fra.rpki-client.org