Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/FrQCJnA7rBKPqUAuXrHNCMyRe5w.roa
File: FrQCJnA7rBKPqUAuXrHNCMyRe5w.roa (raw, json)
Hash identifier: nZ4Ao7wSnONsCZCXw1pb0GSyf+Z2IAmpzIgMgMkHI4I=
Subject key identifier: 16:B4:02:26:70:3B:AC:12:8F:A9:40:2E:5E:B1:CD:08:CC:91:7B:9C
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 19F0C421
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/FrQCJnA7rBKPqUAuXrHNCMyRe5w.roa
Signing time: Mon 14 Mar 2022 13:10:20 +0000
ROA not before: Mon 14 Mar 2022 13:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.233.0/24 maxlen: 24
37.98.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435209249 (0x19f0c421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Mar 14 13:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16b40226703bac128fa9402e5eb1cd08cc917b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:01:2a:8f:41:20:12:c2:7d:5c:eb:c0:c0:
4a:ed:53:34:98:2e:4a:bf:31:fd:cc:e2:f1:c8:13:
3c:2c:90:d9:78:97:e1:7b:fa:5e:2a:11:0e:fd:6b:
c0:51:96:31:55:5b:4d:14:b6:b5:39:50:db:48:43:
88:94:90:2b:f6:6d:e7:a9:fd:8e:05:ca:a9:0b:b4:
92:23:73:8f:72:0c:a5:e1:dd:19:2e:51:db:02:e2:
09:cc:9f:c0:31:9b:b6:8f:f1:cc:e7:27:6c:35:df:
bb:d9:2c:91:cf:c5:98:cd:99:dc:27:e6:22:74:7b:
62:5f:f8:66:74:86:85:61:b4:b1:3d:cb:09:e5:8a:
6b:ba:4f:a1:ea:69:e1:f0:02:7c:3a:1a:0b:26:19:
11:08:28:24:fa:65:a0:e7:ee:d8:d8:8b:b9:b6:11:
71:02:69:39:41:a0:6d:fe:ef:04:41:4a:1c:21:78:
e3:28:6d:15:41:37:89:3c:41:c1:ea:61:78:4e:5c:
c5:4f:1c:78:48:fe:31:34:27:43:88:42:b8:93:fc:
0b:16:d5:37:48:65:1a:ad:aa:49:cd:60:e0:c2:3e:
e6:5f:a1:fe:72:e1:ab:99:a6:36:db:5b:16:32:a1:
63:2f:c1:b4:b6:9e:45:10:63:f1:b6:83:8d:ad:86:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:02:26:70:3B:AC:12:8F:A9:40:2E:5E:B1:CD:08:CC:91:7B:9C
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/FrQCJnA7rBKPqUAuXrHNCMyRe5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.233.0/24
37.98.236.0/24
Signature Algorithm: sha256WithRSAEncryption
91:22:86:1f:e5:cb:a2:f7:fe:53:1a:74:5d:b1:ff:7b:50:23:
71:54:70:ce:ae:10:5d:47:cc:94:7e:4c:ad:64:d7:4f:be:82:
82:25:58:13:04:80:31:60:e8:1b:7d:f0:b3:95:70:ec:3e:5d:
e3:41:0a:23:51:eb:37:bb:dc:e8:8a:62:f7:f4:3b:52:6f:7d:
38:2f:a5:2b:f4:ec:db:e5:71:a8:02:c9:0b:6f:38:d0:cc:34:
db:96:40:03:86:e5:02:f1:c2:0e:91:40:62:61:c0:a6:37:99:
66:ea:39:75:36:89:25:64:d1:28:35:1d:c3:97:e4:87:87:ca:
5a:1e:84:60:5a:44:0e:72:5d:5a:4b:bb:8d:0f:cb:dc:45:0c:
43:72:a0:cd:e7:2c:a4:2a:7d:b2:c5:51:d4:6f:ff:c9:5a:b6:
30:ed:94:6b:e5:d7:e3:e9:5c:52:9a:5b:d9:41:ac:90:12:43:
f4:26:c2:9d:06:c1:a4:c9:98:79:73:fb:b2:7e:11:c2:84:67:
b3:dd:bb:85:a8:27:81:19:49:2b:03:50:01:4f:a7:5d:b3:35:
1b:df:c1:0f:9c:09:ea:fc:92:84:c1:b6:6c:ef:04:8d:7d:29:
81:c2:3b:7e:9b:82:28:56:be:88:de:13:72:fc:cf:37:bd:17:
f7:cd:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-fra.rpki-client.org