Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/cN4rlqnju-BbmDlC-jjC2TQ29Qg.roa
File: cN4rlqnju-BbmDlC-jjC2TQ29Qg.roa (raw, json)
Hash identifier: RcPP6pqTyF5Qzvp5Lob3kL5gzphzRKs/A06VZF4PnwI=
Subject key identifier: 70:DE:2B:96:A9:E3:BB:E0:5B:98:39:42:FA:38:C2:D9:34:36:F5:08
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 19E36F13
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/cN4rlqnju-BbmDlC-jjC2TQ29Qg.roa
Signing time: Thu 10 Mar 2022 09:37:53 +0000
ROA not before: Thu 10 Mar 2022 09:37:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16839
IP address blocks: 37.98.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434335507 (0x19e36f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Mar 10 09:37:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70de2b96a9e3bbe05b983942fa38c2d93436f508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:b6:c2:b9:24:c0:53:c2:75:12:9e:9d:5e:
c4:c9:d7:32:96:8b:a3:47:72:d1:71:be:fe:79:f0:
94:60:a6:0b:41:b1:d3:84:12:f3:5f:2c:46:5d:46:
ae:be:4e:8a:39:a6:98:1f:aa:19:83:0e:73:f8:51:
16:e3:35:fd:46:00:19:c8:7f:3b:dd:80:02:58:11:
f6:0c:8d:22:60:1c:41:6c:6e:14:bf:02:d2:bb:da:
72:84:d1:a6:b2:6e:45:ba:a3:fc:35:3d:fe:72:b2:
f8:34:37:e4:fe:9a:e2:c1:5b:bf:db:79:7b:d2:79:
f9:08:fc:26:a1:56:ba:23:73:50:b2:bc:64:4d:52:
b0:ae:c2:39:4d:d7:83:a4:c1:58:77:10:28:3c:96:
41:88:d3:e9:7d:73:db:bd:70:2f:ef:7b:1b:08:28:
33:9c:39:6e:9b:2c:0c:57:4a:da:17:cd:39:67:a9:
05:3e:c3:7c:33:35:33:f9:0d:a2:bf:2a:b7:3e:66:
31:6b:db:a1:6c:e5:74:ba:2e:17:d4:c0:77:98:40:
5f:51:70:3c:a5:e4:e7:5e:00:0d:ef:8a:b3:20:17:
db:a9:76:d7:22:8e:71:1a:3b:05:4a:5b:ed:0b:34:
69:52:65:e4:14:55:79:31:64:87:7d:13:da:04:62:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:2B:96:A9:E3:BB:E0:5B:98:39:42:FA:38:C2:D9:34:36:F5:08
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/cN4rlqnju-BbmDlC-jjC2TQ29Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bf:75:93:09:9a:7b:bb:b0:bf:ea:c3:c8:f3:ed:e5:61:83:
c9:16:70:81:d5:04:80:1f:c8:26:0e:33:a4:cf:0c:67:d0:71:
d6:1c:4e:3c:9a:f9:47:6a:5a:99:6b:7f:e1:bd:48:45:56:22:
5d:a4:14:c1:b2:63:d0:00:2b:fc:d4:12:ab:09:93:f7:eb:dd:
0e:29:ed:f1:76:5e:57:2a:9e:68:74:56:fc:c3:9b:75:45:70:
7c:25:41:94:61:69:a5:5d:60:ae:e5:7f:e2:7f:ad:9c:e4:89:
e7:b5:e6:95:83:7e:7d:71:a2:12:4f:9e:6f:fb:19:02:9c:9d:
3d:a3:43:6c:73:ed:4a:f2:85:b7:13:d0:b8:3b:56:a3:40:ca:
ff:dd:9d:82:7b:57:49:f1:6d:70:c8:c3:54:a5:30:6f:cd:52:
0c:1a:bb:ab:eb:3a:06:d8:55:3b:87:56:5f:f3:1f:f6:3e:e1:
75:e9:bf:ee:ee:1f:c2:a2:9e:cc:5d:96:5d:15:dc:a9:9f:ea:
7b:6f:00:50:45:a8:5c:21:3e:b2:bd:5d:d5:13:46:d2:a0:e7:
91:97:3b:ee:2b:c9:79:c5:4f:c3:51:93:6a:d0:2b:d2:c3:e8:
f3:47:20:1d:13:09:4d:d8:f5:82:ce:29:83:27:1b:c4:5d:60:
b6:53:08:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-fra.rpki-client.org