Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/1_zLWsI-mRxj6mkaPU0d-Em7cpQ.roa
File: 1_zLWsI-mRxj6mkaPU0d-Em7cpQ.roa (raw, json)
Hash identifier: 5k3sUUVI4xvRjcYrur0f7W10TMShLOAmxzvIAlQciGc=
Subject key identifier: D7:FC:CB:5A:C2:3E:99:1C:63:EA:69:1A:3D:4D:1D:F8:49:BB:72:94
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 041C0953
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/1_zLWsI-mRxj6mkaPU0d-Em7cpQ.roa
Signing time: Sat 01 Jan 2022 15:57:52 +0000
ROA not before: Sat 01 Jan 2022 15:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207290
IP address blocks: 37.44.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68946259 (0x41c0953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Jan 1 15:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7fccb5ac23e991c63ea691a3d4d1df849bb7294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:37:c3:58:4c:f3:4e:38:8e:79:a2:f9:62:
fc:7d:fb:ea:b1:0f:5c:ac:31:55:93:ca:1e:da:1c:
26:78:23:91:4d:27:78:e1:3a:8a:9c:cb:00:60:36:
3a:1d:07:b7:e5:da:52:f2:9e:e4:89:96:bc:52:67:
3e:05:9c:70:64:b9:4f:3c:ca:1d:02:4a:e3:c6:e6:
e3:b8:a0:cc:22:a9:8f:e5:1f:63:1a:73:8c:bd:00:
06:59:15:d4:14:07:b1:e4:e2:f5:68:e2:c1:b1:95:
6e:3f:fa:5a:6f:18:97:c5:48:be:2a:d4:52:f7:1d:
11:36:90:55:80:c4:18:aa:64:14:32:f5:43:8f:1a:
35:c7:6d:f0:7b:75:4f:02:93:bd:2c:d4:ac:ff:fc:
48:82:52:db:eb:a9:cf:9e:69:19:23:dc:65:65:74:
6d:79:fb:f9:fc:b2:e0:f6:18:38:8f:35:e8:bf:a9:
f1:a5:b8:fe:67:10:47:1a:85:0a:8e:f0:a2:f2:3e:
26:af:34:2b:9c:fe:23:17:b9:a5:f0:22:03:24:fa:
fd:ed:44:8f:c4:c9:52:b8:2a:93:b6:a1:48:90:c7:
dd:94:81:ef:54:17:1d:16:7b:ef:d4:d8:c9:3d:61:
b4:0e:75:07:7d:77:b4:2e:bf:66:44:4a:a4:b8:9b:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FC:CB:5A:C2:3E:99:1C:63:EA:69:1A:3D:4D:1D:F8:49:BB:72:94
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/1_zLWsI-mRxj6mkaPU0d-Em7cpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.240.0/22
Signature Algorithm: sha256WithRSAEncryption
73:14:46:7d:01:21:78:a5:8b:5c:7d:4c:ef:c4:62:20:e5:38:
71:7c:2e:73:15:37:6d:73:1e:36:b8:4d:f8:4e:f7:8e:27:2e:
3e:a9:d0:35:51:b1:08:8f:52:58:dc:c0:62:5e:90:fd:4a:dc:
a0:e4:c7:89:b0:0d:21:73:1a:8b:c4:82:1d:05:c8:d3:42:98:
3f:f3:5e:a3:84:06:91:e1:fa:d8:95:f0:8e:fe:9a:05:bf:59:
b5:06:1d:a0:2d:3b:11:57:50:72:82:5d:57:2a:78:e4:ba:e4:
8e:9b:81:27:11:00:48:3c:71:4f:58:c7:3e:b8:54:5b:3f:d8:
67:4f:46:9b:ab:b7:84:e7:e4:c9:59:5e:5d:6d:98:74:2c:2d:
29:72:ed:a7:2a:0a:2d:85:0f:39:d4:73:d9:75:1e:50:94:94:
cd:17:85:b2:cf:cb:cb:de:57:d0:f3:7e:ae:b4:7c:b5:71:33:
5a:fd:b9:14:f0:40:3f:f7:c5:14:d8:38:67:39:69:a0:2a:b5:
06:73:cb:fb:a4:51:0a:37:03:79:d5:b5:84:08:4a:43:8b:00:
6b:1e:34:83:5e:42:0c:fd:0e:35:89:3f:d7:26:e1:9a:e3:af:
56:ff:37:94:5b:01:7e:32:1a:6b:fd:8e:94:22:4a:87:4d:23:
4b:30:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org