Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/cSwZuvCwnzEiFg-eFVMqJyZbxds.roa
File: cSwZuvCwnzEiFg-eFVMqJyZbxds.roa (raw, json)
Hash identifier: Y0KKa5X2ZHP7FqX0mOWEjkCVrkYyo7mATbvCa92qMEM=
Subject key identifier: 71:2C:19:BA:F0:B0:9F:31:22:16:0F:9E:15:53:2A:27:26:5B:C5:DB
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 01830C6F942465DF358E869D9050EAC52308
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/cSwZuvCwnzEiFg-eFVMqJyZbxds.roa
Signing time: Mon 05 Sep 2022 06:56:22 +0000
ROA not before: Mon 05 Sep 2022 06:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8540
IP address blocks: 81.94.55.0/24 maxlen: 24
37.186.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:6f:94:24:65:df:35:8e:86:9d:90:50:ea:c5:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Sep 5 06:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=712c19baf0b09f3122160f9e15532a27265bc5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:2b:75:74:c4:c5:29:11:71:28:e6:72:5b:
4d:b6:5b:1d:96:13:77:ca:38:64:7f:10:67:7e:7d:
66:16:80:78:3a:ab:d2:dd:c0:49:89:e5:3b:55:08:
39:d1:06:3a:b0:a2:71:89:0f:46:7f:15:a8:48:91:
b5:8f:23:ca:51:85:bc:bf:71:ce:ba:d5:d7:b6:e5:
81:04:99:9f:66:0d:7e:78:06:56:76:95:77:58:11:
ba:c4:ce:12:69:2d:6d:ab:18:3d:cc:1e:19:59:8b:
55:12:22:b6:a0:39:d7:47:a5:bc:85:a5:90:a7:9d:
e9:b3:c0:57:4a:a7:19:0e:b1:bf:8d:e0:aa:ec:64:
d6:78:a7:fc:c7:88:cb:d3:06:7c:8d:29:35:c5:bd:
1d:b1:88:f2:9a:9d:1b:5b:21:86:f9:e1:5b:ae:1a:
f8:fe:4b:ba:a1:bd:39:2d:1f:a0:ff:8b:7e:b4:16:
ae:2a:97:93:b3:50:37:7d:b6:df:35:49:5c:ca:fa:
d1:26:0b:c5:8a:61:09:b4:09:ef:54:7f:3e:dc:f4:
25:55:33:0e:e7:20:7d:e7:61:dd:da:0f:d5:de:42:
ce:ec:5b:0a:b6:92:e4:71:47:0f:4d:83:8c:2c:69:
c5:06:9e:76:30:fa:96:da:42:4a:56:6d:16:dc:f6:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2C:19:BA:F0:B0:9F:31:22:16:0F:9E:15:53:2A:27:26:5B:C5:DB
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/cSwZuvCwnzEiFg-eFVMqJyZbxds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.5.0/24
81.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6b:7d:59:88:dc:2a:59:53:eb:c6:85:77:35:ef:04:6d:99:
9d:80:02:2b:32:1d:4a:82:60:b3:bb:51:3d:19:89:04:c5:2e:
df:a0:f1:7b:ea:b6:a9:4d:13:24:3e:f9:c9:ac:a9:a6:67:6d:
49:bc:2b:48:21:3d:36:ee:dc:18:87:2d:4c:c3:0c:e4:ea:a8:
65:aa:87:92:26:c7:5a:ce:5b:c0:a5:1c:51:25:97:1f:2d:97:
1c:10:b4:0e:4d:2d:db:c9:e9:dd:05:d7:00:f0:c7:47:18:cd:
01:22:44:78:d3:f2:ff:65:4a:2e:9f:07:65:47:70:40:63:c1:
15:a1:39:43:d8:83:b3:4d:12:bc:2d:c4:f0:78:28:8f:7b:1a:
d3:c7:7e:44:3b:61:90:85:20:30:45:ce:a7:8e:9f:a6:bb:23:
3b:42:e5:71:83:43:76:0d:21:ca:2e:65:19:68:0b:6a:95:72:
69:26:cb:bc:2a:26:d4:6c:16:79:77:0e:98:35:f0:8e:92:72:
8e:4a:93:11:99:7b:40:67:af:fc:d3:33:f1:98:7b:52:9b:22:
b0:d3:7c:57:34:b5:35:46:0b:4d:48:78:ef:d5:d3:90:44:fd:
86:f7:ce:85:07:86:42:55:79:ea:83:b9:75:9a:a5:8f:c3:65:
46:cf:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:37 2024 by rpki-client on console-fra.rpki-client.org