Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xXkV7PWweD9PAauA23Lgyp8OCZ4.roa
File: xXkV7PWweD9PAauA23Lgyp8OCZ4.roa (raw, json)
Hash identifier: g+EMQc2DHtVWPYV92Y8Gx4LI6col4qG0m4BV6zY7EGk=
Subject key identifier: C5:79:15:EC:F5:B0:78:3F:4F:01:AB:80:DB:72:E0:CA:9F:0E:09:9E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 07AFA77D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xXkV7PWweD9PAauA23Lgyp8OCZ4.roa
Signing time: Sat 01 Jan 2022 05:57:02 +0000
ROA not before: Sat 01 Jan 2022 05:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60861
IP address blocks: 37.221.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128952189 (0x7afa77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 05:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c57915ecf5b0783f4f01ab80db72e0ca9f0e099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:57:2c:60:d8:a1:0e:ba:1f:05:6d:92:9c:
46:e5:00:3c:f2:dd:9a:9b:76:7e:18:c7:6e:3e:6f:
f2:51:75:b1:c2:44:71:9b:4e:82:ff:83:de:48:0b:
91:4a:8c:13:c6:9d:dd:15:f6:a2:0f:97:a0:96:71:
5f:99:06:01:8a:9e:67:e0:91:e6:e7:9e:a0:07:42:
88:ec:34:2f:96:6e:4e:aa:90:e1:e7:89:98:96:78:
42:b5:64:27:9e:db:56:0b:2b:83:99:12:01:ec:c8:
34:2d:d5:d3:3d:2f:d6:b7:e3:fd:ca:5a:e4:4a:7f:
c9:7f:99:1e:6d:7e:7b:14:ac:46:52:c1:fd:d2:33:
e2:8e:a3:aa:78:a7:0c:c1:1a:45:69:ea:ba:0d:80:
65:de:31:1c:1c:f5:8c:c4:71:61:32:fb:3b:f9:4c:
02:c4:85:6c:e2:4e:30:c2:1b:7d:0a:22:76:fa:77:
ef:a9:07:f6:b6:a9:2b:03:78:f7:93:01:d5:e4:53:
2f:4e:35:af:6e:a4:c9:1f:55:24:b7:9c:b9:03:e0:
cc:0f:48:fb:fc:df:db:fb:de:27:a9:76:f0:09:f3:
4e:3e:9e:69:2f:9f:71:95:cd:c9:88:78:4c:f5:87:
98:8e:cd:2f:8d:c5:db:cc:da:97:06:b6:8f:a9:1e:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:15:EC:F5:B0:78:3F:4F:01:AB:80:DB:72:E0:CA:9F:0E:09:9E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/xXkV7PWweD9PAauA23Lgyp8OCZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.180.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7b:a5:4f:2c:38:e8:38:88:0d:04:a5:5a:d1:d6:83:1d:22:
b3:cc:17:91:63:45:69:56:07:37:8a:15:9a:f0:3a:98:9d:f2:
4d:c8:28:02:5b:6a:f5:4b:c1:f2:36:24:13:ce:45:28:70:f7:
b9:1a:67:09:90:76:81:0f:3c:c2:94:81:2c:97:c5:f6:7a:a6:
b7:53:44:53:f5:ee:d5:18:4e:d5:0e:d4:09:62:6e:22:f5:c1:
7e:d2:80:78:b4:2a:1a:4d:34:0b:08:1f:c7:b3:83:c6:38:90:
81:fa:fa:96:38:5a:31:8c:2e:f8:ce:01:57:15:4f:5b:37:7a:
81:55:c5:e3:c5:40:d7:27:ad:d5:ea:28:8d:ed:04:e3:cd:08:
4b:cb:0c:3f:68:1f:13:5d:99:ec:c3:c1:c5:87:89:85:59:72:
ef:68:8d:c2:aa:85:5e:f1:00:eb:44:b8:10:a1:a3:ec:bd:54:
08:ec:e7:69:a3:87:3a:59:7c:f3:bd:fc:99:0a:eb:be:b3:6a:
bc:68:d7:d9:cc:d2:e9:e3:2e:3c:bd:0e:c3:0e:c2:47:9f:53:
d2:59:77:bd:06:7b:1e:3c:1f:00:af:a0:23:73:c4:46:5b:3c:
97:34:c5:42:83:8a:ba:b7:71:32:9b:7a:f6:ab:21:4c:9e:ee:
ba:fc:0f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org