Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/ChjmYT2G6yHj14EUTgPq04dvuDU.roa
File: ChjmYT2G6yHj14EUTgPq04dvuDU.roa (raw, json)
Hash identifier: knZdgk3v3g9Ci4Eoib2fEu8Ay+ZPLkdz+IxqatZkRmQ=
Subject key identifier: 0A:18:E6:61:3D:86:EB:21:E3:D7:81:14:4E:03:EA:D3:87:6F:B8:35
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 06665787
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/ChjmYT2G6yHj14EUTgPq04dvuDU.roa
Signing time: Sat 01 Jan 2022 14:04:20 +0000
ROA not before: Sat 01 Jan 2022 14:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25180
IP address blocks: 37.17.184.0/24 maxlen: 24
37.17.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107370375 (0x6665787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Jan 1 14:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a18e6613d86eb21e3d781144e03ead3876fb835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:db:a0:18:b1:12:8c:c0:72:0f:1d:07:05:
12:af:32:ae:6d:af:33:9d:4f:5a:9f:ae:b9:53:fd:
a7:55:12:24:12:b5:c8:a0:dd:3e:4a:77:8c:5f:cf:
4d:97:52:74:26:5f:94:2b:7b:45:47:39:53:da:e4:
3b:77:cb:ec:bc:ce:3a:e9:66:54:c4:67:a6:9b:72:
30:3e:be:0d:f1:cc:09:55:6d:1c:e5:a9:c0:ce:25:
81:cc:17:b8:1a:06:9d:af:c5:27:ee:82:0c:f3:66:
dc:17:e3:1e:40:97:b3:4a:97:1a:b7:ee:a3:1d:71:
54:74:cc:a9:14:5e:6f:8c:4d:b0:06:37:8e:65:ec:
c5:10:41:7a:bb:f1:52:10:14:8d:17:7c:1c:ef:c8:
d7:85:86:ba:97:08:8e:19:f2:9c:92:7d:de:15:e2:
44:84:10:be:cc:cd:68:29:ff:53:02:c6:05:0a:de:
32:d7:9d:9a:d2:38:dc:46:49:01:47:be:dc:5d:40:
35:6e:d4:d4:80:70:b8:0a:13:3f:4b:d2:a1:52:71:
54:ed:63:c3:4e:c8:38:73:3e:4c:18:d5:f1:0f:a0:
2b:6d:5a:49:d5:b5:2b:11:95:63:cf:1f:24:fc:47:
ad:66:cf:ef:cd:18:06:70:d0:2e:0c:ca:a6:2a:8f:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:18:E6:61:3D:86:EB:21:E3:D7:81:14:4E:03:EA:D3:87:6F:B8:35
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/ChjmYT2G6yHj14EUTgPq04dvuDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.184.0/24
37.17.187.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:23:a6:a0:30:e4:ee:45:88:95:8b:2c:65:70:ef:2b:77:20:
95:d0:1c:22:59:6d:d1:d1:e1:e9:34:46:d7:98:7e:cf:d3:31:
48:8a:c4:5d:84:80:c0:de:82:63:e0:05:66:a1:44:63:0b:1b:
93:75:7a:14:34:97:26:7b:c1:27:4f:33:58:b7:81:85:ea:96:
da:17:0b:25:94:7f:ea:d2:c3:4e:cb:e3:4a:c6:3c:52:54:b6:
e1:17:47:50:aa:f8:f2:77:93:d9:97:dd:13:33:83:32:ff:98:
78:a9:1d:33:6f:b1:f3:bc:9c:98:95:47:e3:e3:06:58:cd:eb:
cc:2c:d0:72:fa:f7:dd:38:58:f0:89:dd:9d:65:3b:fc:c8:e4:
23:d6:90:ab:b9:19:9a:f0:75:db:ed:1f:09:83:d8:44:5d:da:
0e:04:c5:76:fb:4a:c8:8f:a4:ef:e8:5e:9e:22:35:91:91:ae:
a0:da:75:2e:aa:0b:13:eb:8e:99:8d:fd:e7:c8:a4:39:a6:f2:
6f:1c:ce:06:b1:c3:cc:59:cd:c3:e0:e2:db:35:1f:6c:ca:62:
4e:7b:70:9a:35:97:24:5a:6b:84:cc:f9:48:ee:ac:ee:2a:e9:
f8:77:f5:3f:ed:29:bb:ac:50:96:b2:e0:9e:4a:af:44:84:f9:
80:3e:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:12 2024 by rpki-client on console-ams.rpki-client.org