Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/Al6VscTK2KmtmscjOiFD-9e7_sM.roa
File: Al6VscTK2KmtmscjOiFD-9e7_sM.roa (raw, json)
Hash identifier: zvkMuqHriCCYFVmDDvXSDMhs12UTPgylyOF8cZrEd3o=
Subject key identifier: 02:5E:95:B1:C4:CA:D8:A9:AD:9A:C7:23:3A:21:43:FB:D7:BB:FE:C3
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: F37785
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/Al6VscTK2KmtmscjOiFD-9e7_sM.roa
Signing time: Wed 06 Apr 2022 07:03:32 +0000
ROA not before: Wed 06 Apr 2022 07:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.1.168.0/21 maxlen: 21
37.252.206.0/24 maxlen: 24
37.252.205.0/24 maxlen: 24
37.252.200.0/21 maxlen: 21
37.252.207.0/24 maxlen: 24
2a03:b7c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15955845 (0xf37785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Apr 6 07:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=025e95b1c4cad8a9ad9ac7233a2143fbd7bbfec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:2b:4b:99:72:54:11:e5:9d:00:08:65:b6:
91:0d:7b:7a:e2:8d:96:0c:4c:fa:5c:98:3f:66:1d:
5b:b3:22:e8:03:50:5a:ff:53:74:7b:32:15:9f:26:
0c:d6:d6:29:7b:b9:bb:22:4c:cd:02:84:bc:35:74:
90:35:e9:21:ae:2f:f2:99:24:5b:c7:0d:c3:40:a8:
cd:73:b6:c0:84:9d:d9:6e:9b:ae:69:eb:24:da:e5:
f3:aa:55:4c:d8:6b:0f:c9:8f:6a:6f:5d:2b:d7:5d:
27:58:e0:71:87:25:53:b5:2f:b9:40:de:04:6a:e7:
03:4a:1a:83:87:0f:df:74:5a:a3:9b:4a:56:ce:44:
74:12:13:dd:28:e0:b1:0e:69:d4:f5:05:d3:ba:fe:
62:f9:69:22:cb:6e:20:46:a0:ce:d7:d5:8d:d5:1c:
e1:0a:75:70:cd:a3:47:9e:0b:5a:78:55:7b:7f:14:
35:e4:cb:4f:84:44:e2:11:05:87:5b:b4:ba:a3:24:
1d:54:25:b5:15:e2:b6:33:3a:e3:e9:ea:c6:6f:2d:
cf:85:d6:d7:ee:cb:7d:f2:15:df:b5:20:3f:73:8b:
22:d9:6a:42:9d:36:ea:c8:59:01:05:9d:98:e5:4b:
24:5f:9f:d3:e6:63:21:07:80:3d:dd:11:29:9f:04:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5E:95:B1:C4:CA:D8:A9:AD:9A:C7:23:3A:21:43:FB:D7:BB:FE:C3
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/Al6VscTK2KmtmscjOiFD-9e7_sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.168.0/21
37.252.200.0/21
IPv6:
2a03:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:fa:93:ee:4b:54:7d:94:b3:14:7b:b7:75:e5:8e:76:90:07:
27:f1:19:f0:b1:fd:2f:52:14:0e:f7:10:3b:c5:e8:72:aa:60:
8f:02:b1:64:9f:3f:e5:5d:85:d6:31:8d:25:0d:55:a3:d5:68:
02:91:71:20:77:aa:ad:49:97:61:64:c1:e9:74:fb:11:a8:07:
dc:30:bf:b2:e8:1c:e0:fb:7b:86:51:b5:7e:a5:60:f4:69:14:
63:96:30:46:fb:50:2f:57:08:91:82:d6:58:9f:17:d1:88:c1:
6c:70:01:13:4f:be:01:83:49:17:94:b0:80:2e:9c:a1:fa:46:
32:e8:cd:4d:c0:a5:f3:1c:dc:23:f3:39:5e:8d:3b:81:bd:a7:
1f:08:50:a3:4b:fe:f3:c1:e5:8c:98:c0:ad:28:87:ba:11:80:
4b:b7:7a:fe:98:de:2e:03:89:49:ad:1c:51:af:79:1b:99:dd:
6e:23:9a:93:8b:c6:e8:ac:62:a6:49:fc:1e:38:97:25:5c:55:
40:0a:21:54:f1:13:9c:69:1e:65:b0:87:76:b4:08:c5:a5:02:
6f:bf:22:5f:0f:82:d6:f3:60:28:07:a2:70:9f:04:0f:e7:9d:
b7:0b:2c:56:a6:5d:52:d3:83:77:2a:1d:2e:63:9f:4e:94:1b:
8d:54:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:15 2024 by rpki-client on console-ams.rpki-client.org