Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/UBfHNo9Jsz9MMw3-LEmr6DGyOd8.roa
File: UBfHNo9Jsz9MMw3-LEmr6DGyOd8.roa (raw, json)
Hash identifier: V6/QazcgZGdCN7juQXfGNbGB++F+/E9bEB+8pFr3dPI=
Subject key identifier: 50:17:C7:36:8F:49:B3:3F:4C:33:0D:FE:2C:49:AB:E8:31:B2:39:DF
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 1FE92404
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/UBfHNo9Jsz9MMw3-LEmr6DGyOd8.roa
Signing time: Thu 03 Feb 2022 19:38:57 +0000
ROA not before: Thu 03 Feb 2022 19:38:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 37.114.42.0/24 maxlen: 24
37.114.43.0/24 maxlen: 24
37.114.44.0/23 maxlen: 24
103.252.89.0/24 maxlen: 24
103.252.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535372804 (0x1fe92404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Feb 3 19:38:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5017c7368f49b33f4c330dfe2c49abe831b239df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:9e:18:a4:04:4f:04:2a:4f:5b:ae:e0:61:
0b:04:10:c1:17:4d:ae:ce:32:85:7c:e6:64:85:a9:
27:be:f9:63:bb:08:9b:72:3d:bf:ad:6e:c7:89:d9:
42:62:92:eb:e3:d5:de:0f:2e:ae:3c:a9:a0:74:65:
70:55:53:b2:aa:94:c9:c0:6f:18:77:8c:e9:b0:cb:
56:55:21:2b:2b:7f:85:8a:08:cb:2f:ce:7f:aa:e6:
3c:8e:a4:b9:a9:98:60:11:f5:6e:b6:d9:d1:25:80:
2f:d5:0c:a1:36:22:f2:83:73:a0:b1:2c:cc:a6:e9:
31:fd:f4:f3:47:b6:7b:d1:db:4f:f5:14:5f:38:b6:
80:92:24:64:b4:d2:21:04:96:9d:b2:14:63:a8:1b:
37:1f:7d:01:57:ff:61:3d:94:e2:8f:93:10:c0:88:
c4:d4:d8:2e:8f:a2:50:31:94:0f:12:39:c3:f3:0d:
ab:2a:95:13:8b:ba:32:e6:aa:b2:87:1e:d4:12:4b:
83:65:53:3b:ee:d1:a9:fe:09:aa:d1:58:b1:f4:1a:
58:33:8e:b1:a6:a3:a2:ba:30:6d:09:a7:86:c8:5f:
f8:4b:d4:c4:03:fd:2f:2e:eb:f0:1b:d2:e9:a2:e2:
3c:85:bd:16:09:e7:b2:99:9f:de:c5:4d:fb:2d:c5:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:C7:36:8F:49:B3:3F:4C:33:0D:FE:2C:49:AB:E8:31:B2:39:DF
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/UBfHNo9Jsz9MMw3-LEmr6DGyOd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.42.0-37.114.45.255
103.252.89.0-103.252.90.255
Signature Algorithm: sha256WithRSAEncryption
17:10:ca:93:f6:4d:ba:97:26:3e:d3:b1:34:0d:c0:7a:87:c7:
3a:3e:d3:55:aa:f8:4f:e6:49:93:a4:7b:4d:3d:62:ba:d4:01:
be:20:23:c9:2f:80:d7:7d:e6:52:b4:7f:9e:6b:b7:82:5c:6a:
1c:0f:15:5a:d6:9b:42:45:72:cb:39:9a:e7:b3:5f:bb:1f:00:
d6:c9:65:32:25:66:61:a8:5f:6f:7c:39:62:e9:05:6b:88:f9:
00:14:ae:fe:f6:0c:b1:3f:18:f0:da:1e:99:af:ed:13:c6:bb:
05:23:1f:d3:76:f6:7d:b6:0f:40:41:a2:8d:5d:74:62:9d:f7:
0f:91:7a:eb:73:1b:11:36:00:dd:e8:a0:9b:4f:fc:d5:84:38:
cb:41:74:05:dd:fa:46:78:bf:b6:75:0a:e6:d0:12:61:bc:84:
78:45:c1:c3:38:d6:52:01:35:5c:76:46:3c:1f:57:ca:82:f5:
56:0b:be:1d:e8:81:89:19:cb:6a:8c:4f:ae:46:72:d4:4e:c6:
10:c3:91:7a:8e:cb:a3:66:8b:47:59:82:e3:f9:8e:87:51:91:
39:58:9e:63:c6:94:c8:26:6e:bb:6c:3f:a3:d4:67:32:11:ea:
44:89:0b:ed:03:e8:b9:00:64:14:d4:e2:b6:ab:eb:94:6d:da:
ba:94:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org