Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/pnaH2ek--c9n5c9NWTwfZKIKhHI.roa
File: pnaH2ek--c9n5c9NWTwfZKIKhHI.roa (raw, json)
Hash identifier: pXBR44pbpMwf2MTGVv+pFdAQgQz0ubsAJhPB8IhbU1k=
Subject key identifier: A6:76:87:D9:E9:3E:F9:CF:67:E5:CF:4D:59:3C:1F:64:A2:0A:84:72
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 1F8D4AD2
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/pnaH2ek--c9n5c9NWTwfZKIKhHI.roa
Signing time: Sat 01 Jan 2022 14:06:36 +0000
ROA not before: Sat 01 Jan 2022 14:06:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12586
IP address blocks: 37.114.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529353426 (0x1f8d4ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 14:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a67687d9e93ef9cf67e5cf4d593c1f64a20a8472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:30:a0:7a:71:94:7e:e4:ac:fe:29:ae:6c:
66:a2:7d:bf:07:f0:c1:ae:17:88:1a:38:dd:57:e2:
71:c8:00:e3:9b:56:5a:ba:12:44:99:7c:9c:f7:1c:
93:8e:22:38:eb:1e:1a:cb:1f:b2:db:5a:42:d9:b0:
ce:7c:b5:ca:ea:9a:00:04:9d:26:59:53:24:a3:bb:
5f:c8:5d:95:d7:f1:5f:89:74:c5:cc:73:6b:f0:15:
64:9e:56:e8:e8:61:ad:52:6f:c7:6c:13:5d:07:72:
2d:c3:e0:f9:94:6d:9c:ee:93:b6:6b:0a:c9:a8:37:
97:36:34:63:c9:69:df:de:9b:5e:c8:78:9b:e3:1a:
92:4e:62:4a:5e:b4:96:79:93:cc:7f:95:42:37:2a:
4e:16:04:40:b7:93:d8:62:4b:77:8c:9a:56:7a:6a:
37:92:6d:c9:17:61:38:13:69:af:ad:54:c5:53:d1:
44:62:ec:11:00:9a:f8:17:aa:71:a3:4a:98:b6:67:
c8:c3:94:45:28:6b:79:f6:96:16:54:a8:8a:38:b3:
3b:a4:89:05:02:32:05:bd:85:5d:d0:92:d6:4e:c6:
90:62:a4:0e:45:7e:23:7a:6d:23:89:37:9e:25:d1:
ac:67:ea:e0:83:23:71:87:13:e8:cd:37:90:a1:31:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:87:D9:E9:3E:F9:CF:67:E5:CF:4D:59:3C:1F:64:A2:0A:84:72
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/pnaH2ek--c9n5c9NWTwfZKIKhHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.57.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b9:10:14:15:70:4c:fc:dd:1b:5b:b8:95:30:28:8d:43:a2:
86:86:1e:79:90:c1:60:fe:05:06:7f:28:6d:c2:a3:b2:e9:bd:
7f:db:94:95:89:62:6d:89:d9:03:6f:32:6f:93:db:67:1d:c4:
38:e0:2b:34:be:4b:1f:4e:e8:8e:1f:52:0d:92:ef:02:b8:39:
db:d9:35:c7:da:48:80:b0:a6:31:35:f8:17:af:a4:0b:d6:44:
1f:e5:1c:a6:b0:61:f4:fe:a6:f4:a1:f9:0b:39:76:5c:d1:5b:
e0:bc:26:c1:7b:e3:b3:d0:32:7e:28:f0:f0:05:f7:d7:06:95:
71:1d:83:90:e3:31:b1:11:6f:59:fd:ce:ae:3f:2d:fd:6e:ac:
6b:f2:e8:75:91:76:1e:1e:6d:45:e4:02:f7:99:9f:da:ca:78:
11:ae:de:11:5e:b5:d8:d3:a9:3b:5f:0a:84:4e:1d:76:8e:06:
ef:ef:0c:f7:6d:21:0d:b2:78:7d:5b:c1:a9:7f:3f:ba:a8:5c:
23:d1:94:8b:f5:44:ae:73:4a:e5:71:27:5c:39:8a:f9:ff:d7:
3b:5e:56:61:f2:27:42:ed:be:c0:32:13:b0:18:7b:58:eb:e8:
bb:db:31:70:48:31:f8:60:b1:51:e2:77:a3:f0:2e:7a:30:73:
34:4a:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org