Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/zEM9EvOkK25UhCecc72fgiaPvCk.roa
File: zEM9EvOkK25UhCecc72fgiaPvCk.roa (raw, json)
Hash identifier: O7n3Ff+mQqOiFiS2mqjgzuQSVvsUqiNbRoOPvV3/RQw=
Subject key identifier: CC:43:3D:12:F3:A4:2B:6E:54:84:27:9C:73:BD:9F:82:26:8F:BC:29
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 0CFF9597
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/zEM9EvOkK25UhCecc72fgiaPvCk.roa
Signing time: Sat 01 Jan 2022 06:58:40 +0000
ROA not before: Sat 01 Jan 2022 06:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205312
IP address blocks: 37.220.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218076567 (0xcff9597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Jan 1 06:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc433d12f3a42b6e5484279c73bd9f82268fbc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:fc:38:44:eb:3a:47:fb:fd:d0:38:79:99:
a6:ff:04:b6:5a:f8:ff:81:19:e2:f3:32:a0:89:87:
e0:eb:6c:57:78:5e:84:e1:b7:f0:ea:fd:6c:56:cd:
42:89:cc:41:d6:f3:a5:39:a0:ed:6a:87:2c:1f:b7:
db:d0:ee:8e:29:3d:10:22:6c:2a:a4:07:93:75:6c:
1e:18:6f:7f:a4:5b:f4:9b:cd:49:3c:41:c3:03:ea:
fb:35:f7:36:03:7e:ad:81:86:ab:e1:a9:88:9f:2b:
f6:46:61:04:03:02:9b:92:a5:34:21:9a:c9:a8:48:
5a:fc:84:2a:ee:e6:95:7b:0c:3e:0d:41:3d:4a:73:
32:af:3b:97:ab:be:ca:0c:6f:77:cd:cf:50:99:5a:
28:ef:38:82:e7:52:c8:94:60:75:aa:06:a7:8e:8c:
ff:85:90:6f:b3:99:1a:cd:0d:06:02:6e:02:77:5a:
a6:5d:43:7a:b2:33:c4:1a:eb:07:f3:e6:a5:42:f3:
d1:c7:02:70:a2:ea:ad:06:55:d1:4f:e4:cf:27:fc:
40:3f:e6:3b:3d:72:e7:13:80:9f:b4:af:68:44:b5:
77:e2:3c:c2:e1:d4:c9:22:41:e9:f8:ed:83:a7:8c:
50:81:77:ca:dc:ce:0e:91:55:10:7b:7d:3c:27:a8:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:3D:12:F3:A4:2B:6E:54:84:27:9C:73:BD:9F:82:26:8F:BC:29
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/zEM9EvOkK25UhCecc72fgiaPvCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
47:63:42:ae:65:29:a9:a0:c8:6d:19:83:1c:b2:bf:dc:3a:68:
33:70:93:3c:20:b6:79:7c:09:74:a0:5c:fb:eb:37:f5:0d:5b:
e2:25:b6:58:5e:f0:7b:b4:fb:29:31:61:48:9e:62:eb:2d:92:
b2:e5:7d:1e:1d:96:8f:85:71:1e:91:70:88:db:82:18:3d:94:
7b:4f:fb:26:75:84:ab:f7:7d:19:73:9f:e4:7e:a6:ed:78:59:
ad:15:4e:35:64:1e:fa:b3:a3:b1:7b:af:a8:ee:99:e4:20:6e:
31:0f:84:57:04:f3:1d:ef:63:2a:c3:15:f6:9d:64:c7:e1:2c:
b3:ba:fe:9c:e7:65:76:be:f9:4a:eb:1e:3d:f8:d5:c2:ad:50:
52:70:9c:b0:9f:a3:cf:e6:f2:62:5c:55:d4:f4:ff:a2:e6:66:
9f:3c:54:91:28:51:c2:72:6c:98:0b:e5:8d:ae:db:6f:7b:79:
c2:68:2f:56:d4:4e:87:4d:64:6c:ab:1c:27:9b:f8:ef:aa:07:
74:13:42:a9:10:ed:f0:e9:7a:9b:15:73:91:a4:20:fd:2a:77:
02:ea:89:05:d1:59:04:26:fd:89:02:09:b5:f2:54:1a:5a:9e:
aa:32:e5:64:63:5a:f0:90:a0:14:9a:0e:c1:d7:84:64:32:77:
2b:a9:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:44 2024 by rpki-client on console-ams.rpki-client.org