Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/4OIFxuUPjjZMB_KXYsaSYNp1iqQ.roa
File: 4OIFxuUPjjZMB_KXYsaSYNp1iqQ.roa (raw, json)
Hash identifier: MtVZsS7RMgTxafpL732DVcWXdYowoauY9IU0nhcq+9c=
Subject key identifier: E0:E2:05:C6:E5:0F:8E:36:4C:07:F2:97:62:C6:92:60:DA:75:8A:A4
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 73C547
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/4OIFxuUPjjZMB_KXYsaSYNp1iqQ.roa
Signing time: Sat 01 Jan 2022 03:01:07 +0000
ROA not before: Sat 01 Jan 2022 03:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397230
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7587143 (0x73c547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 03:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e205c6e50f8e364c07f29762c69260da758aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:3a:d3:26:12:28:2e:c3:ba:d6:42:a3:52:
1f:6a:d6:f9:1e:e9:77:fc:bb:94:6f:18:59:52:ea:
51:36:c2:7c:c9:3d:a1:b6:2d:7e:12:e9:2b:8a:4d:
da:8d:70:ae:74:b2:bb:31:f2:51:a6:95:e4:25:4a:
3f:38:e8:da:20:7e:78:ba:f2:ba:e2:6e:f7:2b:9e:
7b:47:d1:38:d7:f6:0a:2a:80:dd:e4:7e:8d:34:87:
84:d7:33:5b:00:b2:0d:c5:7d:ff:e1:b2:5b:f5:d5:
1f:d8:14:c2:93:2e:c2:8d:da:fe:9a:4f:1d:b4:fb:
c2:0d:5d:a8:66:6e:e5:f0:d7:91:77:ce:42:bb:82:
c5:dc:68:8a:91:d4:9b:da:21:7c:33:00:25:9c:d0:
69:cd:b4:58:f8:12:a7:59:08:7d:e3:e7:97:52:61:
90:fd:1b:fa:44:83:1f:84:d8:dc:49:b3:7e:5d:bb:
6a:0a:13:54:f2:67:4d:63:85:f3:3b:1a:a2:37:66:
ef:1b:26:39:c6:26:6e:8e:d6:9e:c8:6a:93:05:1d:
cd:1b:2f:df:aa:d1:bc:72:5a:7c:b2:95:32:9a:82:
3c:9b:ed:d3:f6:d6:1b:ce:8c:04:60:2b:f3:d3:c8:
b7:97:07:f5:fa:33:36:84:00:07:6d:7d:49:f0:5e:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:05:C6:E5:0F:8E:36:4C:07:F2:97:62:C6:92:60:DA:75:8A:A4
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/4OIFxuUPjjZMB_KXYsaSYNp1iqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9e:f5:bd:d4:ca:8c:27:91:a5:dc:40:b0:2a:ca:a4:fe:1b:
84:ba:e2:98:14:d7:2b:13:d4:5f:91:27:8a:fb:44:92:6d:b1:
48:4b:95:7d:84:55:6b:98:e7:6d:c2:2d:c0:a0:28:e3:f8:a3:
23:d5:60:c2:bf:bd:1a:5f:c1:a9:96:4f:42:c5:86:4f:67:8a:
4a:af:5a:0a:ef:9c:03:24:eb:d3:37:ec:9a:ba:a9:62:46:57:
40:80:05:ad:be:7c:7f:75:45:06:bf:ba:81:6b:90:5a:c5:8b:
76:44:ed:76:df:8d:e8:02:9b:0c:28:f9:86:36:40:2a:70:69:
e8:01:d7:eb:06:c8:da:6d:22:b1:22:69:3c:aa:2d:4c:f8:6c:
3f:b4:63:fb:28:4b:3d:7b:e9:e7:28:d4:31:ab:5f:e6:3c:0d:
d2:37:6d:71:99:e4:51:ba:c9:28:b3:47:c1:b3:1d:72:d5:50:
69:55:8a:6f:10:6a:e5:25:eb:6a:d8:1f:38:26:3e:f1:4f:17:
60:a9:9d:4e:37:20:5c:7c:ac:c2:40:d7:7c:a9:0b:16:5e:49:
52:73:4e:50:b1:98:36:84:5f:88:c8:2d:e4:a9:d4:78:f1:4b:
98:bc:8a:49:5d:9f:51:33:36:c8:b7:a3:11:c6:3b:fc:0b:35:
d0:39:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:21 2023 by rpki-client on console-ams.rpki-client.org