Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/60ZyjZUCN2Cvwvc2Rm0JtQZc2s8.roa
File: 60ZyjZUCN2Cvwvc2Rm0JtQZc2s8.roa (raw, json)
Hash identifier: dsydnOB18TbvsTGmq8UMklWhddnd9Y60zAEg007PbRw=
Subject key identifier: EB:46:72:8D:95:02:37:60:AF:C2:F7:36:46:6D:09:B5:06:5C:DA:CF
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 6D97A1
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/60ZyjZUCN2Cvwvc2Rm0JtQZc2s8.roa
Signing time: Sat 01 Jan 2022 03:00:59 +0000
ROA not before: Sat 01 Jan 2022 03:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397215
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7182241 (0x6d97a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 03:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb46728d95023760afc2f736466d09b5065cdacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:1e:46:3f:65:52:9d:ad:cf:ff:38:90:2c:
3a:07:2d:52:ba:b8:3f:16:f0:d4:3b:18:6f:b3:44:
94:7a:39:52:02:eb:8c:1a:e6:cb:a9:37:49:aa:cf:
f2:ef:e9:d8:06:77:3d:fa:b8:e4:f3:8c:40:93:be:
4c:53:ee:da:9b:42:26:2c:10:3a:56:fb:49:94:ec:
c6:3c:ed:14:45:3c:8b:f5:99:63:2e:25:a7:2e:b3:
29:c3:9a:f4:84:02:0a:1f:50:57:e4:0e:2f:87:a4:
fe:0e:9e:4e:7e:ea:b9:c5:fc:47:d1:5b:c6:61:33:
6e:0f:54:7f:ac:36:37:d3:3f:ac:b6:35:61:72:c3:
e8:cb:a0:ae:f7:00:ea:fa:b9:8b:06:2a:cb:44:b1:
5c:ba:52:7f:1c:5f:38:55:71:12:32:f6:df:d6:52:
0f:d5:a9:36:bc:97:f3:6a:4f:58:cc:1a:21:c3:6c:
8e:33:86:0b:9c:6c:04:09:63:b1:eb:33:1b:e0:d1:
8a:b6:d9:6d:fb:99:8f:6d:f7:40:c9:50:91:f6:c7:
be:48:5f:d0:26:2d:1c:81:f6:f6:ba:27:f9:1a:75:
3e:51:4c:5c:59:db:ed:b5:6f:f6:43:c0:e2:cb:13:
0c:f3:fb:ed:05:3a:7d:c2:8c:48:91:57:dd:a0:2e:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:72:8D:95:02:37:60:AF:C2:F7:36:46:6D:09:B5:06:5C:DA:CF
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/60ZyjZUCN2Cvwvc2Rm0JtQZc2s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
72:46:62:3b:01:11:6c:26:5b:38:4f:16:69:5e:09:08:79:b1:
c5:1f:13:e8:72:f5:50:0c:88:d6:05:71:de:7b:1c:6d:d7:c9:
d5:fd:be:8c:16:0f:f5:86:53:3e:fb:e8:ea:76:13:5c:ec:bc:
20:fd:01:a1:47:a0:44:23:0e:05:46:94:2a:2f:39:33:b8:11:
ad:7e:67:2b:a2:7a:39:67:c8:95:4e:9e:a3:91:75:8b:55:e3:
a2:cb:46:9c:a1:9d:d0:aa:88:b8:85:69:a9:aa:70:b5:06:12:
82:81:a8:d2:e2:ba:af:a6:f9:dd:24:f3:bc:b3:4a:4e:28:2a:
d5:2e:77:c2:73:42:9c:f3:33:76:9f:49:a2:17:e9:6a:37:50:
9e:87:b2:76:ab:4a:ca:4e:81:2c:b1:12:e5:b0:81:6c:2c:b9:
d5:e2:5c:f0:1f:ca:7a:85:f4:39:84:3b:2d:96:4e:35:2b:2f:
8e:09:80:4a:93:ba:5f:d0:94:cb:91:94:35:d7:34:05:e7:6c:
d2:78:0e:b2:ad:f1:b6:da:e6:9c:82:0e:1c:b2:11:36:87:b5:
49:9b:f0:3f:cb:6a:c1:6c:5b:04:78:7a:91:ae:9f:86:8f:44:
24:d8:1b:1d:3d:13:20:12:a2:60:19:e8:66:b3:8a:1f:05:6d:
5d:a3:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org