Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/G24P9dzJsHwYAXT_5m90z6RGoiA.roa
File: G24P9dzJsHwYAXT_5m90z6RGoiA.roa (raw, json)
Hash identifier: ImCYiW5qmBYA0vVqnUTdZHAfVdJ7roXSlBqSp6vRDQY=
Subject key identifier: 1B:6E:0F:F5:DC:C9:B0:7C:18:01:74:FF:E6:6F:74:CF:A4:46:A2:20
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 6D6BCB
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/G24P9dzJsHwYAXT_5m90z6RGoiA.roa
Signing time: Sat 01 Jan 2022 03:00:59 +0000
ROA not before: Sat 01 Jan 2022 03:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7171019 (0x6d6bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 03:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b6e0ff5dcc9b07c180174ffe66f74cfa446a220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:10:2c:65:3f:8f:de:ea:b4:49:98:af:e6:
27:c2:d9:20:c7:81:38:4d:08:a5:7d:06:e0:9d:19:
ef:cf:fd:a1:23:b5:bb:50:57:d4:1f:a2:e1:36:c7:
2e:9b:79:20:a1:3a:01:64:7b:0b:88:03:d8:85:dc:
8b:12:17:4f:6e:6b:e9:7d:96:f9:90:c8:c6:a3:bb:
17:2f:3b:b2:6c:42:9e:70:db:30:05:41:5e:e5:7e:
95:5e:dc:ad:59:f0:b1:e2:0b:24:54:d2:2f:93:08:
8d:58:a9:dc:ac:a8:15:68:38:67:d1:57:8f:46:46:
c3:de:02:db:19:2d:c7:37:9c:ef:8e:22:02:dc:33:
24:ef:ed:30:d4:f0:03:98:24:88:32:a7:d4:48:60:
df:dc:a1:68:88:01:d0:ad:16:f0:01:37:71:8a:5a:
fe:7b:8a:3a:a0:ac:c9:60:a9:1a:bd:f9:21:68:21:
94:29:a4:01:bc:21:d8:b2:6a:ed:4b:02:e4:c9:fc:
8e:7a:aa:da:a4:e4:2f:eb:d7:5e:7a:9b:6a:b6:59:
03:83:09:ee:37:21:1f:e9:62:7b:21:7a:81:6c:3c:
29:ab:58:dd:0d:36:fe:04:47:b5:49:a1:df:4b:6e:
fb:51:0b:f6:ff:2e:e0:f7:4e:85:26:f7:c6:25:ba:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6E:0F:F5:DC:C9:B0:7C:18:01:74:FF:E6:6F:74:CF:A4:46:A2:20
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/G24P9dzJsHwYAXT_5m90z6RGoiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d7:03:50:34:0b:6e:f5:14:f7:02:d4:0e:ba:db:53:53:12:
89:ac:72:a1:a0:e6:4f:f1:57:0f:c6:8f:c9:e8:2f:7d:69:f1:
8d:50:92:f7:a4:30:6e:f2:2b:1e:fa:c4:da:f4:05:73:fd:6c:
61:9f:05:26:cd:aa:37:b3:4c:29:4f:43:21:6a:96:0b:6f:75:
0d:7d:f7:d2:42:d4:08:f2:a4:fe:87:74:c5:b2:19:ed:ef:51:
2f:9a:f1:24:b2:6a:ba:19:31:82:0f:6a:09:dc:06:78:2f:eb:
16:c9:09:9b:87:9e:a8:46:87:d1:73:63:90:b2:1e:ed:45:63:
05:e2:9d:68:61:92:88:dd:01:3d:48:cf:7f:66:b7:40:94:ca:
ec:5e:da:1b:bf:2e:03:ff:61:7c:ea:93:63:3c:a1:76:93:80:
ce:9c:9f:0f:4e:89:35:00:e8:ab:02:08:01:b9:56:38:c6:10:
c0:5e:65:b1:50:ef:60:08:fc:59:5a:ef:0d:f3:90:b7:41:9e:
9e:c1:b0:56:4c:4c:c6:6e:23:d9:15:a1:3b:49:d7:28:5b:b3:
9e:7f:b9:8f:1c:47:32:e2:c5:6f:2a:23:a7:69:e7:64:76:b5:
71:f4:19:61:68:80:ac:a6:ff:86:08:41:88:e0:49:83:04:37:
57:08:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org