Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/f_IsMR2mrZ04Y5gMdznFNqqKYp8.roa
File: f_IsMR2mrZ04Y5gMdznFNqqKYp8.roa (raw, json)
Hash identifier: 9Nrt6lh52vLCb2wEDleXM6Ol5wkdwW2DLOIctG0aW1o=
Subject key identifier: 7F:F2:2C:31:1D:A6:AD:9D:38:63:98:0C:77:39:C5:36:AA:8A:62:9F
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 71F464
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/f_IsMR2mrZ04Y5gMdznFNqqKYp8.roa
Signing time: Sat 01 Jan 2022 03:01:03 +0000
ROA not before: Sat 01 Jan 2022 03:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397224
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7468132 (0x71f464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 03:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ff22c311da6ad9d3863980c7739c536aa8a629f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:00:23:c5:7a:46:0d:ba:62:7b:49:16:ca:
ac:bf:63:d6:d7:48:2e:96:6e:70:86:d7:24:e0:cc:
1a:05:61:05:4d:c4:3d:f7:a0:93:aa:fc:74:1d:34:
b8:23:2b:07:09:f6:7d:76:b5:ce:a6:ff:f2:db:e9:
0d:ec:bf:e4:20:44:76:28:58:f6:5d:cb:2d:85:d0:
da:ed:ec:f4:77:bd:5a:6e:72:f4:89:e0:3b:05:71:
d0:23:f9:ba:e9:0d:27:a8:87:25:09:26:5f:69:4a:
5f:10:d5:e7:16:23:2f:79:d2:e8:03:a8:cb:5d:db:
e6:dc:45:2f:95:79:60:cb:b7:18:d2:d6:bc:e1:45:
ee:fc:09:26:a2:98:b7:3f:7f:98:27:ce:ed:34:0b:
cd:ff:d7:5f:ee:82:37:40:18:e2:ef:87:ac:1e:2c:
10:88:4b:8c:03:df:6a:98:50:1e:5d:6c:d3:86:ee:
fa:18:0a:8b:db:48:f0:4d:02:38:c0:87:d7:de:96:
84:54:28:09:3e:98:a9:36:9f:08:32:e2:df:d2:d5:
96:d2:f0:3b:67:04:94:65:17:6b:db:7f:7d:36:0c:
a5:f7:0a:dd:6b:70:ad:df:73:e0:ea:49:42:1e:23:
2a:b7:3f:53:c8:47:a1:47:85:b6:4d:29:99:e6:21:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:2C:31:1D:A6:AD:9D:38:63:98:0C:77:39:C5:36:AA:8A:62:9F
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/f_IsMR2mrZ04Y5gMdznFNqqKYp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2e:39:0c:9f:29:84:ec:cd:86:8e:ac:8c:9b:ed:6c:2b:4a:
cf:bd:2f:07:99:42:31:8d:83:ed:b0:0c:d4:59:47:44:f1:a5:
10:ae:ee:79:97:6b:51:c1:e8:f1:4e:b6:2c:b4:04:92:53:61:
85:3d:29:95:16:14:9d:d8:fb:0b:53:00:82:70:b9:31:69:15:
cd:b5:61:10:3e:7b:e8:0c:a2:62:22:05:ea:36:7d:13:f5:5c:
db:12:1a:b9:a5:b7:26:fb:26:01:59:24:91:77:53:22:a5:2d:
bd:f9:44:59:3a:e2:e1:a6:47:9b:79:c1:94:57:47:2c:10:2c:
8f:7b:6f:a8:c8:44:d1:61:3b:8f:c5:56:df:f0:42:47:3a:83:
d2:a6:41:9c:19:c5:40:3e:72:5d:16:8c:53:63:67:05:75:f2:
ce:d7:5d:5b:d1:bf:c8:c1:3a:0d:99:3e:26:ce:58:c0:d8:d3:
43:57:52:be:22:08:eb:45:db:34:31:01:cf:a2:17:63:8f:25:
e3:07:19:6d:f7:63:c7:37:3c:b1:76:2d:ef:a5:56:65:63:e7:
51:df:0e:1b:49:b8:e9:f2:45:59:ab:67:ad:a4:94:79:53:e3:
79:d4:24:39:d9:04:1f:be:22:3f:7f:2a:18:2c:d8:12:74:7a:
e8:1e:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org