Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/h_XX-C3bUnDdBTap-sOMPI6ORw8.roa
File: h_XX-C3bUnDdBTap-sOMPI6ORw8.roa (raw, json)
Hash identifier: gIs6DalAzZ/gplvnZFL/9F6YxiLyofwI6RSvXmD2xU4=
Subject key identifier: 87:F5:D7:F8:2D:DB:52:70:DD:05:36:A9:FA:C3:8C:3C:8E:8E:47:0F
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 721249
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/h_XX-C3bUnDdBTap-sOMPI6ORw8.roa
Signing time: Sat 01 Jan 2022 03:01:04 +0000
ROA not before: Sat 01 Jan 2022 03:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397226
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7475785 (0x721249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 03:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87f5d7f82ddb5270dd0536a9fac38c3c8e8e470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:c7:96:c6:cd:db:8a:97:95:b9:95:a5:a3:
8e:e1:d5:d2:57:a2:0d:fc:08:a6:c7:42:f1:10:7e:
56:9e:a2:83:7e:bf:b0:62:1d:e1:2d:61:24:bb:7f:
25:06:89:11:98:77:9c:ca:1a:ff:e1:01:88:d3:ed:
56:75:32:6c:b3:4f:5c:3c:65:13:46:f9:f3:20:a2:
f4:94:51:d6:90:32:cb:d0:76:58:6b:c2:04:f6:9f:
13:1c:23:ef:d5:a3:79:03:d8:87:54:b1:df:7b:d2:
1e:36:57:81:8d:97:9d:8e:82:a2:55:b4:05:d2:08:
86:d3:db:17:bf:de:cf:12:c0:6a:9d:bb:e3:40:90:
7f:f7:7f:1c:ca:6a:62:f2:82:fb:34:d9:dd:04:36:
9b:f2:0f:95:1d:f0:a8:55:51:94:5d:13:c0:96:1f:
f0:41:75:7d:db:95:b3:53:16:68:6a:ff:b7:70:4a:
d4:b9:3c:d7:18:2f:9c:a0:9e:35:05:43:59:57:8e:
b3:23:0c:6b:c4:4f:af:7c:d6:fc:9a:a2:09:f3:a9:
3d:06:7f:e8:21:de:9f:45:45:f9:f8:d2:5c:8a:89:
b0:c1:b5:de:a5:d2:3d:b7:4c:d3:f9:fb:0f:e4:4c:
8c:23:4a:66:94:26:c2:6b:20:29:77:a3:49:77:84:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:D7:F8:2D:DB:52:70:DD:05:36:A9:FA:C3:8C:3C:8E:8E:47:0F
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/h_XX-C3bUnDdBTap-sOMPI6ORw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
39:65:e2:6b:67:10:88:55:02:85:44:97:1d:dd:1e:98:12:8e:
89:5f:4b:ba:58:56:ad:5c:13:9e:bd:74:e9:05:cf:63:c5:47:
d8:d5:79:ee:a2:dd:4e:0b:09:88:a8:1f:d5:5e:79:6b:31:90:
cf:c1:b1:41:53:12:60:54:0d:82:4f:73:eb:d0:65:69:04:a3:
f0:a4:96:5c:38:2b:34:e2:72:33:88:3c:64:64:2a:ae:47:47:
a2:69:0c:bc:3f:77:38:2e:0f:20:cc:56:7c:cf:8c:5f:03:ad:
81:ee:2e:75:23:a5:c6:3c:be:21:25:9f:da:3a:62:ba:ed:f3:
de:a0:fe:5b:35:81:40:4c:81:f5:ce:25:55:d1:2c:ec:7a:b5:
4a:58:48:77:bf:02:dd:9e:28:7c:ee:4b:fa:18:60:67:78:e6:
c4:64:a5:66:ad:20:26:df:87:2a:39:9a:11:b1:a7:0e:c5:76:
ce:15:34:87:82:e1:80:18:2a:1d:f4:34:cb:49:94:11:a7:7a:
2f:45:77:0f:fe:40:5a:75:b3:61:78:c7:12:a2:01:a9:fe:97:
f9:83:42:e5:59:3c:e9:55:c7:78:b5:29:10:8d:ee:50:0d:f9:
ab:8e:8c:9f:10:cd:3b:e3:29:71:6e:b9:14:2f:38:91:07:21:
4c:d3:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:37 2024 by rpki-client on console-ams.rpki-client.org