Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/iUTx-v-g4i5OM25HUD3DXA_ZrB4.roa
File: iUTx-v-g4i5OM25HUD3DXA_ZrB4.roa (raw, json)
Hash identifier: 93ROjjkaSzxgmCpvPrEerVu4ZIr4fb7Yvc/5pLpgjBc=
Subject key identifier: 89:44:F1:FA:FF:A0:E2:2E:4E:33:6E:47:50:3D:C3:5C:0F:D9:AC:1E
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 794BD7
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/iUTx-v-g4i5OM25HUD3DXA_ZrB4.roa
Signing time: Sat 01 Jan 2022 03:01:10 +0000
ROA not before: Sat 01 Jan 2022 03:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397239
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7949271 (0x794bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 03:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8944f1faffa0e22e4e336e47503dc35c0fd9ac1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:ae:76:1a:e0:73:e3:95:2d:8b:35:77:57:
b8:56:ed:91:27:ba:b8:02:71:41:02:ca:ed:d0:04:
a4:0d:f5:8f:d9:0f:8f:f1:42:46:cb:a2:2c:89:3f:
ec:6a:b2:a3:e8:67:05:eb:6d:65:ce:02:55:23:53:
9b:d5:c4:99:46:60:7f:51:a2:56:86:ce:35:cf:a5:
c0:05:b8:10:9a:c9:bf:96:82:56:50:1e:6f:bd:d6:
78:12:4f:dd:64:94:92:f9:2f:8b:13:03:63:37:82:
bd:d7:77:4f:c3:f3:b1:1a:9f:bd:2f:59:ea:0a:01:
c1:5c:05:76:e7:f9:fa:8b:8e:3a:28:6b:27:a2:5f:
12:37:44:56:95:78:71:20:0a:ab:32:69:67:80:19:
08:c6:ee:e9:07:47:75:fb:d9:c2:e7:ba:39:c8:f0:
a2:9e:96:1d:84:75:2d:b6:0a:88:40:d6:5f:bf:fb:
2b:da:81:af:e1:d1:68:74:62:50:87:34:d0:ab:65:
e6:da:fe:fd:68:ad:a6:33:9b:56:71:bc:42:7c:f9:
c0:77:1e:ab:f3:32:e0:ee:b0:39:a6:89:ee:35:ba:
17:44:e1:9b:ff:5f:17:27:b7:f4:e1:b5:32:b1:c2:
07:4a:fc:d8:4f:42:8a:60:18:6d:b5:18:0c:1d:b9:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:44:F1:FA:FF:A0:E2:2E:4E:33:6E:47:50:3D:C3:5C:0F:D9:AC:1E
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/iUTx-v-g4i5OM25HUD3DXA_ZrB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
65:cb:9b:7d:42:9e:ab:d6:fe:3f:07:73:89:e0:4e:5d:01:02:
69:fe:de:38:58:ab:34:77:e0:38:9e:c5:00:eb:93:d9:7b:63:
8b:ea:f9:25:92:49:40:82:4e:9f:b8:0e:4e:c0:a5:28:ce:9f:
21:8f:64:2a:bf:c1:bb:cb:cb:d4:ae:c7:b6:1d:79:78:d8:12:
a6:82:c8:2c:93:78:58:1a:67:8a:cd:6d:0a:2f:65:92:d5:28:
e7:8d:e2:c8:d7:cf:3c:bc:5f:46:2d:88:21:90:71:c7:68:ce:
05:55:24:d2:8d:91:7d:3c:5f:3e:37:77:d8:be:4e:10:37:7d:
00:2c:f0:fb:4a:ad:01:6d:56:9a:0f:57:09:55:5d:9b:37:8e:
48:47:78:1e:1e:b5:58:84:1d:20:90:cc:ce:b1:2a:0e:21:47:
6e:59:b5:ac:ea:c9:aa:01:67:08:ea:ef:d7:1b:0a:f9:e1:07:
fe:68:94:2c:80:02:e0:bf:58:49:22:c1:29:da:fb:b4:96:28:
63:bc:0f:02:d7:24:c4:00:64:be:dd:8d:8d:1a:a7:91:9b:a8:
2d:7b:7d:ce:4e:d7:c5:6f:47:78:79:d6:7d:28:65:18:51:54:
9e:b5:82:e2:56:28:fd:a9:98:e3:5c:43:fb:6f:9a:c7:d8:ec:
33:1a:5c:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDeUvXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjljOGJmMmMwHhcNMjIwMTAx
MDMwMTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4OTQ0ZjFmYWZmYTBl
MjJlNGUzMzZlNDc1MDNkYzM1YzBmZDlhYzFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApXyudhrgc+OVLYs1d1e4Vu2RJ7q4AnFBAsrt0ASkDfWP2Q+P
8UJGy6IsiT/sarKj6GcF621lzgJVI1Ob1cSZRmB/UaJWhs41z6XABbgQmsm/loJW
UB5vvdZ4Ek/dZJSS+S+LEwNjN4K913dPw/OxGp+9L1nqCgHBXAV25/n6i446KGsn
ol8SN0RWlXhxIAqrMmlngBkIxu7pB0d1+9nC57o5yPCinpYdhHUttgqIQNZfv/sr
2oGv4dFodGJQhzTQq2Xm2v79aK2mM5tWcbxCfPnAdx6r8zLg7rA5ponuNboXROGb
/18XJ7f04bUyscIHSvzYT0KKYBhttRgMHbmwNwIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFIlE8fr/oOIuTjNuR1A9w1wP2aweMB8GA1UdIwQYMBaAFKWuij2L2qv0dl/a
edVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdiLzEv
aVVUeC12LWc0aTVPTTI1SFVEM0RYQV9ackI0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8w
ZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1Iy
WDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQAJdHCAwQAJdHEAwQAJdHG
MA0GCSqGSIb3DQEBCwUAA4IBAQBly5t9Qp6r1v4/B3OJ4E5dAQJp/t44WKs0d+A4
nsUA65PZe2OL6vklkklAgk6fuA5OwKUozp8hj2Qqv8G7y8vUrse2HXl42BKmgsgs
k3hYGmeKzW0KL2WS1SjnjeLI1888vF9GLYghkHHHaM4FVSTSjZF9PF8+N3fYvk4Q
N30ALPD7Sq0BbVaaD1cJVV2bN45IR3geHrVYhB0gkMzOsSoOIUduWbWs6smqAWcI
6u/XGwr54Qf+aJQsgALgv1hJIsEp2vu0lihjvA8C1yTEAGS+3Y2NGqeRm6gte33O
TtfFb0d4edZ9KGUYUVSetYLiVij9qZjjXEP7b5rH2OwzGlwz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-fra.rpki-client.org