Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qDkl1upLf6mYFMGXYzN-9QBKk8s.roa
File: qDkl1upLf6mYFMGXYzN-9QBKk8s.roa (raw, json)
Hash identifier: cjW2JcwwN4GpyNnt+QmPlmflduqoGYTKzkGXys3kyf8=
Subject key identifier: A8:39:25:D6:EA:4B:7F:A9:98:14:C1:97:63:33:7E:F5:00:4A:93:CB
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 7170DA
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qDkl1upLf6mYFMGXYzN-9QBKk8s.roa
Signing time: Sat 01 Jan 2022 03:01:03 +0000
ROA not before: Sat 01 Jan 2022 03:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397223
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7434458 (0x7170da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 03:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a83925d6ea4b7fa99814c19763337ef5004a93cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:ff:da:76:26:95:cd:4d:16:58:55:f0:b1:
00:c6:84:9e:b9:0c:8d:27:a2:05:94:97:89:b2:0a:
d8:bf:5d:e0:48:8b:a7:77:ee:25:14:6b:af:34:78:
1b:90:60:75:f7:07:34:07:bd:b6:a9:99:3a:86:ec:
e8:21:3c:7c:9f:dd:a4:70:89:51:80:70:8c:3b:14:
26:43:a2:d2:54:4a:62:06:8d:8d:32:99:f3:13:73:
29:31:a3:74:6f:20:1a:fe:c3:91:af:82:06:5b:e2:
a7:42:6a:7e:1b:c0:50:b2:d6:d8:75:7e:2a:96:a4:
ca:53:eb:65:42:ab:73:1a:fe:d9:73:86:78:ac:9f:
27:ed:3f:91:6f:2f:d0:1a:41:fb:58:15:b7:23:4e:
ba:15:2f:64:af:c9:32:9d:f1:2c:a6:f2:64:4b:f0:
22:2d:d4:d4:5b:50:89:ce:c1:96:97:e2:b2:af:0f:
21:75:11:bf:df:43:f8:97:b6:fc:ea:7e:76:f4:5f:
7c:75:ff:21:b8:1a:8e:10:61:14:79:ea:0b:d4:ca:
af:45:ca:60:b2:5a:9b:1b:c0:2b:6b:37:d4:de:c7:
31:53:1a:31:49:60:ea:80:0a:c4:a3:fc:6e:f6:0e:
9b:5c:0c:2c:6e:28:40:07:ae:a1:25:59:ca:e4:26:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:25:D6:EA:4B:7F:A9:98:14:C1:97:63:33:7E:F5:00:4A:93:CB
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qDkl1upLf6mYFMGXYzN-9QBKk8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
39:98:52:47:7b:a0:9c:1d:a4:84:e4:47:6e:d5:10:2c:d0:ba:
d7:1d:4c:3e:35:ed:6f:5a:52:bb:60:d0:fe:5b:b4:a6:ae:5d:
86:21:90:fa:f5:8e:f8:d5:60:b3:d5:c0:a3:d2:1d:df:0f:fb:
77:16:78:42:48:e1:01:7a:25:fe:cf:a9:05:07:5f:1f:5f:df:
6a:45:0a:b2:95:14:b1:18:cd:6a:79:cd:f2:aa:e8:51:2a:f1:
76:ef:79:45:15:ad:21:4a:e5:46:5a:06:c5:a0:cf:8a:95:67:
60:01:58:18:ba:59:9b:82:e6:16:df:a4:d2:f1:de:81:69:4f:
cc:70:bb:d5:6d:13:af:41:24:ed:69:ea:14:3f:c5:18:59:5a:
42:6f:c1:ad:6b:5e:82:a2:58:29:3f:3c:9c:4a:ae:79:a7:f6:
e2:c7:f0:ad:51:6a:19:e7:fa:b5:38:83:39:f2:be:d9:6a:24:
8f:dc:4a:7b:24:1b:5f:6c:98:f4:31:69:be:72:74:bd:f8:5e:
33:60:59:a6:ab:05:f4:48:da:47:80:f8:ba:8b:10:9e:3a:8e:
1d:28:fe:eb:5b:16:a7:32:61:a9:d0:68:98:4b:66:0f:b5:86:
a2:11:6c:81:c6:eb:71:91:2b:44:45:21:bb:6c:03:33:8b:78:
96:46:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:24 2024 by rpki-client on console-fra.rpki-client.org