Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/AaTkEWcBrtZWbyKSnplkHGa4PCA.roa
File: AaTkEWcBrtZWbyKSnplkHGa4PCA.roa (raw, json)
Hash identifier: OsDb17a/GvAIu+RLDGcfkAPLQGcPBBP7zCBuZmbxoY8=
Subject key identifier: 01:A4:E4:11:67:01:AE:D6:56:6F:22:92:9E:99:64:1C:66:B8:3C:20
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 01010A5B
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/AaTkEWcBrtZWbyKSnplkHGa4PCA.roa
Signing time: Tue 12 Apr 2022 09:02:01 +0000
ROA not before: Tue 12 Apr 2022 09:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.1.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16845403 (0x1010a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Apr 12 09:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01a4e4116701aed6566f22929e99641c66b83c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:3e:ee:e8:62:eb:ec:dd:1b:fc:47:96:4c:
d3:47:0e:ac:72:6c:f4:4f:54:3d:77:ae:e7:84:07:
21:8f:46:bc:85:26:14:bf:d9:e7:a1:28:5c:cf:79:
fd:cd:47:da:fa:0f:cc:4f:a0:40:27:90:f7:98:a1:
05:72:7b:13:67:66:c9:a8:f6:e9:f4:0c:5a:51:02:
f0:41:ed:85:91:6d:c2:39:d6:30:7f:14:27:c5:b1:
e8:22:ea:bd:86:28:39:a3:ea:20:23:a3:f8:02:fe:
5a:50:fd:c1:a3:2c:b5:0f:c6:cb:29:d3:d3:ef:cf:
e2:59:1b:55:5a:2e:16:18:4c:0e:51:a7:95:11:17:
45:97:d1:c4:8a:55:cc:ef:72:2e:dc:03:28:c4:3c:
3c:34:89:15:91:b9:c9:81:2a:a2:d3:b9:30:2a:f2:
75:52:e0:05:de:79:a7:a9:11:1f:d1:f4:85:8c:e2:
20:15:50:4a:8b:f3:68:c3:7f:69:8a:23:de:9b:e0:
2c:31:6e:6d:9e:2f:0a:b1:ec:b2:3b:f4:00:9f:d9:
91:05:b7:e6:5f:89:47:a7:19:c0:aa:8a:b8:40:dd:
1c:11:4e:c7:11:1c:69:da:0a:5f:c9:64:04:3a:ab:
95:1a:ec:ce:54:ab:bd:32:2a:02:39:45:35:be:a2:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A4:E4:11:67:01:AE:D6:56:6F:22:92:9E:99:64:1C:66:B8:3C:20
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/AaTkEWcBrtZWbyKSnplkHGa4PCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.190.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e5:91:ac:7f:13:ed:f7:ed:22:b5:f7:cb:0a:6c:30:fb:89:
30:80:b1:18:2e:34:6a:0b:63:99:8f:c4:b0:bd:2d:d8:04:e7:
78:b0:b2:0c:78:e3:a6:25:73:89:9b:4c:3d:3b:e0:77:b1:99:
0d:41:3c:ed:2e:87:58:76:db:af:09:53:56:6a:f2:ff:ef:b4:
93:7b:94:9c:d0:2f:e1:81:19:5e:e4:a2:4f:ac:a2:e6:02:e1:
14:ce:c8:cb:2c:c5:69:f2:46:bb:41:90:6f:d1:7b:58:22:78:
ac:09:b2:5d:10:41:ca:82:24:d0:f7:ef:96:0d:fc:67:16:95:
93:57:bc:6a:48:bd:c7:47:7b:16:fc:e3:cf:cb:a8:be:27:b0:
f2:37:09:09:48:9a:21:a6:db:32:4d:96:8a:3f:e3:97:9d:14:
6f:66:22:49:59:aa:63:64:e8:55:ec:61:45:03:31:dd:d9:6d:
5f:d1:8d:78:87:27:0f:58:7c:13:4a:cf:3b:44:6a:4b:5b:f0:
cc:82:af:a7:1c:b1:1d:35:a9:d4:ad:15:59:95:07:57:1f:dc:
d2:75:ba:95:44:e9:d4:85:60:61:da:3e:a7:39:0d:5e:4c:17:
0d:35:08:80:58:46:67:2f:d8:e7:d9:6e:17:ac:2d:f0:b5:52:
2c:61:55:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-fra.rpki-client.org