Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/bL5smw3Ky4iEAq5S6bD-N549ZQs.roa
File: bL5smw3Ky4iEAq5S6bD-N549ZQs.roa (raw, json)
Hash identifier: h17fmT5Br/62ZjbrwQK8ge0N2iwUq9EBOuptOQpiPAI=
Subject key identifier: 6C:BE:6C:9B:0D:CA:CB:88:84:02:AE:52:E9:B0:FE:37:9E:3D:65:0B
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: F2FC2D
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/bL5smw3Ky4iEAq5S6bD-N549ZQs.roa
Signing time: Wed 06 Apr 2022 09:34:24 +0000
ROA not before: Wed 06 Apr 2022 09:34:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.1.190.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15924269 (0xf2fc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Apr 6 09:34:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cbe6c9b0dcacb888402ae52e9b0fe379e3d650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:b5:19:d5:50:7e:bd:f9:61:ba:47:20:aa:
f0:cd:3f:6d:8e:fa:66:67:88:3e:7e:38:d5:37:46:
4c:a6:0b:f2:c2:b2:9b:f3:08:6e:a7:77:63:71:aa:
55:3f:d0:5b:f1:5a:32:01:90:b7:c5:e1:a6:49:c2:
29:32:cc:00:ed:33:7e:2a:e6:56:d4:ff:eb:2d:85:
5f:82:13:f1:0c:ba:5e:3b:43:90:bf:ed:a2:82:d8:
1f:a6:db:1d:3e:df:16:c4:b2:ae:16:34:f4:77:53:
59:44:2f:80:18:27:30:9d:3d:d4:ef:d1:5e:97:6d:
1c:44:9e:d3:31:a9:11:90:50:b4:be:f9:91:b5:9b:
74:b4:16:52:fc:5e:5f:8a:67:eb:9e:bb:df:95:68:
e6:d7:e7:3d:67:14:06:de:37:b3:7d:d8:fa:8c:39:
fa:1f:ed:b2:dd:37:2f:7f:96:0f:7e:3d:7f:38:a5:
49:9f:0f:1e:53:3b:b3:db:ad:71:f8:24:a9:4f:9e:
0b:04:15:c0:2b:05:53:6e:5a:19:88:3d:d0:d2:16:
09:90:66:9a:64:75:27:ad:66:f0:6c:fe:91:ce:15:
83:89:3b:a8:dd:91:90:4c:54:37:06:f8:7e:46:5e:
39:e3:86:9f:1c:c2:ce:33:5b:76:3d:3a:ff:d7:8b:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:6C:9B:0D:CA:CB:88:84:02:AE:52:E9:B0:FE:37:9E:3D:65:0B
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/bL5smw3Ky4iEAq5S6bD-N549ZQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.190.0/23
Signature Algorithm: sha256WithRSAEncryption
87:d0:5c:79:aa:f5:97:95:06:17:f8:73:5a:f4:de:a7:55:9d:
4b:36:fe:fd:14:77:45:72:42:4a:c1:fe:55:f0:5a:ab:fc:f9:
f1:e6:e6:5a:1e:cc:1d:ad:b9:cb:6b:a3:0c:54:20:f6:8e:3f:
e1:84:29:11:48:e3:be:40:e6:ef:3c:2a:cd:d5:3f:8e:ce:7e:
25:25:d5:19:29:80:9c:91:1a:c4:1e:36:27:66:95:4e:3c:fd:
91:ef:2e:27:b8:ec:a6:de:bc:c3:ce:d3:19:91:45:e2:fd:35:
ac:8c:91:0b:c3:6f:32:0c:10:80:d2:cd:ca:1b:dd:7e:46:28:
55:57:e3:fd:66:a0:b8:78:78:9c:85:80:fc:25:d4:fc:c0:69:
2c:a9:96:5a:3c:6c:45:59:0c:05:9e:55:56:47:a8:d0:4f:1c:
4d:6f:c7:e9:0b:53:1f:39:0d:15:6d:b4:75:e2:67:69:b7:c6:
5d:0b:eb:ce:19:68:b0:05:a1:10:2b:7f:d0:7d:0b:53:89:6f:
6f:99:54:30:ba:ce:2b:02:c1:ce:30:8a:7b:41:c2:01:5b:0c:
dc:1d:b1:6c:ed:bd:f7:12:d8:fa:37:cb:f1:a9:c8:19:2c:f5:
8c:52:cb:bc:f2:ac:8b:ee:05:20:a4:7d:e7:b3:63:08:58:7e:
53:af:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org