Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/twGPhGvH6NR6yaEuax7OhAYPBzg.roa
File: twGPhGvH6NR6yaEuax7OhAYPBzg.roa (raw, json)
Hash identifier: hfjppH6Jlwft+ZK5UY+d4XbIxyQOaxtEUc2OfeoXpJ4=
Subject key identifier: B7:01:8F:84:6B:C7:E8:D4:7A:C9:A1:2E:6B:1E:CE:84:06:0F:07:38
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 371D2951
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/twGPhGvH6NR6yaEuax7OhAYPBzg.roa
Signing time: Sat 01 Jan 2022 11:59:58 +0000
ROA not before: Sat 01 Jan 2022 11:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49858
IP address blocks: 37.156.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924658001 (0x371d2951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 11:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7018f846bc7e8d47ac9a12e6b1ece84060f0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:73:a4:87:a0:af:2b:f1:38:48:52:78:f6:
d5:d8:a7:c4:3f:5a:02:a6:ed:c0:18:9b:0f:e2:fc:
42:d1:af:73:b0:95:6d:1c:e7:37:33:7f:90:16:18:
a9:5c:bc:6c:9b:72:fc:d8:82:3c:5d:9a:06:24:c0:
f2:12:dd:19:14:9c:df:e8:8b:fa:f2:bf:f6:66:29:
07:ad:11:24:03:fe:36:7b:43:5c:0b:64:8a:4b:c3:
0d:bf:0e:d4:db:69:f0:98:c4:6e:4b:a8:dd:45:34:
dc:26:2f:97:fa:a4:e0:5b:f6:0a:6a:cd:94:ce:89:
69:5a:b9:c4:23:de:d9:48:54:e6:d6:3e:67:91:2b:
c6:ca:96:50:9b:f0:f0:8c:97:99:5e:3a:6d:7d:1d:
f1:63:76:ac:cd:c6:52:b3:27:32:4b:42:6d:09:fb:
7d:0e:5c:1b:de:70:50:3f:74:12:e5:82:74:bc:15:
a0:50:6d:5b:2e:03:0f:c4:68:7f:95:2c:6a:18:56:
da:42:b5:ff:5b:87:9e:f7:d6:c0:1f:6a:1b:14:8a:
8d:30:a4:1f:73:39:c7:90:3f:49:ae:5a:4b:cb:16:
6b:90:9b:b3:0b:d5:5f:db:91:d7:b1:5f:ec:3b:e5:
a1:73:64:69:94:db:e0:d6:08:0b:b1:f1:1f:8a:53:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:8F:84:6B:C7:E8:D4:7A:C9:A1:2E:6B:1E:CE:84:06:0F:07:38
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/twGPhGvH6NR6yaEuax7OhAYPBzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3c:6e:0d:af:5d:76:69:7e:ff:7e:13:12:09:3e:3e:12:55:
89:a9:ba:aa:41:ae:57:61:01:cc:f6:54:97:42:e9:d7:16:c6:
c2:82:8a:2c:0b:70:13:b6:83:97:16:7c:7e:7d:27:98:7d:9f:
3a:7d:54:17:12:9d:a2:ea:13:60:64:95:c9:7f:cd:0a:12:97:
07:8f:f6:f4:70:57:cd:dd:57:e7:7b:0b:86:53:02:af:7d:df:
b4:69:83:0d:2e:15:b2:5c:70:48:03:d0:d6:d8:7c:92:f6:6e:
03:20:54:55:68:64:c3:a2:66:38:84:fb:15:b6:fa:a6:68:30:
13:79:59:c7:d8:c8:19:8e:3a:d2:f6:16:4f:89:11:22:10:30:
46:95:02:74:25:50:cb:c1:b0:5e:97:41:7c:b4:4a:6d:1f:8f:
17:84:58:3d:ee:2c:f6:ca:2c:7e:6e:f2:00:f9:94:f8:84:62:
3d:de:41:c1:98:b2:b2:94:03:30:d4:4b:b6:10:fb:92:ec:78:
2e:e7:58:a3:e7:91:41:80:c4:c5:38:2e:18:58:8f:b7:55:c7:
7a:53:a9:3c:10:75:35:04:0b:aa:9a:ff:06:bd:60:14:30:f4:
f8:ac:e3:61:1e:da:70:e4:d4:a4:d4:37:fc:ff:4c:37:ab:ef:
e5:3a:f2:4b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENx0pUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODAxZjIzY2U4MjFjMjY0ZDY3NzI3NTM2ZWMxODM1Mzc1OTRjNWYyMB4XDTIyMDEw
MTExNTk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjcwMThmODQ2YmM3
ZThkNDdhYzlhMTJlNmIxZWNlODQwNjBmMDczODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQbc6SHoK8r8ThIUnj21dinxD9aAqbtwBibD+L8QtGvc7CV
bRznNzN/kBYYqVy8bJty/NiCPF2aBiTA8hLdGRSc3+iL+vK/9mYpB60RJAP+NntD
XAtkikvDDb8O1Ntp8JjEbkuo3UU03CYvl/qk4Fv2CmrNlM6JaVq5xCPe2UhU5tY+
Z5ErxsqWUJvw8IyXmV46bX0d8WN2rM3GUrMnMktCbQn7fQ5cG95wUD90EuWCdLwV
oFBtWy4DD8Rof5UsahhW2kK1/1uHnvfWwB9qGxSKjTCkH3M5x5A/Sa5aS8sWa5Cb
swvVX9uR17Ff7DvloXNkaZTb4NYIC7HxH4pTbeUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS3AY+Ea8fo1HrJoS5rHs6EBg8HODAfBgNVHSMEGDAWgBToAfI86CHCZNZ3
J1NuwYNTdZTF8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZBSHlQT2dod21UV2R5ZFRic0dEVTNXVXhmSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8x
L3R3R1BoR3ZINk5SNnlhRXVheDdPaEFZUEJ6Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
ZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8xLzZBSHlQT2dod21U
V2R5ZFRic0dEVTNXVXhmSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWcwjANBgkqhkiG9w0BAQsFAAOC
AQEASjxuDa9ddml+/34TEgk+PhJViam6qkGuV2EBzPZUl0Lp1xbGwoKKLAtwE7aD
lxZ8fn0nmH2fOn1UFxKdouoTYGSVyX/NChKXB4/29HBXzd1X53sLhlMCr33ftGmD
DS4VslxwSAPQ1th8kvZuAyBUVWhkw6JmOIT7Fbb6pmgwE3lZx9jIGY460vYWT4kR
IhAwRpUCdCVQy8GwXpdBfLRKbR+PF4RYPe4s9sosfm7yAPmU+IRiPd5BwZiyspQD
MNRLthD7kux4LudYo+eRQYDExTguGFiPt1XHelOpPBB1NQQLqpr/Br1gFDD0+Kzj
YR7acOTUpNQ3/P9MN6vv5TrySw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org