Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/CwQMOj227DKv-2O-s6pyTmLc2UI.roa
File: CwQMOj227DKv-2O-s6pyTmLc2UI.roa (raw, json)
Hash identifier: V0Pc4Ndxar0hHhxesJ2D2BjuSuHWQXveKBC/BZRaiGs=
Subject key identifier: 0B:04:0C:3A:3D:B6:EC:32:AF:FB:63:BE:B3:AA:72:4E:62:DC:D9:42
Certificate issuer: /CN=e621f68eceda56f330e5067ed3ea52c7b982a8ae
Certificate serial: 014E9513
Authority key identifier: E6:21:F6:8E:CE:DA:56:F3:30:E5:06:7E:D3:EA:52:C7:B9:82:A8:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iH2js7aVvMw5QZ-0-pSx7mCqK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/CwQMOj227DKv-2O-s6pyTmLc2UI.roa
Signing time: Sat 01 Jan 2022 01:56:57 +0000
ROA not before: Sat 01 Jan 2022 01:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27176
IP address blocks: 37.16.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21927187 (0x14e9513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e621f68eceda56f330e5067ed3ea52c7b982a8ae
Validity
Not Before: Jan 1 01:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b040c3a3db6ec32affb63beb3aa724e62dcd942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:57:86:e1:10:46:86:eb:f0:2c:82:ae:b4:
81:42:f3:84:e2:26:d0:28:5f:f4:7c:7c:30:02:42:
c2:08:c7:5b:0c:af:a7:0d:4e:24:04:19:e8:4c:13:
4f:ef:7b:19:bc:1f:7a:d2:c8:7f:08:9f:c4:fd:0a:
d9:4d:fe:b2:a9:8f:fb:c1:a2:91:66:66:f4:66:b5:
fa:30:0f:c0:4f:43:1a:01:8b:42:ca:fc:0d:38:ad:
03:ad:fc:2f:e9:84:14:52:8e:38:b2:c1:e9:8c:b2:
c4:fe:da:80:57:3f:b7:36:7f:58:15:f4:ad:23:79:
b0:7a:c1:be:42:71:6f:b0:11:fe:1c:78:c3:3b:ca:
df:97:79:c7:ac:d1:61:62:0d:63:59:2d:72:76:8d:
51:3a:42:e1:c1:b7:dd:64:41:0b:64:15:51:9f:4e:
5b:eb:80:20:4e:fb:12:87:b1:b3:23:3f:6d:a7:3f:
9b:12:9d:c7:e2:9b:c5:31:cb:0e:32:4e:6b:a7:21:
4b:07:71:89:96:c4:d2:90:4d:12:6e:1f:fc:10:fd:
a0:3e:12:02:fb:f1:36:82:89:87:cb:76:4a:49:e8:
4b:de:4c:73:6d:83:9e:f9:29:2b:95:e5:60:dc:61:
35:f7:2e:2b:30:87:14:72:24:0f:5e:e3:0b:2b:99:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:0C:3A:3D:B6:EC:32:AF:FB:63:BE:B3:AA:72:4E:62:DC:D9:42
X509v3 Authority Key Identifier:
keyid:E6:21:F6:8E:CE:DA:56:F3:30:E5:06:7E:D3:EA:52:C7:B9:82:A8:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iH2js7aVvMw5QZ-0-pSx7mCqK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/CwQMOj227DKv-2O-s6pyTmLc2UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f26afa-f76a-4474-9223-cd0fa1063e13/1/5iH2js7aVvMw5QZ-0-pSx7mCqK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.76.0/24
Signature Algorithm: sha256WithRSAEncryption
24:66:6e:f8:e1:0c:c8:51:ea:23:e1:fe:21:3d:27:8c:b8:dd:
d8:f8:2e:17:fd:02:17:38:64:13:a8:16:54:82:e6:64:c6:df:
36:06:50:7c:b8:0d:03:86:54:63:a7:b4:9f:bf:15:11:f3:16:
1b:7a:43:22:f4:b0:2c:26:cb:e3:c0:fd:3c:38:1f:2e:c3:f8:
6e:8f:59:c2:85:13:c4:03:7f:01:7c:59:04:b9:af:b7:a2:dd:
c2:d7:8d:34:1a:7b:03:08:cd:f6:1e:4c:51:e2:28:35:77:f5:
57:1f:1a:1e:f8:e5:0a:a2:1c:46:e1:36:a6:b0:65:9a:f4:20:
a2:e4:a4:1b:e3:b9:94:bf:ff:29:c0:c7:2a:ac:0c:5a:38:4c:
fa:c3:f5:56:46:b1:85:cf:98:c9:48:5e:46:b6:d2:30:79:66:
5b:5d:07:88:0f:b9:72:31:92:28:6c:53:9e:3b:37:79:c9:82:
2b:6f:ac:57:02:8b:69:97:b0:8c:1b:e8:0d:a5:45:bf:2c:c1:
eb:ee:93:b7:96:b3:80:35:d0:65:c0:f6:bf:a6:d3:d4:c4:4d:
19:0e:45:d8:fe:70:c5:aa:b1:6e:f6:07:b6:fc:ad:28:35:28:
18:e1:e1:c2:37:3f:33:40:ed:45:57:34:4e:39:d4:f0:1a:fe:
3e:59:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org