Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8RvmgvNRmMsT23RC1Tw0GHRnrto.roa
File: 8RvmgvNRmMsT23RC1Tw0GHRnrto.roa (raw, json)
Hash identifier: klVeMroPktXDO6u6vE81uoXPpUvnsX/P3srFj/nrJYw=
Subject key identifier: F1:1B:E6:82:F3:51:98:CB:13:DB:74:42:D5:3C:34:18:74:67:AE:DA
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018474D20655521E6FB7F79D437B9E21E908
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8RvmgvNRmMsT23RC1Tw0GHRnrto.roa
Signing time: Mon 14 Nov 2022 06:27:11 +0000
ROA not before: Mon 14 Nov 2022 06:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 37.34.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:d2:06:55:52:1e:6f:b7:f7:9d:43:7b:9e:21:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 14 06:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f11be682f35198cb13db7442d53c34187467aeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:92:41:21:25:79:aa:6e:40:a1:2d:eb:e4:
87:9f:06:37:e5:d4:c2:1c:d8:08:1a:46:b0:42:92:
79:e2:cb:22:dd:94:d6:67:30:fe:1c:7a:c0:d1:e9:
b0:25:a5:4f:c9:ad:4c:3c:2b:4a:26:b8:56:94:c0:
32:8b:32:93:4e:43:98:a8:98:5a:3b:f2:79:b3:12:
85:ad:d7:d8:e4:20:94:05:ce:31:ad:f9:6b:b6:eb:
9b:fa:d0:55:e2:43:dd:ff:93:4a:d1:3a:ac:ff:23:
ec:81:d1:22:84:6b:05:90:d4:4e:0c:07:ec:8e:e4:
17:26:87:d4:14:4e:f3:d7:6e:7a:9c:1b:43:ba:80:
73:65:3c:c5:7f:01:4d:66:fb:21:1b:1c:b9:7b:88:
bd:30:cc:1f:43:c9:4c:12:37:46:63:63:e1:a3:d5:
fc:9c:2d:04:da:9d:e5:36:77:4c:14:eb:c6:18:67:
27:1e:6c:1d:bb:97:57:66:53:7c:84:ca:f3:43:ed:
fd:43:50:98:1c:b3:88:43:fa:a1:71:c0:e8:22:84:
91:22:3c:78:17:33:17:bc:f4:d3:4f:50:f2:9d:46:
95:88:66:d3:3a:6f:a0:33:4b:82:8b:7d:7f:d1:a0:
a6:aa:e6:60:36:11:43:30:2e:15:ba:7b:7c:2c:51:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:E6:82:F3:51:98:CB:13:DB:74:42:D5:3C:34:18:74:67:AE:DA
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8RvmgvNRmMsT23RC1Tw0GHRnrto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.80.0/21
Signature Algorithm: sha256WithRSAEncryption
78:df:c1:25:60:21:fc:c5:ad:2a:1f:f3:ba:c7:b1:89:1c:4a:
0a:7c:6d:1f:44:1b:d5:44:0a:1f:eb:7b:c6:31:e2:79:31:d4:
3f:e0:4a:a8:29:27:50:04:0d:f3:a7:cd:5a:70:61:46:83:9e:
7c:a8:a1:4a:9d:0d:1e:e3:be:80:28:f6:5b:95:d8:35:10:de:
46:94:3b:f4:9b:9a:a7:f0:a3:f4:34:6c:53:d1:bb:5c:69:40:
62:6e:c6:39:bb:a4:5c:81:b0:6d:71:aa:98:93:67:0c:53:5e:
56:74:15:b7:e3:0b:bd:91:4d:4f:d3:b9:f3:cc:e0:76:4c:ec:
3d:43:d9:5c:d0:ec:41:9c:e8:af:4f:e7:47:92:97:6b:c1:56:
37:d4:68:16:35:0e:0e:af:a0:c4:1f:42:ec:60:a4:45:c3:15:
e4:2f:0d:53:b5:8a:b5:14:4e:e2:f0:44:ff:fd:37:6a:d2:82:
51:e3:32:ab:9b:d3:82:50:15:c2:4b:13:68:8c:82:11:14:a3:
ce:7f:1a:6d:db:09:b6:7b:67:e8:ab:14:c7:cc:82:50:e6:83:
3f:95:fb:02:29:fc:2a:46:52:ef:48:d7:4b:39:14:57:da:17:
39:bd:d1:2b:55:eb:5d:3f:f1:6f:30:d4:1a:f9:90:bb:ff:3b:
8e:e2:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:46 2024 by rpki-client on console-ams.rpki-client.org