Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/e29EyiXYjPANzAPPAcOEi1tGorI.roa
File: e29EyiXYjPANzAPPAcOEi1tGorI.roa (raw, json)
Hash identifier: OaWg9bp5E5mp6G/j/fVGbzoMOIyCXrDY7QOfU/dn1vI=
Subject key identifier: 7B:6F:44:CA:25:D8:8C:F0:0D:CC:03:CF:01:C3:84:8B:5B:46:A2:B2
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 0184ED33BA259437BDEA2AA9DDB9D3C565D9
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/e29EyiXYjPANzAPPAcOEi1tGorI.roa
Signing time: Wed 07 Dec 2022 15:28:20 +0000
ROA not before: Wed 07 Dec 2022 15:28:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200697
IP address blocks: 192.166.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:33:ba:25:94:37:bd:ea:2a:a9:dd:b9:d3:c5:65:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Dec 7 15:28:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b6f44ca25d88cf00dcc03cf01c3848b5b46a2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:21:b3:b0:99:3c:70:f0:e6:e7:99:6d:51:
34:e9:b6:69:ef:9d:4e:9a:95:16:b2:01:70:5c:f9:
1a:a5:d2:a9:35:17:00:11:13:75:fb:1b:4f:dc:92:
d2:29:d2:80:d8:da:6c:9c:f8:af:de:b1:c7:a4:0b:
31:f2:be:3a:55:95:f5:b9:7b:c7:f2:8e:1f:f7:f7:
f6:43:68:cf:60:c7:14:e6:63:0f:33:53:40:73:5a:
4c:36:d4:40:27:37:41:11:80:be:70:dd:a2:d2:61:
a7:00:c0:39:4e:89:c6:2b:3b:4b:ff:4c:fe:30:88:
bd:b2:46:d7:e1:0b:2a:bf:82:1a:95:27:4f:58:c5:
0a:d2:9a:a6:c3:75:cc:9b:82:f2:46:e2:69:b6:71:
0b:5d:7b:e7:2e:8f:e7:17:ef:f2:60:0c:38:f3:8b:
b6:a2:ab:38:ee:4e:c3:04:c5:e6:a5:d3:e9:6f:e2:
69:b4:c7:d3:d2:17:03:3f:f9:b6:6f:b3:02:69:f5:
5b:09:ca:d6:2f:aa:d6:94:f8:37:34:ab:dd:82:d6:
b9:51:93:d9:ed:3a:65:4e:f9:85:05:54:42:1a:b0:
30:56:64:0b:0f:61:ed:b7:21:18:38:bc:04:7c:ff:
15:7e:f5:df:e1:c4:49:5f:80:22:8c:7f:b5:a7:ca:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6F:44:CA:25:D8:8C:F0:0D:CC:03:CF:01:C3:84:8B:5B:46:A2:B2
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/e29EyiXYjPANzAPPAcOEi1tGorI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.37.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:35:8a:eb:24:8a:56:95:a0:56:ee:f2:17:42:05:ac:83:38:
d9:37:b7:43:33:25:c7:0f:f9:06:6c:b2:66:47:b1:92:78:84:
4f:30:03:28:38:3b:e9:d1:51:13:f7:19:4c:60:41:eb:6b:6e:
95:a9:3e:78:1f:b4:1c:c9:1d:00:d2:62:6b:79:ae:7c:98:2d:
bc:eb:9f:15:70:0f:56:b2:af:a0:3a:b2:b0:3f:50:e8:fe:02:
cd:cc:88:d5:11:24:c1:89:ee:b6:3b:4b:9e:e6:6f:4e:7e:93:
1d:bb:08:b4:a6:ee:f3:e3:af:55:6c:85:e9:ef:a6:18:53:32:
e2:26:57:01:6c:14:84:21:34:f2:10:c3:09:2a:8f:fe:87:d6:
85:35:10:02:5e:79:bf:ae:7d:13:40:81:35:36:e4:ec:80:dc:
c0:56:91:28:0e:c4:0a:6b:1c:4b:26:02:6f:8b:ea:db:cc:ee:
d3:a1:03:47:30:61:11:3c:de:c5:14:e6:f2:2a:6f:b8:a4:63:
96:ea:e6:4d:48:57:be:60:91:5c:41:c6:cf:a7:d6:b3:04:38:
42:c8:4d:d5:fd:73:74:b8:01:46:5b:25:73:f2:12:c3:2b:f3:
16:f2:5b:ed:fe:00:8e:22:51:79:7a:de:37:d2:b1:c1:97:57:
2e:3a:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:04 2024 by rpki-client on console-fra.rpki-client.org