Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/bvU4FUhP0KTu0OygWz_bOhXFjjY.roa
File: bvU4FUhP0KTu0OygWz_bOhXFjjY.roa (raw, json)
Hash identifier: FdxPzEbX2MNI2BWuKTOiIKGtHnn1cyvKu9T87kxK9mg=
Subject key identifier: 6E:F5:38:15:48:4F:D0:A4:EE:D0:EC:A0:5B:3F:DB:3A:15:C5:8E:36
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 01837EED4D82E5F3F4260F15E005D12CD5C2
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/bvU4FUhP0KTu0OygWz_bOhXFjjY.roa
Signing time: Tue 27 Sep 2022 12:30:24 +0000
ROA not before: Tue 27 Sep 2022 12:30:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136258
IP address blocks: 37.143.130.0/24 maxlen: 24
37.143.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:ed:4d:82:e5:f3:f4:26:0f:15:e0:05:d1:2c:d5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Sep 27 12:30:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ef53815484fd0a4eed0eca05b3fdb3a15c58e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:3a:af:05:df:02:d2:4b:f9:40:c8:9e:75:
0d:d9:c9:4c:e2:8f:5b:48:06:b0:f7:af:3d:6a:ff:
51:ba:19:77:cd:99:12:f1:0d:ec:40:f2:8e:55:05:
c2:20:2d:84:5f:12:b5:15:12:25:da:4e:72:e0:cf:
21:ff:88:d8:18:a1:eb:4e:11:68:c0:99:4d:87:27:
b4:df:09:7e:ee:24:cb:a3:ee:5a:90:de:c6:0a:8f:
be:d1:2d:53:81:69:f7:fa:d9:f3:83:bc:c6:72:32:
85:f4:b8:7e:f8:c5:b5:c6:13:6c:7d:46:ca:e3:73:
7b:d0:1b:55:ab:99:96:b9:17:ad:b8:67:ab:c9:28:
77:0c:3e:0f:51:b7:ea:cd:3c:64:96:cd:18:bb:b7:
ab:a9:ed:cf:09:0d:21:1d:df:e8:28:bd:fc:a8:f8:
9c:72:92:aa:59:dd:4c:36:46:2f:5d:5d:85:60:02:
45:ef:92:0d:79:98:c1:1e:08:45:7f:2e:5c:9e:ff:
3a:4b:30:12:4e:c1:98:ee:72:4c:63:a1:ea:c3:3e:
e9:26:ab:d8:9c:39:9b:b7:82:0d:69:12:16:50:ee:
d6:bf:c3:9d:b9:39:77:c4:99:ea:35:09:d3:f9:cb:
e0:14:91:45:2c:b2:83:09:32:31:7a:93:79:17:18:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F5:38:15:48:4F:D0:A4:EE:D0:EC:A0:5B:3F:DB:3A:15:C5:8E:36
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/bvU4FUhP0KTu0OygWz_bOhXFjjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.128.0/24
37.143.130.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ce:62:28:83:bf:af:79:eb:ff:0c:53:95:e7:9c:bb:fe:42:
4e:bc:0b:7b:94:65:1a:c3:6a:d4:95:bb:6e:e2:bc:b8:c1:db:
20:ad:09:04:de:79:06:5f:58:7a:6b:10:93:f9:73:45:fe:bf:
26:1d:61:6a:aa:25:26:45:4d:90:4f:3a:d0:90:39:35:69:b1:
3b:2b:15:0b:92:ba:2f:04:08:b1:5c:a9:2d:3a:06:39:2a:8c:
24:90:25:6f:69:28:13:92:e3:c7:29:20:2e:c9:21:db:65:cc:
f3:ff:f9:96:7a:bc:cd:cc:85:b2:01:e6:69:1b:79:d1:b1:4f:
6a:7c:9b:5d:d2:02:c8:f0:c7:7b:ba:44:6f:51:6e:d4:80:8b:
ae:aa:ea:9a:94:e2:81:e0:41:d0:31:cf:4b:3e:2e:dd:07:7f:
b2:44:66:94:c3:b5:ea:fb:1d:02:44:3a:33:c3:1e:d9:53:b5:
f1:f9:8a:e0:c3:af:50:c8:86:9f:f5:28:a4:92:cc:01:62:6d:
03:b1:f1:a1:ee:ef:9c:2a:ef:8b:6d:7c:fe:bc:11:a5:62:a7:
b9:b4:3e:f7:bc:53:fc:f5:0c:64:1e:3a:a3:15:c3:21:8e:5c:
d2:cf:1e:0e:a6:dd:9f:c3:db:de:d2:0f:80:5b:ca:56:41:6b:
0c:82:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:35 2023 by rpki-client on console-fra.rpki-client.org