Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2tHiqV7hV6f3YzqdttCM281q8uk.roa
File: 2tHiqV7hV6f3YzqdttCM281q8uk.roa (raw, json)
Hash identifier: vq852f8H33wtWTt5dqUBo6nX+0BcQ/evrp7at3+yC3M=
Subject key identifier: DA:D1:E2:A9:5E:E1:57:A7:F7:63:3A:9D:B6:D0:8C:DB:CD:6A:F2:E9
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 17B08F2C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2tHiqV7hV6f3YzqdttCM281q8uk.roa
Signing time: Tue 22 Mar 2022 08:08:06 +0000
ROA not before: Tue 22 Mar 2022 08:08:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57064
IP address blocks: 37.230.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397446956 (0x17b08f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 22 08:08:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dad1e2a95ee157a7f7633a9db6d08cdbcd6af2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:85:53:c0:a4:2d:76:bd:a0:b4:e3:f5:f0:
7a:8c:8b:e0:f1:c9:9a:dc:2f:88:60:7d:4c:58:95:
1e:5d:2c:7b:d6:2d:1d:ef:00:e6:4f:ae:95:90:e3:
26:cc:11:e3:f0:ba:37:81:34:7d:a2:9d:a4:04:16:
45:45:f5:87:26:be:9a:70:97:83:99:0a:d8:12:b5:
83:34:7d:08:38:60:5a:49:e9:a6:08:50:cb:cd:b1:
f5:c4:04:2c:b4:c3:fd:dd:c6:98:e6:63:66:f6:58:
c4:40:14:ec:18:7e:9a:f9:4e:6d:79:13:e6:14:7f:
e5:97:6c:cd:a7:01:ec:72:08:df:54:a0:c5:e5:85:
77:b5:72:de:7e:5e:97:3f:38:54:ad:37:38:f0:21:
10:69:f4:9c:69:f1:35:51:89:e2:dd:59:cb:66:3b:
32:3b:f8:18:f0:25:b4:7c:24:fc:fa:ca:c7:c4:08:
98:cd:ab:eb:f9:89:a3:24:00:64:2e:25:4f:3b:72:
a2:7b:f5:53:b1:e8:7e:7d:64:46:c3:3a:b4:06:4e:
76:d3:8a:a3:6e:06:14:16:18:e2:0d:e4:48:bc:f2:
9f:4e:51:43:b1:b9:04:49:aa:1a:d6:f5:28:b9:50:
27:2b:1f:c4:8f:5b:8b:c7:33:3c:c8:70:d8:9e:8e:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D1:E2:A9:5E:E1:57:A7:F7:63:3A:9D:B6:D0:8C:DB:CD:6A:F2:E9
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2tHiqV7hV6f3YzqdttCM281q8uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.158.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9f:86:51:ac:15:9e:0e:a0:09:5d:b0:93:de:1b:ca:7f:1b:
17:a1:bd:b1:6f:b1:fc:24:06:21:74:8b:d7:0d:52:86:66:45:
6e:88:17:f3:4f:4a:f6:ca:d8:2e:e8:4c:6b:c2:72:d2:dd:c2:
da:60:e3:f3:dd:63:0e:9b:51:7e:a8:aa:40:1a:80:9d:05:42:
e8:7f:77:d8:4c:52:d6:d0:16:d1:37:b4:12:ef:32:07:4b:84:
03:56:7b:6c:d0:39:62:8b:27:8a:f4:4a:78:ff:33:38:18:75:
08:ad:dc:31:ba:b9:b1:17:a4:8f:c1:d3:30:59:01:03:5b:48:
43:1b:df:bd:ef:26:74:4d:16:8b:09:be:cf:34:a7:3d:40:85:
fa:d9:7d:f9:94:6a:cf:c1:c0:8a:1c:e9:62:5e:b3:9d:03:b6:
3a:3d:5e:0d:c9:ef:2c:ea:fd:e8:73:be:97:b4:f7:b0:0b:34:
ef:dd:7f:2a:d8:58:27:69:bc:be:22:c4:6f:7e:8e:9c:8f:af:
f5:25:aa:1b:6c:7e:50:77:5d:6e:19:34:b7:c1:c3:0a:37:e5:
0c:d1:37:9a:63:39:98:f8:5f:c0:53:6f:f8:ab:a2:b9:8e:3e:
d5:15:30:f0:1a:a5:02:41:66:e7:bd:ed:11:7c:93:21:ae:91:
40:5a:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org