Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CEoXlt0W7dBgMgFUnMjLqbfXGqE.roa
File: CEoXlt0W7dBgMgFUnMjLqbfXGqE.roa (raw, json)
Hash identifier: CPy5nu1uCmC2BG427shfYCAAGUzN1iKB6ZjmBeq7VpE=
Subject key identifier: 08:4A:17:96:DD:16:ED:D0:60:32:01:54:9C:C8:CB:A9:B7:D7:1A:A1
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16E63861
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CEoXlt0W7dBgMgFUnMjLqbfXGqE.roa
Signing time: Sat 01 Jan 2022 12:01:41 +0000
ROA not before: Sat 01 Jan 2022 12:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204720
IP address blocks: 37.18.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384186465 (0x16e63861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=084a1796dd16edd0603201549cc8cba9b7d71aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:37:7c:30:58:0d:52:f8:9a:cd:27:18:96:
c3:80:39:f3:1c:fc:36:08:c1:4d:66:b3:02:c3:8f:
0f:e7:00:c0:fe:22:3c:1d:00:15:b6:35:17:57:47:
c5:86:e1:6e:fe:52:5f:7b:66:fe:a3:47:2c:a9:10:
a7:c2:84:fa:fd:24:0f:53:bc:6e:fc:31:85:cd:fa:
ff:e4:06:80:4a:45:fa:11:97:d2:65:ee:ca:95:4a:
77:cc:b3:b6:20:b8:31:da:26:fc:01:a0:ae:0a:e0:
48:22:ba:ea:2a:6f:31:4e:54:ff:ba:e0:a2:77:87:
76:02:75:9b:a4:4d:61:56:b7:a6:4d:08:ea:cb:72:
bc:5a:6f:65:d0:be:ca:d2:25:cb:d0:58:4e:eb:a3:
da:40:6a:4b:52:3f:13:c8:1e:c8:c7:62:f7:f5:55:
54:6a:22:38:7d:59:0c:38:98:69:ce:11:f1:d4:86:
5c:ff:e8:52:dc:9a:aa:23:b2:ec:f3:72:5d:7d:97:
a0:6d:96:3e:d4:89:31:6d:ec:d6:fb:fb:2f:4e:e0:
55:2c:ee:54:d8:9f:c0:f3:04:dc:28:a9:65:48:8e:
d2:64:d0:5b:32:f1:56:d5:21:76:51:b1:e5:a9:e1:
fb:c9:72:9d:77:89:87:95:12:9f:14:a4:92:4f:d5:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:17:96:DD:16:ED:D0:60:32:01:54:9C:C8:CB:A9:B7:D7:1A:A1
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CEoXlt0W7dBgMgFUnMjLqbfXGqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.15.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7e:b9:7c:17:fa:5e:5d:d1:b8:02:37:eb:de:5b:45:18:3d:
44:f1:5c:23:42:64:3c:b5:0a:6f:0b:92:9a:9d:8d:c0:b8:fb:
0f:14:8e:31:f6:cc:1f:95:29:87:6f:da:dc:c2:88:e5:3e:3a:
4c:e9:80:c6:a4:32:03:19:da:0e:49:b5:10:c0:43:4c:5d:c9:
d5:06:fd:d8:7c:4c:6f:0a:6d:3f:88:73:f1:89:f1:03:77:ee:
eb:d5:eb:0e:8f:4e:cd:c4:b0:70:fb:85:58:be:9b:e1:83:59:
e7:75:39:aa:17:2e:56:7d:d8:5c:c1:3c:ef:3a:68:29:2f:3e:
c3:d4:ba:46:9b:3c:d0:5b:af:bc:2a:12:07:8c:ed:ea:96:40:
b3:55:b0:f1:ce:10:3f:56:9b:00:52:60:cb:82:ec:4d:02:ff:
a7:cc:7b:21:e1:22:47:00:fa:b5:90:0d:85:ee:82:34:42:18:
79:04:05:84:83:13:6e:9d:2e:de:25:81:3c:f4:14:63:9b:96:
90:79:4f:55:0a:18:3b:42:92:ad:15:d3:ac:d4:07:25:42:0d:
86:09:b4:70:a5:92:41:e9:31:fb:cd:25:6b:8c:89:92:b6:13:
73:19:f1:df:95:12:88:1a:c8:e2:12:8d:f8:73:78:88:aa:3e:
3d:cf:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org