Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Dst0zShcnnMcgNWNKVHa2MAhMPs.roa
File: Dst0zShcnnMcgNWNKVHa2MAhMPs.roa (raw, json)
Hash identifier: 8onFMLLl24h4hS7bR3ckX+VQ9RY6UCbYbIlELodpSkk=
Subject key identifier: 0E:CB:74:CD:28:5C:9E:73:1C:80:D5:8D:29:51:DA:D8:C0:21:30:FB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16E68F3B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Dst0zShcnnMcgNWNKVHa2MAhMPs.roa
Signing time: Sat 01 Jan 2022 12:01:41 +0000
ROA not before: Sat 01 Jan 2022 12:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205675
IP address blocks: 37.18.103.0/24 maxlen: 24
37.18.24.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384208699 (0x16e68f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ecb74cd285c9e731c80d58d2951dad8c02130fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:51:cc:39:4e:f9:2d:8b:27:53:f8:54:c8:
31:e9:dc:98:e2:03:d9:e5:41:51:47:e7:a0:bb:f2:
e6:92:d6:fb:a1:c5:90:73:89:7e:45:77:fb:8b:a3:
4e:45:29:62:47:67:6d:ef:63:6c:7f:e3:29:80:fb:
f1:ea:ca:a6:0e:8c:7d:82:dc:e6:67:68:42:56:22:
e8:37:93:ee:4d:46:a5:f6:e2:05:05:1a:f5:fb:d5:
1c:f4:4e:c2:f7:16:6b:b7:b5:22:9b:73:0e:d9:28:
bd:4f:54:4f:ac:7a:5d:e5:73:5d:ce:80:d0:33:b1:
4d:62:58:d4:0a:eb:74:b1:5d:5f:b7:74:c3:76:51:
9e:13:56:09:34:76:6e:35:d1:f8:38:ef:66:5d:56:
c3:9e:46:e8:ef:ee:01:55:4c:37:4b:18:cc:3b:c7:
18:aa:6e:f6:af:87:a0:f8:73:87:db:36:03:7b:66:
7b:18:98:68:2c:8d:f2:52:8a:7d:87:bd:0f:f0:96:
d7:24:0a:b8:5b:5d:33:2c:ea:dd:3f:67:d5:9d:8b:
ac:53:e4:a6:b6:de:b2:cf:b0:f9:5e:ef:26:94:89:
76:9b:c3:6b:ee:36:4e:c8:33:8c:4d:d4:a6:63:95:
31:b7:63:31:f8:18:63:61:10:04:07:a8:2c:69:d2:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CB:74:CD:28:5C:9E:73:1C:80:D5:8D:29:51:DA:D8:C0:21:30:FB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Dst0zShcnnMcgNWNKVHa2MAhMPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.24.0/24
37.18.103.0/24
178.170.172.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:0f:ca:e6:cb:67:8d:c0:c6:ac:f3:53:69:3d:a0:34:e4:59:
ff:41:a9:c2:d1:19:ca:61:f8:9a:8a:09:f8:c6:37:f0:72:70:
15:e0:7e:c8:61:87:01:47:1b:b0:6f:7c:fa:0b:e8:d9:a6:89:
36:e3:9a:d0:5d:1f:24:dc:49:aa:da:be:de:c6:5d:cc:78:04:
dc:f5:b4:d3:89:70:96:55:39:7f:f2:f0:61:46:62:ce:03:c8:
64:4c:d3:81:fe:03:cf:32:f4:8f:83:eb:fa:56:c3:6a:c3:12:
8a:1a:9f:c0:85:96:38:bb:35:0d:cc:6c:05:8d:77:be:5a:b6:
cc:f3:37:84:ac:06:76:26:34:02:9a:fd:c2:22:52:ea:aa:05:
b4:dc:94:42:d2:46:37:ab:0e:a5:0b:79:3a:f6:fa:0b:67:eb:
9a:58:11:4a:69:6e:5d:3e:06:00:12:87:a0:81:18:6d:02:24:
f8:41:1c:b2:26:df:fd:59:b9:89:40:a4:8a:11:76:c2:d9:63:
e7:0c:97:53:a4:ae:e2:d4:33:ee:63:1a:c8:9c:83:13:2f:f8:
b3:36:b3:cc:b0:7e:8a:e7:05:45:0f:03:d2:54:2d:23:db:88:
aa:ad:c3:41:7c:fd:f6:cb:b3:91:7d:22:cb:d9:41:4c:f0:28:
59:d3:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org