Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Erhg3sMYOTG1WeQbZBAdiXrkqJs.roa
File: Erhg3sMYOTG1WeQbZBAdiXrkqJs.roa (raw, json)
Hash identifier: rVN/yjfcAXvcMSylzk6vMmVfE1v2k9Qv7y4LQLFcM5A=
Subject key identifier: 12:B8:60:DE:C3:18:39:31:B5:59:E4:1B:64:10:1D:89:7A:E4:A8:9B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16EFB9BE
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Erhg3sMYOTG1WeQbZBAdiXrkqJs.roa
Signing time: Sat 01 Jan 2022 12:01:46 +0000
ROA not before: Sat 01 Jan 2022 12:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212539
IP address blocks: 37.230.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384809406 (0x16efb9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12b860dec3183931b559e41b64101d897ae4a89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:1c:6b:c0:29:41:6c:5b:b9:62:40:73:f3:
d4:39:ec:ab:3f:53:84:80:77:11:5a:3f:cc:11:5b:
92:e7:30:f1:0c:82:31:7a:5f:98:64:0d:c6:98:e8:
6b:90:23:df:4e:ac:2b:57:fc:10:47:0f:f0:52:e6:
2a:19:0d:05:e1:8d:40:08:fa:84:d3:7e:40:c3:f5:
38:81:11:b5:75:33:09:71:08:16:ad:b8:c5:8a:98:
7c:0c:61:e6:0f:2e:51:c5:4a:ab:c2:7e:95:8e:44:
3f:41:a8:a3:16:c7:97:90:83:93:3f:09:8f:c8:7a:
93:de:b3:6e:83:f2:87:47:90:6a:b6:71:f1:75:3a:
3d:47:7f:d0:b7:0e:1b:3d:72:13:e9:c9:6b:57:79:
c5:60:a0:b8:da:7b:68:ec:b6:1f:4e:11:65:50:ef:
51:7e:f6:68:02:35:7c:ad:f3:22:df:0c:2b:93:16:
19:57:46:d7:15:3b:8f:2b:02:d2:fc:07:66:30:63:
1d:27:a7:62:e5:5f:5a:3e:99:0a:11:22:c0:52:5d:
71:3e:e3:55:1f:23:34:da:b8:e2:9e:c5:21:24:9e:
1c:01:56:fc:99:31:db:58:ce:93:ad:ef:fc:8a:5f:
90:c3:16:d3:74:c3:10:78:cf:27:1e:c3:21:bc:8f:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:60:DE:C3:18:39:31:B5:59:E4:1B:64:10:1D:89:7A:E4:A8:9B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/Erhg3sMYOTG1WeQbZBAdiXrkqJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
54:59:74:40:f1:2a:d1:fd:cf:18:3f:7f:24:82:0e:88:b8:35:
80:4f:0d:a8:bb:27:32:d3:be:02:27:54:6a:ae:62:e0:65:37:
78:80:ee:16:1c:ed:2a:dd:4c:ed:8f:df:1c:d0:d5:ce:43:b3:
c7:42:bf:84:93:b4:f6:1d:f6:50:81:75:1b:b7:5c:30:54:87:
58:40:bd:c1:40:1d:dc:ee:a7:1c:d4:6c:d5:08:e9:eb:9e:83:
e8:08:b2:53:8c:38:44:bb:42:ba:71:09:14:1f:ad:a6:e9:91:
51:2a:e5:73:77:03:fe:13:ac:c3:f3:5f:7c:81:b6:14:8d:4b:
1c:08:e6:c1:13:f9:94:44:09:8e:f0:92:97:9f:81:72:bb:9e:
cd:a8:7c:d4:ae:d4:bb:87:5d:46:ca:ae:43:0b:d5:e6:6f:f8:
f4:21:18:d5:27:da:55:24:7d:72:6a:d7:f5:92:f7:83:bc:9a:
58:99:10:da:14:04:a5:97:ec:05:c0:3f:08:8e:b7:ec:b2:59:
fa:f0:e8:43:c2:0f:c7:52:61:5c:b5:e9:86:b7:73:76:91:e9:
83:dd:15:2e:75:8d:dc:56:c6:3a:e4:80:cc:0b:ed:90:b9:ba:
e8:75:72:47:5f:e8:b4:ed:62:96:d9:b7:f7:d7:3f:14:d7:3f:
1a:e5:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org