Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/VQ09hJI7DkQb-isY5J2XtOQhIKY.roa
File: VQ09hJI7DkQb-isY5J2XtOQhIKY.roa (raw, json)
Hash identifier: zOzviRkK3tdBArdHayMupoLx9jRVhSJQ5eH82W/8H38=
Subject key identifier: 55:0D:3D:84:92:3B:0E:44:1B:FA:2B:18:E4:9D:97:B4:E4:21:20:A6
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 17B52F03
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/VQ09hJI7DkQb-isY5J2XtOQhIKY.roa
Signing time: Tue 22 Mar 2022 08:56:13 +0000
ROA not before: Tue 22 Mar 2022 08:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58071
IP address blocks: 37.230.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397750019 (0x17b52f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 22 08:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=550d3d84923b0e441bfa2b18e49d97b4e42120a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:92:67:b3:4f:1d:39:21:dd:95:03:22:a5:
9a:e1:9b:e1:ea:55:11:06:cf:0f:e4:d3:29:77:e3:
be:7f:36:87:7f:13:98:73:39:df:99:69:16:7c:26:
49:b8:e6:29:ec:a5:3f:9a:3d:78:b7:42:31:65:ab:
5c:6e:b3:8a:31:41:77:cc:6a:09:b7:4b:d5:e1:2c:
03:cc:88:d5:47:0f:46:4e:f1:c5:fc:c7:db:b7:19:
c1:da:30:48:ce:f3:2c:28:f4:45:71:ac:8c:c9:fa:
62:29:af:44:65:39:3c:81:7e:f2:f0:ae:9a:f1:13:
e1:e4:14:44:59:ee:71:b5:56:5b:18:68:e9:11:7f:
75:64:80:2c:80:a7:79:bc:83:a2:59:ce:32:78:b5:
83:31:c9:8f:dc:41:16:bd:50:54:4a:0d:0f:de:13:
6a:5a:d8:fd:d8:b1:e9:d5:41:d7:38:c9:01:1d:83:
0f:3d:ad:62:36:f2:e2:4a:0b:1f:10:a2:2e:1b:35:
ca:55:4f:01:a3:6e:56:ca:7d:77:5e:b9:8e:53:b6:
9a:e3:79:7b:dc:49:bd:e6:1c:6c:e6:65:3d:6e:84:
0c:89:97:43:81:f9:47:4e:35:6e:ea:09:7b:46:5f:
e0:ff:e5:4d:9d:f7:98:ca:5f:ff:48:e1:12:89:4f:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:3D:84:92:3B:0E:44:1B:FA:2B:18:E4:9D:97:B4:E4:21:20:A6
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/VQ09hJI7DkQb-isY5J2XtOQhIKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:6c:c4:12:76:b1:48:3e:77:e4:0d:8e:37:60:2f:81:8f:
62:29:54:50:32:22:d3:9e:00:c1:5e:3c:13:de:4d:76:ae:58:
59:ba:d2:32:0e:45:11:d4:66:b6:d6:8a:1f:92:7e:d4:01:7f:
2a:28:0d:1e:80:bb:dd:04:3b:e4:9b:d9:11:c0:d1:01:45:d7:
a8:89:b5:5e:63:a9:8d:ec:1b:62:37:7b:a1:96:b2:90:66:fd:
3e:91:cb:04:9c:09:2b:09:6b:0d:af:6b:05:c9:f7:48:9f:dd:
a8:40:77:fe:92:19:4d:8d:cc:3d:0e:36:79:c6:e3:7d:9f:9f:
1c:a5:63:42:a5:db:90:c8:ea:e8:1e:8f:93:84:a1:37:f2:bf:
ba:90:97:ea:13:cf:74:ff:19:c8:d4:0b:83:b2:c1:0e:b3:60:
1f:6a:1e:f0:b4:a1:2c:39:7b:a2:aa:33:18:1e:e7:4b:46:d6:
c9:3d:dc:9c:db:a9:d0:dc:fc:33:cc:52:81:18:b5:63:c5:d4:
df:0d:a4:1b:c0:53:f3:81:a4:2f:a0:3e:9a:c8:de:ed:8a:6d:
6b:b9:db:5a:86:bd:b3:b4:c7:5f:e0:52:be:b6:94:96:30:78:
67:d5:b2:98:b5:ed:59:80:15:ed:d1:d6:2c:e6:66:73:44:32:
35:d6:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org