Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rPOOEv7U8Z3FzrkJ7hlUAFayZPE.roa
File: rPOOEv7U8Z3FzrkJ7hlUAFayZPE.roa (raw, json)
Hash identifier: RJiF3XmhIoaXDna7uOPjkjHJvbd8UUPdCbE5v3IXGkM=
Subject key identifier: AC:F3:8E:12:FE:D4:F1:9D:C5:CE:B9:09:EE:19:54:00:56:B2:64:F1
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 17B0576F
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rPOOEv7U8Z3FzrkJ7hlUAFayZPE.roa
Signing time: Tue 22 Mar 2022 08:02:24 +0000
ROA not before: Tue 22 Mar 2022 08:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206153
IP address blocks: 37.230.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397432687 (0x17b0576f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 22 08:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acf38e12fed4f19dc5ceb909ee19540056b264f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:49:9b:d3:74:56:30:e3:d6:b0:08:a1:66:
0e:a1:19:9a:1f:b9:ff:99:43:0c:92:d2:8a:76:62:
79:d4:a3:4b:76:7e:6b:61:ca:37:59:26:ff:15:24:
5b:2a:81:2c:73:ce:65:dc:c8:93:f8:16:d4:5d:8b:
92:48:7d:0a:2e:c4:f5:06:bc:7a:74:20:ec:1d:03:
7a:33:5b:c0:8f:50:58:a9:16:39:d6:2a:da:15:8b:
d5:dc:ec:0a:a4:ea:db:d9:33:a1:f1:16:8d:b1:1a:
eb:8f:7e:fd:94:5b:8a:58:0c:98:b2:b0:c9:15:e3:
b9:f8:c6:30:f1:dc:43:3b:11:a0:3f:97:51:55:9c:
73:e0:e3:06:ec:95:5e:81:45:53:27:68:5b:5f:c5:
62:62:ab:5b:c7:9e:66:46:14:d9:3d:59:9b:3f:a6:
49:20:a8:25:f1:69:6a:eb:af:a5:4e:62:cf:a9:87:
e6:64:14:e8:22:ca:d8:c6:5e:11:be:9a:c0:51:0c:
31:4b:6a:15:4c:00:25:8b:ab:96:d1:bb:4a:0e:29:
e7:fd:25:b6:46:9c:76:14:c2:5d:af:e9:8f:23:15:
11:95:5f:e5:28:92:bc:9a:26:67:03:de:1d:70:eb:
10:97:14:e1:f9:73:29:f7:8d:61:ee:4b:3b:33:99:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F3:8E:12:FE:D4:F1:9D:C5:CE:B9:09:EE:19:54:00:56:B2:64:F1
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/rPOOEv7U8Z3FzrkJ7hlUAFayZPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:03:e9:16:d6:d6:01:e9:7b:41:da:ce:35:de:e9:48:d9:cf:
a3:61:7d:c3:9c:11:b6:9f:98:c9:64:c5:77:07:29:0f:60:89:
cb:55:a1:84:71:cc:f3:62:a4:3f:e2:8f:19:41:b0:9f:6a:5d:
b7:45:c9:4f:9f:1d:62:0f:87:4b:6c:14:a2:18:ed:7b:69:ce:
1b:00:56:9d:79:8d:00:88:f1:0f:21:67:06:a4:17:03:88:d3:
fc:0d:25:32:dc:60:e5:c9:bf:92:6d:81:62:cb:f0:7b:16:9c:
8d:76:a1:be:c4:98:65:50:75:08:88:aa:30:89:b1:f6:30:7f:
84:23:ad:16:02:47:bc:e0:a5:88:4e:04:6d:ca:c8:3f:38:0c:
54:ab:c5:c4:71:a1:cf:4d:92:9a:83:e5:f8:bd:b3:49:96:8a:
b1:97:43:90:57:7c:44:42:33:b1:14:b9:5a:e2:a7:23:4b:40:
15:71:b5:15:08:cc:b9:7e:aa:00:4f:13:3c:17:c5:95:3c:c3:
64:4d:30:27:b4:c8:a8:38:97:b7:82:53:e2:60:87:02:52:83:
00:3c:f3:a7:a9:f0:9c:79:e6:b1:13:0b:42:11:3a:b8:59:d0:
f0:23:96:d0:25:8b:a2:f2:fd:26:aa:c6:fd:6e:29:9e:26:1f:
55:19:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org