Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/fqZOmqjQ70ABfBBEcB0mWBmy69Y.roa
File: fqZOmqjQ70ABfBBEcB0mWBmy69Y.roa (raw, json)
Hash identifier: m2rTjCsRg1LMfh3FH3/qJfRq/PFdnnBmNB9fUP/OuIs=
Subject key identifier: 7E:A6:4E:9A:A8:D0:EF:40:01:7C:10:44:70:1D:26:58:19:B2:EB:D6
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01848622E3C725B54E73CB9B60854569C582
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/fqZOmqjQ70ABfBBEcB0mWBmy69Y.roa
Signing time: Thu 17 Nov 2022 15:09:04 +0000
ROA not before: Thu 17 Nov 2022 15:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34702
IP address blocks: 37.252.4.0/23 maxlen: 23
176.97.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:22:e3:c7:25:b5:4e:73:cb:9b:60:85:45:69:c5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Nov 17 15:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ea64e9aa8d0ef40017c1044701d265819b2ebd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:e9:11:22:6b:63:7e:0d:d5:ee:31:89:ef:
c2:6c:5e:88:29:19:8b:51:c6:7e:53:37:9b:8f:95:
b9:c9:9c:e5:ce:1b:80:63:4c:b8:1b:e6:e0:ed:5f:
88:1b:50:2f:6a:32:41:a7:69:62:c4:66:74:67:89:
9a:e8:cb:45:fe:b0:1c:1d:02:9d:2d:8a:60:da:a1:
ca:b6:31:25:6f:1c:64:f9:34:36:ca:1d:29:a4:ac:
31:f2:9a:19:41:66:0c:4d:0b:97:92:3a:0c:00:f3:
f3:13:37:d3:ad:92:cd:40:9b:72:8e:20:3a:da:45:
37:28:85:d8:52:45:59:77:3d:4a:f9:82:2c:f3:72:
c9:52:53:a1:fb:c0:6b:88:35:17:29:00:11:b0:f4:
26:e0:1d:1c:0a:0b:6a:96:04:4e:0b:f3:7a:68:35:
91:67:f6:4a:c5:a0:8f:f0:a8:d0:a6:24:24:f7:53:
cb:05:85:30:7a:93:cc:90:6e:e7:14:1a:da:19:4d:
99:97:f2:1d:14:77:cc:1a:20:f8:69:18:08:1a:56:
3e:fd:5a:ee:ab:cf:68:99:0a:e2:07:0b:a3:e3:d2:
9d:2d:a6:28:4b:fb:4c:ee:0e:d6:f4:d2:e3:bd:eb:
64:6f:61:e4:8e:c5:05:8c:99:74:d4:40:55:77:21:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A6:4E:9A:A8:D0:EF:40:01:7C:10:44:70:1D:26:58:19:B2:EB:D6
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/fqZOmqjQ70ABfBBEcB0mWBmy69Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.4.0/23
176.97.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2e:2d:4a:db:68:19:2a:0e:a8:55:8c:c0:56:82:d6:55:b1:
45:80:be:e8:af:5a:64:00:cd:69:87:e0:cc:d2:f0:79:6f:80:
35:9d:db:41:82:f3:05:a1:1b:33:d6:92:5e:af:9b:0c:ab:f9:
9d:83:46:3a:22:d3:0b:0e:59:b4:58:4c:06:4a:43:45:c0:ad:
b4:91:c3:94:be:b9:ab:bf:8c:a6:dc:2c:b2:ac:67:69:ac:0b:
08:9a:a3:a9:64:14:6c:3c:c2:78:39:7a:53:c7:52:00:d1:55:
1f:55:cd:1f:c1:d6:37:9e:ef:99:27:7a:60:77:f2:2d:41:c5:
82:19:be:b6:b7:6a:8b:26:95:eb:9f:cc:fb:0b:f9:a0:a8:02:
43:bc:55:3f:9c:31:16:29:b2:99:60:19:63:ca:d5:24:76:8c:
9f:65:71:c4:4f:b2:d2:e6:3a:5a:13:de:01:a3:c4:e4:89:41:
4b:bd:c5:56:bd:4a:ea:97:57:f3:68:ad:df:33:14:c2:d8:89:
69:e6:30:18:ff:6b:e6:d5:62:9b:8d:72:39:05:3e:d9:97:54:
a6:96:aa:2b:cf:a5:7f:34:92:56:0d:7d:1e:fc:7e:04:21:a5:
54:24:a0:8d:fe:00:a7:1a:09:12:7e:bd:02:17:b1:cf:5c:35:
02:02:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-ams.rpki-client.org