Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/pACH_gg9nsjIJIZbJpGoD0dbZpw.roa
File: pACH_gg9nsjIJIZbJpGoD0dbZpw.roa (raw, json)
Hash identifier: E87nh31urKt6lDzO55CJerkxyczCWWWkUMnOhyuvSWc=
Subject key identifier: A4:00:87:FE:08:3D:9E:C8:C8:24:86:5B:26:91:A8:0F:47:5B:66:9C
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 29242196
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/pACH_gg9nsjIJIZbJpGoD0dbZpw.roa
Signing time: Sat 01 Jan 2022 06:59:47 +0000
ROA not before: Sat 01 Jan 2022 06:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198558
IP address blocks: 37.0.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690233750 (0x29242196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jan 1 06:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a40087fe083d9ec8c824865b2691a80f475b669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:e9:a6:d8:14:a7:2d:d7:32:2a:23:b1:ca:
97:2f:72:db:d2:c5:83:46:a4:3d:0b:c0:51:34:d9:
c2:99:3c:67:08:6d:69:ab:e2:a1:c0:37:9e:51:b0:
60:d8:e5:1d:48:22:7c:a4:ac:94:a0:d1:fb:e4:6d:
88:3d:a6:04:4d:cc:5e:85:90:0a:43:53:21:19:93:
c3:61:1b:8a:fc:71:71:5f:e4:82:b0:cf:e3:36:96:
cf:e8:cc:55:b5:10:69:ff:7e:a2:29:d5:a7:4f:24:
c7:ee:41:9f:3c:04:44:ab:10:4a:88:07:a4:02:96:
3d:3d:37:e5:7c:e8:e0:5d:93:39:2c:e3:91:8a:e4:
6f:76:eb:cc:70:ce:59:c0:96:16:6f:b6:d1:b3:fb:
f1:cd:fd:a4:ad:ff:0a:bc:e4:10:b0:77:10:56:01:
d5:0e:39:7b:0b:dd:87:f2:ad:8b:31:37:58:e6:9a:
2d:42:c5:93:a4:34:e4:bf:97:ed:3e:32:ac:d0:16:
17:9f:f7:f4:ba:5a:b2:a2:ce:37:29:8e:5d:69:d6:
0c:c3:2c:ec:a2:82:c2:1d:f7:08:06:89:ff:0f:6c:
52:25:c1:56:6b:5d:70:3f:69:dc:91:43:15:10:b5:
2f:3c:38:fc:a6:67:49:aa:8e:58:dd:40:a2:dd:de:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:87:FE:08:3D:9E:C8:C8:24:86:5B:26:91:A8:0F:47:5B:66:9C
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/pACH_gg9nsjIJIZbJpGoD0dbZpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:64:16:6d:24:4b:b0:33:c6:a0:a5:76:e3:2e:a6:21:36:db:
45:4c:a0:cb:a1:fe:37:fa:32:15:5c:b0:4b:99:12:25:f7:dc:
0d:7e:5a:58:dd:c4:d9:e8:0f:a5:a0:fb:76:1b:d8:13:a7:26:
67:ee:41:60:31:bd:64:57:18:b0:9d:e1:db:f4:22:5d:c5:60:
1d:9a:22:a4:cc:2f:c2:28:0f:38:85:e8:e5:50:b4:64:34:6f:
4f:cd:05:35:8f:3c:b6:63:01:d0:d4:5f:6c:73:c3:e1:90:97:
20:94:21:b9:d3:0e:21:4d:f5:ad:cd:60:72:2c:17:18:33:09:
a3:ad:1a:18:fd:82:3f:a3:1d:42:e5:23:a8:ba:7b:ba:f1:e4:
31:33:e1:fd:aa:1c:bd:c2:2b:50:80:f1:a0:ff:4c:5e:ea:f5:
79:37:d1:1e:ea:73:4e:12:37:6b:39:3f:4b:37:36:4d:ae:98:
89:e5:04:4d:9d:a6:a3:e9:3f:5c:65:72:f8:91:40:4d:fb:7e:
00:c1:32:ee:f5:77:a0:21:e0:38:a8:62:91:19:05:8a:99:eb:
68:00:96:02:30:11:03:c1:b9:2a:75:dc:df:3c:64:f0:7c:e3:
3e:46:e4:50:40:43:f9:d8:24:6f:9d:29:df:20:7e:61:a6:f1:
20:bb:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:47 2024 by rpki-client on console-ams.rpki-client.org