Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ouzA0cIXdgTvQBYcLbIDjtEQu_E.roa
File: ouzA0cIXdgTvQBYcLbIDjtEQu_E.roa (raw, json)
Hash identifier: 8aeOY7jhCmqp+CZ43rS5Ds93uuXFdl/x5C+z7tjIWeg=
Subject key identifier: A2:EC:C0:D1:C2:17:76:04:EF:40:16:1C:2D:B2:03:8E:D1:10:BB:F1
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 03C6F7D8
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ouzA0cIXdgTvQBYcLbIDjtEQu_E.roa
Signing time: Sat 01 Jan 2022 09:02:42 +0000
ROA not before: Sat 01 Jan 2022 09:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201909
IP address blocks: 37.35.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63371224 (0x3c6f7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 09:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2ecc0d1c2177604ef40161c2db2038ed110bbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:c0:b4:8e:69:0f:c6:5c:f9:c7:40:9b:cc:
72:ea:04:51:4d:60:52:9c:1e:0a:de:2c:2d:e2:51:
66:3f:c0:0f:b7:2c:d8:27:5f:bc:57:b3:8a:41:49:
c3:b7:eb:7c:53:47:81:c7:c8:75:5f:20:cc:70:03:
91:8a:a9:ba:64:0d:1b:ef:9e:20:10:27:3b:e2:50:
57:6c:9b:ab:2d:bd:bf:da:f5:15:9b:7c:c8:c5:4b:
53:15:bc:d4:f7:f9:45:d8:3d:04:df:07:87:ca:e3:
e1:1a:60:05:4d:32:20:c9:de:b3:09:a0:6c:c1:60:
a1:ec:61:13:7f:9c:8c:13:8b:91:7c:ea:50:5c:f4:
cb:d3:2a:39:1e:3f:1d:e7:20:a6:88:68:f7:17:64:
6d:01:b6:8e:c7:07:e6:b9:60:5b:28:3f:1f:88:c7:
55:af:3f:f4:2b:8e:e3:8d:8d:f0:46:fd:2d:ef:e3:
23:bb:0b:73:eb:6b:ca:53:3b:ef:dd:a2:80:92:6c:
23:14:49:89:2c:7b:5b:69:64:f1:42:fa:77:65:c9:
d9:22:27:bf:da:ad:15:5f:e3:e6:92:2d:0b:42:05:
6b:6b:a2:12:1c:a4:96:96:f4:55:10:0b:51:89:fd:
de:44:ce:3f:44:f8:81:24:4a:44:b7:a0:25:3b:3c:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:C0:D1:C2:17:76:04:EF:40:16:1C:2D:B2:03:8E:D1:10:BB:F1
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ouzA0cIXdgTvQBYcLbIDjtEQu_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.53.0/24
Signature Algorithm: sha256WithRSAEncryption
96:be:9a:de:9a:1e:9b:12:c7:5d:3b:34:fc:fd:73:9e:dc:79:
1b:0c:92:3d:f4:ba:98:19:db:19:c4:68:36:c9:27:01:4d:3a:
b4:3a:0d:d8:74:20:de:89:5a:20:91:ef:40:ee:8a:bf:69:5c:
06:b6:fb:1a:48:95:b6:75:cb:e7:10:94:19:29:c8:39:10:97:
93:04:a1:ed:b3:df:f1:aa:7a:9c:db:03:7d:58:ee:56:2f:32:
62:2f:fa:95:35:ed:66:41:ee:84:47:cd:ac:3f:d2:82:9c:96:
33:25:da:d7:99:f4:f9:29:6e:a1:1c:ce:d5:34:8c:3e:61:87:
e4:7a:33:91:4c:7d:d6:53:eb:32:59:9c:f2:af:4d:00:f0:98:
84:82:a8:bf:1b:4c:f5:de:0a:80:55:be:5c:97:25:ae:8c:45:
79:eb:1d:10:f9:72:53:b8:58:69:9a:0b:c5:db:70:7e:a8:b3:
2c:d1:9d:27:f0:70:68:b1:3b:cf:87:e4:cc:6e:0a:1a:28:45:
7b:2f:40:2c:4f:6e:21:01:38:fa:f2:d3:b4:e0:0a:1e:e5:7c:
20:d3:1f:48:a5:91:e2:87:7a:99:4c:b4:36:d2:f1:25:54:fa:
ad:a6:1a:d9:f8:82:4d:89:d4:e0:61:e8:86:d3:a4:19:8d:4c:
c2:84:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org