Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ZTQcY3nroCk3UGzQCdVnlvHv3sk.roa
File: ZTQcY3nroCk3UGzQCdVnlvHv3sk.roa (raw, json)
Hash identifier: L2BqhpbCuFSGBI5+w7cSAHSsSjuyknYSF+niVVDXci4=
Subject key identifier: 65:34:1C:63:79:EB:A0:29:37:50:6C:D0:09:D5:67:96:F1:EF:DE:C9
Certificate issuer: /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial: 0498A15C
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ZTQcY3nroCk3UGzQCdVnlvHv3sk.roa
Signing time: Sat 01 Jan 2022 09:53:48 +0000
ROA not before: Sat 01 Jan 2022 09:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60405
IP address blocks: 37.156.69.0/24 maxlen: 24
37.156.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77111644 (0x498a15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Validity
Not Before: Jan 1 09:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65341c6379eba02937506cd009d56796f1efdec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:9b:6b:4c:f0:a0:9e:66:19:7d:71:35:9a:
e3:63:27:bd:8a:bf:fe:40:ab:0d:77:b7:ce:b2:39:
d3:85:86:82:f9:cf:e7:4e:6f:e3:81:8e:b0:6a:48:
90:be:35:e4:f8:cd:d4:55:d8:eb:ab:75:7f:73:fc:
df:95:41:c2:61:8a:eb:b7:e5:dd:d8:0c:4d:b1:d1:
4e:2a:9a:00:9e:08:7e:07:b5:6d:c5:9e:74:f8:37:
d5:f3:0a:60:cb:45:dc:b2:9c:a7:f6:27:9a:0c:a9:
8d:be:f9:d4:fd:91:3c:e6:96:35:03:f8:cd:09:52:
cb:fd:61:39:55:19:04:f5:d5:ec:0f:55:29:86:f4:
52:48:23:54:9c:c9:4b:3f:88:b1:38:8a:27:d7:06:
70:a1:b3:91:82:69:24:06:a9:2f:4b:64:31:e5:ec:
ae:49:36:d8:e7:43:58:4c:6e:21:9b:cf:9c:21:47:
99:83:84:39:f3:20:53:3c:96:63:c2:c8:27:19:24:
b4:70:bf:59:54:de:ec:11:06:3f:a0:6c:1c:0e:42:
72:a4:14:15:24:23:de:c2:aa:d2:e6:41:18:76:ed:
b9:57:4c:e1:e7:04:9d:6f:ef:e8:c1:42:b0:91:9e:
d9:67:8e:ec:c3:8f:8e:fc:10:8a:06:40:18:7b:f1:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:1C:63:79:EB:A0:29:37:50:6C:D0:09:D5:67:96:F1:EF:DE:C9
X509v3 Authority Key Identifier:
keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ZTQcY3nroCk3UGzQCdVnlvHv3sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.69.0-37.156.70.255
Signature Algorithm: sha256WithRSAEncryption
79:94:da:a4:20:0e:d0:4c:86:61:a4:5b:47:78:af:40:4c:cc:
ff:c1:a1:70:f4:3e:34:dd:41:39:c5:6c:99:1b:92:61:cf:25:
59:70:8e:5b:12:eb:a8:4a:bb:84:53:d9:ce:aa:42:57:c3:63:
3a:02:2b:48:a7:78:49:18:b0:ae:87:8c:b1:71:f4:6d:f7:37:
1b:d1:65:96:59:5b:36:9c:42:dd:22:9d:a2:fb:76:99:6e:5b:
14:90:6f:40:c3:a4:e7:b2:ab:00:16:6b:34:6c:c5:d6:b3:b2:
98:bb:88:2e:d7:4b:b9:6b:1f:29:dc:ce:03:82:d1:26:41:cb:
a0:ac:5d:98:07:10:73:74:1a:74:4c:3e:07:e2:74:50:55:2c:
f7:23:bc:47:21:7c:8d:44:e7:1b:15:e6:dc:77:b6:94:dc:c5:
d2:9f:ba:db:59:72:2b:fd:40:aa:a6:9d:32:f4:7a:e2:af:81:
a3:5a:4b:7b:40:75:8c:8c:3f:7e:ee:b2:c9:3e:4e:b2:4b:e6:
e7:c5:5d:87:b9:c5:7a:74:18:e4:19:c3:47:11:e0:73:15:d9:
0c:24:f2:86:dd:2b:f5:6b:11:72:0c:79:2a:4b:58:1b:c6:a5:
45:bf:84:79:f3:03:a4:f6:28:21:b3:98:85:23:23:1c:d3:00:
13:ed:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-fra.rpki-client.org