Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/NDZ8zdxhT5Z-Fyd15aOee-mJ-WU.roa
File: NDZ8zdxhT5Z-Fyd15aOee-mJ-WU.roa (raw, json)
Hash identifier: 6sLZj/dO6iUNB6amv7zFy2VDHYdiCSYEsjv3eaRVukQ=
Subject key identifier: 34:36:7C:CD:DC:61:4F:96:7E:17:27:75:E5:A3:9E:7B:E9:89:F9:65
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 01023F8D
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/NDZ8zdxhT5Z-Fyd15aOee-mJ-WU.roa
Signing time: Wed 06 Apr 2022 08:31:26 +0000
ROA not before: Wed 06 Apr 2022 08:31:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 37.1.160.0/21 maxlen: 21
37.252.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16924557 (0x1023f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Apr 6 08:31:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34367ccddc614f967e172775e5a39e7be989f965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:e8:46:10:c7:7e:9c:22:6f:4a:ed:ad:9c:
e2:5f:47:9a:b5:6d:80:62:05:c9:ba:73:04:85:6d:
9d:5f:09:0a:a6:f0:87:d2:a2:a2:02:f7:83:1c:35:
50:e7:7e:f8:7f:be:1c:dd:8b:50:e7:b3:d3:f5:6a:
6e:32:f4:59:7f:6b:2f:82:07:3c:f2:5f:47:17:a6:
7d:b5:b7:78:8f:91:de:0a:6d:31:b3:ff:bc:89:c3:
6c:49:62:17:a0:d0:c3:35:84:8a:41:2f:2f:77:02:
37:90:df:23:11:dc:4c:16:06:a1:83:1c:f6:62:22:
40:03:f3:51:46:ac:7b:e2:b2:66:5a:88:ae:70:9e:
46:07:59:d6:54:c9:d4:2c:91:36:df:2d:be:4c:3c:
81:b3:84:06:2b:12:33:8a:90:0b:31:77:3f:09:f6:
ea:7a:ca:52:ff:c7:ba:ab:b8:a2:72:c2:92:b1:f8:
04:2f:a9:45:56:e8:08:33:bb:ce:11:72:3c:29:a7:
24:08:5f:ff:2b:02:d3:5c:ec:80:cf:95:d3:cd:99:
1e:17:a3:69:39:ae:07:6e:92:f4:d1:ea:ff:e8:e5:
a0:e8:97:20:c4:ac:18:ce:38:fc:da:93:fc:ab:01:
c1:dd:33:b7:6f:e9:e8:19:ab:a2:7a:7a:2d:4c:dd:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:7C:CD:DC:61:4F:96:7E:17:27:75:E5:A3:9E:7B:E9:89:F9:65
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/NDZ8zdxhT5Z-Fyd15aOee-mJ-WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.160.0/21
37.252.104.0/21
Signature Algorithm: sha256WithRSAEncryption
62:dd:65:8a:da:4a:01:ca:d6:61:56:35:91:9d:11:73:67:8c:
eb:62:b8:6a:16:20:60:ce:5a:9c:00:dc:9d:1b:08:d7:04:1a:
44:dd:07:20:6d:a0:09:67:54:a7:a2:65:11:0b:75:98:59:5f:
81:e6:2d:ea:0d:9e:cb:aa:a6:f8:c9:40:3b:d4:3d:66:6a:fd:
7b:94:32:13:49:97:d3:3e:22:d9:68:89:0a:5d:3d:30:9a:72:
89:c5:13:79:48:f1:71:fb:20:65:47:59:5a:59:e2:b3:c0:57:
1f:20:b1:6e:6c:68:1b:0d:b2:7a:4a:0b:9a:8c:9a:5b:c2:67:
54:60:5c:7b:9e:61:77:58:32:8e:37:88:ec:03:f1:b9:04:9a:
49:4e:6c:a9:94:19:ef:6e:a7:92:3c:8a:b2:86:c2:db:92:e2:
3a:55:7e:46:7c:80:80:a0:92:a1:3e:36:75:3d:4e:fc:de:5c:
86:05:c2:2a:0a:ff:17:62:df:b4:b8:9d:65:bf:6f:05:b2:6a:
e1:eb:9a:3e:63:63:1e:99:48:d5:2b:18:5e:c2:2d:e6:5b:2f:
3c:08:6f:c2:31:12:e7:7d:e6:0a:9e:1f:6f:cf:c2:d3:7a:9a:
fd:2f:06:89:01:13:1f:c4:ba:fc:6f:58:b3:72:e7:6e:9c:78:
9f:30:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org