Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/xCzh5Crhv6nKDaF0wJ-XWzbhu6Y.roa
File: xCzh5Crhv6nKDaF0wJ-XWzbhu6Y.roa (raw, json)
Hash identifier: 31CQg8i3Lv/0Gdv5lvTb57wjWpPHy31avZhX2zCbmdU=
Subject key identifier: C4:2C:E1:E4:2A:E1:BF:A9:CA:0D:A1:74:C0:9F:97:5B:36:E1:BB:A6
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 1BFBAA
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/xCzh5Crhv6nKDaF0wJ-XWzbhu6Y.roa
Signing time: Sat 01 Jan 2022 01:55:55 +0000
ROA not before: Sat 01 Jan 2022 01:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.1.160.0/21 maxlen: 21
37.252.104.0/21 maxlen: 21
185.19.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833898 (0x1bfbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Jan 1 01:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c42ce1e42ae1bfa9ca0da174c09f975b36e1bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bb:d6:93:b4:28:05:34:b1:22:8e:5a:45:54:
3d:6b:43:e9:9b:77:1c:83:f0:61:2d:b8:ff:b9:f2:
e8:20:7b:95:f6:64:7c:98:c2:88:40:4f:35:2c:14:
1a:64:c7:66:d3:c9:34:2b:41:0f:df:20:f1:05:d5:
64:11:34:9b:ae:09:81:38:8e:b9:88:0b:72:55:72:
33:1a:8a:7a:71:c1:29:55:a6:d2:13:25:fb:44:82:
23:be:63:21:12:bd:93:57:47:c5:06:72:13:c2:48:
cb:3d:fe:23:2e:8e:a5:1d:d6:ee:a6:8f:dc:92:62:
1f:a1:00:3e:cc:da:67:fb:56:32:a0:04:e0:1f:db:
6c:60:84:2d:b6:6b:69:33:a1:0f:d0:83:fd:5c:ed:
5f:0d:7c:3d:ea:48:bd:31:fb:1e:6b:37:49:43:85:
5a:4b:31:fc:d5:3f:b4:3b:f4:6f:08:77:aa:84:b8:
83:3f:dd:b3:47:44:51:27:86:97:aa:d1:b0:12:7f:
ef:4e:51:ae:c6:21:b8:6a:aa:40:79:87:75:25:3b:
0e:d1:2f:6b:1f:e6:5e:35:6e:5a:3d:cf:db:48:b7:
bc:55:51:14:b9:2b:26:73:54:31:e1:d0:29:6f:73:
ef:37:ea:e2:90:b5:72:f2:65:0c:06:a0:58:5a:e6:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:E1:E4:2A:E1:BF:A9:CA:0D:A1:74:C0:9F:97:5B:36:E1:BB:A6
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/xCzh5Crhv6nKDaF0wJ-XWzbhu6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.160.0/21
37.252.104.0/21
185.19.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:af:84:db:ba:52:42:78:84:c6:8e:26:f9:33:77:70:4f:84:
9a:bd:0e:0c:0b:e7:0e:76:3d:bf:ff:65:54:5e:60:2f:d8:76:
0d:d9:ec:04:f9:69:b5:f0:bb:3c:b7:2b:2b:6c:ed:52:a6:fb:
37:32:2a:ef:ad:5e:42:3a:4e:ec:5d:0a:f9:27:24:77:8f:6a:
dd:42:1d:43:e9:a8:1c:e5:f1:c1:ae:c8:b5:82:c0:9a:e3:58:
59:3e:c2:da:fd:1d:83:0a:82:4e:cb:fb:17:55:b1:6f:81:f7:
de:c4:96:8a:ba:28:2e:78:d1:85:0c:26:e6:a3:47:5b:78:ef:
81:05:75:55:66:2b:f5:dd:d8:73:ca:44:b4:b6:da:b7:29:49:
51:31:dc:db:dd:8a:cb:77:d0:ea:ce:0d:c5:14:f8:f7:d1:8b:
e6:bd:0d:70:6f:20:23:fa:19:36:b0:20:3b:72:12:8b:eb:f1:
5a:05:67:63:d6:ce:32:bc:61:40:1c:d5:d4:df:68:b5:3a:9b:
43:e5:be:20:8c:d0:4a:b1:12:89:a9:51:16:27:80:ad:69:6c:
17:63:e6:b8:4c:a7:bd:4c:16:d1:05:70:51:08:65:83:41:59:
7c:6a:d6:5e:9d:35:a0:da:a3:3a:24:14:53:f5:d5:0e:22:b2:
3e:3c:65:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:10 2024 by rpki-client on console-ams.rpki-client.org