Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/2cLvocLOpKqRDBwlYSA53yJQIv8.roa
File: 2cLvocLOpKqRDBwlYSA53yJQIv8.roa (raw, json)
Hash identifier: JQgKFXBz9D42K418s9daxyfiLNgu3LALMC6+4T7i104=
Subject key identifier: D9:C2:EF:A1:C2:CE:A4:AA:91:0C:1C:25:61:20:39:DF:22:50:22:FF
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 34DF6199
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/2cLvocLOpKqRDBwlYSA53yJQIv8.roa
Signing time: Sat 01 Jan 2022 13:56:26 +0000
ROA not before: Sat 01 Jan 2022 13:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210133
IP address blocks: 37.77.174.0/24 maxlen: 24
37.77.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887054745 (0x34df6199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Jan 1 13:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9c2efa1c2cea4aa910c1c25612039df225022ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:03:7a:74:04:ca:f7:44:f2:22:01:5f:5c:
81:fc:ce:e1:be:5b:78:4b:06:0b:3b:bb:86:02:49:
22:45:9d:f2:17:bc:e4:f6:dd:83:5d:c9:6e:fb:f4:
23:eb:93:3c:f3:31:82:21:7f:d0:b5:19:58:df:24:
63:40:39:94:0c:52:b0:72:ba:2c:e8:a6:1f:97:4e:
64:ce:49:9d:88:cf:0f:85:0e:8c:6c:f5:e2:e4:76:
74:d0:9f:30:ea:2e:5a:de:ae:88:eb:43:e8:89:37:
41:ac:95:bd:76:47:6b:65:81:27:57:74:e3:49:b7:
fe:eb:bd:f9:f5:d7:6f:af:14:39:e0:61:e2:0b:bf:
24:08:aa:78:bd:d0:b8:f4:47:23:2b:77:b1:57:f0:
c8:6c:16:c0:ea:56:de:02:27:ab:54:4d:3b:03:04:
42:ee:8a:e8:dc:a2:cb:57:28:01:ee:4b:25:ed:f8:
31:c5:68:f0:99:bb:6c:4b:81:dc:50:f0:27:e8:50:
38:5b:71:bb:ba:ba:13:a4:65:b6:49:a8:14:ee:67:
30:fa:2b:cf:dc:28:58:f1:4a:cc:e3:e0:52:6a:de:
39:f1:77:84:cc:92:11:52:b9:dd:93:9c:8b:13:6f:
42:39:7e:90:e6:32:c1:63:a6:5c:ba:e9:4e:93:0f:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:EF:A1:C2:CE:A4:AA:91:0C:1C:25:61:20:39:DF:22:50:22:FF
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/2cLvocLOpKqRDBwlYSA53yJQIv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.173.0-37.77.174.255
Signature Algorithm: sha256WithRSAEncryption
74:a7:c6:d4:d1:6d:f2:59:f1:02:ee:84:b3:79:33:00:12:48:
ce:7c:0a:aa:3a:2a:60:be:e5:64:94:6b:34:b5:70:fa:17:a1:
be:42:29:76:34:61:10:71:96:a9:37:a5:fb:aa:b1:aa:ec:26:
c0:3d:92:e4:b8:8d:0f:d6:7a:81:a9:af:3c:93:23:eb:d9:3a:
72:ce:de:f7:25:66:be:85:65:83:ab:1a:bb:8b:49:34:30:98:
ca:be:9e:0c:60:78:eb:fc:60:5e:1c:69:1f:68:ee:3d:b2:55:
d3:26:91:10:60:5a:ca:1a:07:2c:a7:88:71:ba:98:a5:da:d9:
98:33:2a:a4:fa:37:69:b5:e1:9f:43:f8:8f:c8:09:54:ae:da:
94:ad:7a:a2:bc:83:24:c0:26:07:0a:cf:57:7d:6f:d6:b6:7e:
dc:64:1d:fb:da:3b:88:4b:b4:00:fb:e7:1e:48:08:2c:17:42:
f0:3f:bf:42:6e:ef:3b:71:c6:34:05:e1:db:35:b8:98:0e:04:
37:02:dd:b6:64:0f:bc:59:84:7a:3d:de:30:46:44:07:0b:c0:
df:eb:21:ca:17:6b:eb:dd:34:73:c4:76:4f:a3:0d:68:76:1c:
f4:53:4b:60:03:2d:a5:ca:99:df:31:03:38:2b:70:0b:c3:a8:
7e:d5:ff:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org