Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/oCP5mM9wZ9Sy83rT8akYtptlONs.roa
File: oCP5mM9wZ9Sy83rT8akYtptlONs.roa (raw, json)
Hash identifier: Dlh4glcPE1dywxEz1bGfNv8mSPllgvEgE5p/4/s2mTY=
Subject key identifier: A0:23:F9:98:CF:70:67:D4:B2:F3:7A:D3:F1:A9:18:B6:9B:65:38:DB
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 3781AD41
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/oCP5mM9wZ9Sy83rT8akYtptlONs.roa
Signing time: Fri 21 Jan 2022 00:47:30 +0000
ROA not before: Fri 21 Jan 2022 00:47:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207645
IP address blocks: 37.148.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931245377 (0x3781ad41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 21 00:47:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a023f998cf7067d4b2f37ad3f1a918b69b6538db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:f9:8e:57:c2:75:dd:a0:d0:5f:b4:8e:d6:
1f:d6:42:11:53:d5:9a:e9:db:79:97:a4:8a:12:4f:
30:e4:87:59:94:84:9a:68:6a:05:23:37:48:0d:11:
98:32:e7:b9:1b:9e:65:98:79:72:42:91:30:36:c5:
38:c4:31:69:2e:03:59:e6:1f:cd:90:4b:d4:0d:ff:
e9:1d:04:27:9e:e9:32:9a:c0:87:be:3a:7f:8b:b6:
10:b8:14:bb:a7:68:c4:47:09:d0:a5:99:e8:01:e5:
77:1e:2b:fb:db:0f:4a:8a:df:24:3e:c3:99:eb:5b:
d5:f6:9f:29:41:9f:e7:b9:e3:dc:73:d3:2f:2c:7a:
fd:31:96:90:77:ea:04:24:75:e1:69:36:68:9c:dc:
0e:0e:8a:d1:ff:35:8f:89:9a:63:22:bd:79:bb:d5:
95:68:1f:0d:90:38:33:cd:9a:16:fe:cf:ba:0c:28:
01:78:aa:b3:74:9a:a8:ce:2e:b8:62:60:5e:04:1a:
7f:03:6d:24:af:ef:1e:6d:24:f1:e9:cf:75:8d:c9:
97:71:bf:f0:3d:29:c4:e8:7a:37:86:26:51:87:1f:
5b:29:f6:43:9e:08:15:da:71:ab:f4:3a:e8:98:bd:
94:74:00:bb:f2:2d:d0:89:80:a9:d9:9d:2f:cc:bb:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:F9:98:CF:70:67:D4:B2:F3:7A:D3:F1:A9:18:B6:9B:65:38:DB
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/oCP5mM9wZ9Sy83rT8akYtptlONs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.220.0/22
Signature Algorithm: sha256WithRSAEncryption
62:54:e0:67:58:9a:14:8f:11:b8:46:b9:0a:85:86:e9:86:58:
57:44:4e:f3:0f:8f:a0:48:75:9d:ed:55:27:da:14:6d:04:9f:
97:0d:0d:1e:2f:01:a9:60:79:e3:e3:30:f5:ae:fa:08:fd:5a:
92:49:90:05:8c:e7:df:f2:52:c1:39:33:82:2e:0a:0e:9c:46:
80:7a:c8:cd:e2:b5:18:53:83:1c:c1:e2:b8:d1:c8:d3:c9:52:
7e:74:cb:10:00:f3:02:7d:8b:69:98:e8:2e:a9:e2:1c:6d:0e:
96:c9:68:16:8b:82:fb:92:2b:8d:79:75:e7:19:f4:cb:9d:29:
34:5a:19:c3:e0:b2:ed:ee:56:e0:bf:af:46:51:76:6f:fa:33:
80:89:40:33:9c:22:e7:87:b2:f0:52:7c:58:9d:a2:15:2c:48:
38:76:bd:49:3b:99:72:6a:c5:1c:1c:98:b4:5b:78:85:ae:4a:
85:f6:8d:48:cb:03:c6:bc:6c:1c:bc:8d:6e:74:8e:75:d1:a5:
80:ab:16:f0:d6:ac:36:39:28:cc:0d:71:34:db:47:63:00:69:
a1:5c:5e:b0:94:cc:ae:b5:08:f6:62:22:ca:c2:03:05:61:b6:
c8:4d:86:f6:be:4e:d3:93:a1:16:c1:91:d9:c9:13:69:c2:d6:
e3:49:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org