Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/2Gd1QG3fUv3UzK1vabNqFU6Ifws.roa
File: 2Gd1QG3fUv3UzK1vabNqFU6Ifws.roa (raw, json)
Hash identifier: jlZnenqnhQbLe0Cm2OLqpDFJbfjOtYeQI3Ll8XJlVbQ=
Subject key identifier: D8:67:75:40:6D:DF:52:FD:D4:CC:AD:6F:69:B3:6A:15:4E:88:7F:0B
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 0D5C3D
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/2Gd1QG3fUv3UzK1vabNqFU6Ifws.roa
Signing time: Sat 01 Jan 2022 01:55:29 +0000
ROA not before: Sat 01 Jan 2022 01:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 37.19.64.0/22 maxlen: 24
37.19.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875581 (0xd5c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 01:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d86775406ddf52fdd4ccad6f69b36a154e887f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:57:45:e9:3e:02:5a:a2:27:8f:a0:56:18:
3b:72:fc:a9:da:bc:b0:da:b0:21:58:78:a2:e9:01:
17:dd:d8:4a:28:0a:bc:0e:49:0f:6e:e0:3d:a1:b7:
ff:7e:1d:40:e2:31:ae:cc:d7:19:a6:01:d7:06:aa:
2b:85:f0:3a:75:ae:a4:73:fb:e7:93:43:3f:f0:9b:
f0:6d:8c:02:14:c9:d5:f6:e2:c3:b1:20:a4:ae:67:
49:3f:47:4f:e7:0f:da:6e:01:f4:4c:5a:fc:85:cd:
96:21:64:8d:37:c3:b7:78:f9:53:54:17:e7:c3:10:
e4:38:02:86:ec:f3:ab:23:a6:d2:b6:1d:94:72:c8:
9b:7f:f1:2a:19:49:0e:cb:6a:35:2f:a8:94:9c:01:
c3:c8:5d:a6:5a:f8:b4:01:50:bd:48:ce:06:c5:3c:
a1:87:3d:5b:c5:b4:51:79:ea:86:2a:91:b1:75:c0:
00:38:c5:10:4b:10:48:09:07:de:72:31:fa:6f:cb:
7c:4f:ee:a9:e0:86:00:15:d1:0d:1d:d8:d5:0a:d4:
1f:07:df:aa:ec:e3:04:91:cf:02:ec:56:77:f9:e5:
e4:c8:6d:c6:68:df:22:81:eb:14:a5:1e:77:cb:47:
89:bf:67:68:3a:47:42:5a:41:00:97:65:b1:75:e5:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:75:40:6D:DF:52:FD:D4:CC:AD:6F:69:B3:6A:15:4E:88:7F:0B
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/2Gd1QG3fUv3UzK1vabNqFU6Ifws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:9b:5a:7b:fb:e3:46:d5:c4:9a:f3:19:9b:eb:d9:ed:97:3a:
1a:ff:9c:02:26:d5:ae:59:6b:6a:75:5c:f1:9d:15:7a:ae:3f:
85:04:f8:db:e2:52:4f:62:71:e2:8f:2d:2a:19:bb:57:1d:0e:
29:38:a5:eb:93:7c:16:9f:5f:19:e4:d4:30:ed:94:89:5a:23:
c5:25:c8:f0:39:44:54:1f:86:d5:51:1b:f2:6c:75:36:7b:7b:
97:4d:7b:14:7b:f4:50:bb:46:2c:b2:be:e7:71:51:88:74:31:
72:1f:9a:66:4c:73:ca:6c:5d:ce:1f:6e:b9:3c:ce:2f:46:b3:
fd:61:54:ce:94:7a:d9:12:5c:e8:62:58:e6:d6:87:e9:74:35:
1e:10:44:d1:28:e9:f3:f0:00:96:53:f6:f4:33:c5:57:bc:8e:
f1:b1:aa:5a:d5:2f:2e:e6:51:df:3c:ed:86:1f:ac:ab:cb:53:
e4:87:91:2a:f6:04:91:ad:09:7c:37:1a:12:f5:c7:4b:17:8b:
5f:ca:26:e3:51:25:9a:10:67:8c:91:6d:39:55:4b:25:0a:e6:
e9:bb:b9:e4:00:d6:f0:9e:70:27:61:50:76:e6:73:50:95:70:
6c:33:ff:bb:45:6a:68:fb:33:8d:6e:0d:26:4c:69:b9:0e:6a:
2e:51:15:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org