Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ANBKmtRhzeXg-_iqnIbJ9jdAaGI.roa
File: ANBKmtRhzeXg-_iqnIbJ9jdAaGI.roa (raw, json)
Hash identifier: il73/vGvA08O7oJRgBWdEZd6OqKRv1AFGiiVCJkDyrA=
Subject key identifier: 00:D0:4A:9A:D4:61:CD:E5:E0:FB:F8:AA:9C:86:C9:F6:37:40:68:62
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018AAED4
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ANBKmtRhzeXg-_iqnIbJ9jdAaGI.roa
Signing time: Thu 02 Jun 2022 05:21:20 +0000
ROA not before: Thu 02 Jun 2022 05:21:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46450
IP address blocks: 37.19.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25865940 (0x18aaed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jun 2 05:21:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00d04a9ad461cde5e0fbf8aa9c86c9f637406862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:43:d2:b5:19:7b:c6:54:a6:3a:62:b6:38:
fa:4d:7d:dc:d7:48:96:73:e5:8a:57:c2:c4:16:1f:
d5:3c:91:e6:38:5c:0e:d8:dd:bc:0b:50:01:c1:92:
70:12:46:f1:27:29:62:ed:24:0a:ad:24:57:06:ec:
d8:fb:d6:e3:cf:1f:f7:6b:f1:33:c1:02:05:84:b0:
7f:5b:47:f2:cd:89:0e:db:09:09:9d:29:95:75:12:
47:1e:dd:01:dd:06:8c:44:d8:30:43:97:77:74:0e:
1d:7e:8e:f4:83:b9:08:0d:37:d4:bd:79:22:26:b1:
d4:0c:ad:51:37:ed:b5:af:03:d2:ee:92:4c:92:b5:
1c:73:fe:5d:af:86:42:c9:54:ba:52:28:51:13:a1:
43:bc:2a:ef:13:8d:01:05:37:04:30:b8:2a:7d:c2:
ef:cf:58:cf:cd:67:39:7d:ff:da:bb:c6:56:5a:f2:
75:74:80:49:0c:07:28:ce:c5:66:c4:e8:c9:4d:4f:
7d:36:8c:fe:45:23:86:03:17:58:18:ea:e0:3c:da:
2d:04:be:4d:eb:54:92:12:3c:ae:5e:6f:18:cf:61:
96:1a:53:5a:96:52:a9:a7:70:b4:1a:9c:a5:e3:92:
2e:46:a4:bc:59:a2:4c:74:9a:15:0c:b3:70:80:ba:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:4A:9A:D4:61:CD:E5:E0:FB:F8:AA:9C:86:C9:F6:37:40:68:62
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ANBKmtRhzeXg-_iqnIbJ9jdAaGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:3f:05:e0:63:e2:b7:70:0c:39:32:6a:06:98:22:b5:a4:59:
7c:8b:ca:a9:f5:b5:58:79:91:7f:b2:b0:76:07:a4:a6:02:1b:
bd:9f:2e:64:e2:9d:89:1c:5c:6e:61:34:f4:ba:45:de:9c:84:
97:06:3b:50:5c:92:c5:eb:e2:75:5b:93:3e:c4:9d:52:d0:f1:
9a:e4:1e:29:b2:60:35:0d:5f:5c:dc:b6:76:26:d4:86:58:c6:
f3:e8:9b:0a:35:e6:d3:ee:e9:96:51:27:df:7f:f5:bf:ee:43:
73:7a:df:09:8a:01:7c:1b:5d:9a:42:73:fb:9d:a2:e8:dc:f8:
71:d9:b9:fd:10:e7:70:85:21:3e:ce:c2:4b:9d:7e:46:fe:2b:
e2:cc:8b:c6:70:3e:09:e1:2c:a1:3f:7e:7b:d9:24:01:66:f5:
4f:32:73:c6:3c:d1:19:69:2e:cf:25:36:e4:71:52:2f:c2:4b:
e6:25:8a:93:e5:4e:df:98:f7:bb:8d:53:0b:b3:cd:08:79:12:
c5:3a:4e:0c:9c:f6:a4:08:ed:f4:ba:06:c0:f0:56:14:7c:92:
e9:7f:3f:73:cc:51:50:32:88:81:73:c8:d4:15:d7:1b:43:57:
32:fe:ec:61:22:f3:23:17:45:78:84:fb:69:5f:a6:a4:fd:b2:
1d:a1:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:09 2024 by rpki-client on console-ams.rpki-client.org