Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Xrb3QjoOY3dkTaEP7h0aCAJj-pU.roa
File: Xrb3QjoOY3dkTaEP7h0aCAJj-pU.roa (raw, json)
Hash identifier: a7FLU6t1TldFUm9syuq6lBlst3+2JO/uLD9211QavaI=
Subject key identifier: 5E:B6:F7:42:3A:0E:63:77:64:4D:A1:0F:EE:1D:1A:08:02:63:FA:95
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 01821F6EAD42C589DCA58F915CCD71A174E9
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Xrb3QjoOY3dkTaEP7h0aCAJj-pU.roa
Signing time: Thu 21 Jul 2022 06:25:23 +0000
ROA not before: Thu 21 Jul 2022 06:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 37.19.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:6e:ad:42:c5:89:dc:a5:8f:91:5c:cd:71:a1:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jul 21 06:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eb6f7423a0e6377644da10fee1d1a080263fa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:48:f3:21:54:8f:f0:ec:1d:46:66:1c:a7:
8a:8a:1b:5e:4e:5d:f5:87:9e:15:70:3b:ae:14:47:
c8:b5:e3:5b:36:e4:10:57:ea:16:95:54:14:49:3d:
35:3c:7e:8e:42:93:ee:ec:3f:fc:df:6e:d7:3f:01:
2f:c4:2f:c5:4e:ff:9b:65:0e:59:6e:93:28:5c:5e:
a7:03:20:00:ca:ff:6f:90:30:7a:1a:cd:c7:ee:d2:
1c:87:32:76:b4:78:e8:42:51:4e:60:13:64:ae:0a:
b1:54:15:98:c7:04:8c:ac:bd:41:da:37:1e:58:12:
4f:f9:95:29:83:ab:66:a6:2c:63:2f:96:64:8d:53:
15:52:cb:84:fb:cc:11:06:10:b2:95:24:22:a7:a0:
0d:25:8b:82:fc:ab:45:19:10:d9:b8:7a:9c:0f:3b:
b4:29:2b:64:2f:ef:37:4e:d8:e2:5b:8a:f1:bc:bb:
ef:be:74:c5:c8:3c:dc:57:76:cf:08:cd:0a:8e:93:
a0:ab:89:3c:80:cb:31:99:6b:78:4e:86:20:93:46:
a2:42:9d:06:79:67:2b:a9:6a:38:4b:8d:4c:2f:c6:
4c:04:e7:1c:a4:a5:17:8e:3b:c2:1f:e9:9c:9d:eb:
61:8d:5d:db:b5:98:66:58:b2:c8:9e:a8:00:6f:38:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B6:F7:42:3A:0E:63:77:64:4D:A1:0F:EE:1D:1A:08:02:63:FA:95
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/Xrb3QjoOY3dkTaEP7h0aCAJj-pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.64.0/22
Signature Algorithm: sha256WithRSAEncryption
be:6b:09:7a:49:4d:8f:39:d3:2d:cd:2d:9b:96:03:69:54:24:
cf:90:57:b9:25:0b:2c:c3:df:c5:4e:4a:cd:39:ac:ad:c8:7e:
53:7a:f7:2c:9e:68:56:cb:e9:08:07:86:e6:6e:52:e0:a1:59:
e0:5c:94:a6:af:1c:4f:cc:97:01:a8:00:eb:f0:7f:84:9c:9c:
bf:a8:1a:23:96:72:b5:a0:27:b6:0a:df:69:da:60:2a:1b:60:
53:49:a0:00:97:ea:0f:02:13:03:4a:b2:9d:b2:05:7c:91:09:
9c:59:72:80:aa:4a:6b:31:6c:8e:76:bc:8f:98:8d:4f:6a:bb:
fa:5d:d7:53:cf:4d:64:c6:47:a6:15:e9:80:47:34:d4:8b:6f:
c5:1b:76:3d:43:23:b8:7e:f2:26:c2:eb:16:da:7f:11:a2:d8:
5d:5c:f0:c3:f4:cb:46:a3:7e:4e:ee:6c:5b:86:64:f5:2a:63:
62:5b:4b:8f:bc:da:88:0c:e7:b9:bd:7a:8a:ce:2e:64:02:00:
3a:53:d7:69:55:4f:3d:f8:3d:8b:65:04:fa:0a:09:2f:97:31:
22:ba:b9:d4:0d:64:88:96:b5:c0:38:92:5d:58:7f:74:d8:1b:
18:f2:fb:37:16:17:9b:29:e3:0d:fb:d7:33:ab:9c:40:83:e5:
82:e1:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org