Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/9axOgS9vcfarPrWCAl6xFOoqtQw.roa
File: 9axOgS9vcfarPrWCAl6xFOoqtQw.roa (raw, json)
Hash identifier: Zeg+Dh8q7cMnsjKOgyd3mHjZcQQW+TqRC/NHMPqlFe8=
Subject key identifier: F5:AC:4E:81:2F:6F:71:F6:AB:3E:B5:82:02:5E:B1:14:EA:2A:B5:0C
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 096A55
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/9axOgS9vcfarPrWCAl6xFOoqtQw.roa
Signing time: Thu 03 Feb 2022 08:41:17 +0000
ROA not before: Thu 03 Feb 2022 08:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50371
IP address blocks: 37.32.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617045 (0x96a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Feb 3 08:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ac4e812f6f71f6ab3eb582025eb114ea2ab50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:c6:dc:2d:14:f0:eb:2a:fd:26:a0:ad:06:
bf:d7:c6:e1:3c:e7:fa:25:83:46:1d:0f:d4:c9:f8:
ea:c4:9f:e6:4e:e5:21:06:49:77:4f:52:60:64:9c:
6f:84:5b:28:a2:75:78:b7:30:c9:95:15:88:6f:8c:
12:ba:70:46:08:0c:73:05:e5:e2:36:63:0f:ff:bb:
6d:76:17:5f:5e:c6:72:c9:69:25:99:4f:4d:e6:31:
5f:42:15:4f:c3:ab:3e:1f:71:ec:b1:3f:44:59:81:
ba:fc:3b:ac:d2:c3:57:28:ec:02:43:4b:37:10:d0:
a7:b3:a5:6b:2f:61:7d:8a:79:bd:87:25:96:fa:35:
5c:d8:17:a1:2e:ec:5c:f5:3b:d4:0a:de:18:34:ad:
8e:e9:48:b0:9d:d3:61:d6:60:6f:bc:d9:50:e9:de:
9c:c5:60:9f:c7:a9:62:67:bd:1d:0f:d7:bd:b6:58:
d8:9d:22:47:1d:bf:ff:0b:ef:ad:a2:5e:9e:a8:98:
8c:62:a6:27:21:27:9f:57:16:85:a7:47:34:97:6d:
1b:02:b0:04:89:1c:4b:4f:f4:af:54:fc:65:9b:5f:
42:48:75:71:0a:13:14:4e:b3:9f:7d:71:70:e2:25:
9e:99:0f:b4:0d:9a:b5:76:dd:d5:93:68:8f:33:2e:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:4E:81:2F:6F:71:F6:AB:3E:B5:82:02:5E:B1:14:EA:2A:B5:0C
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/9axOgS9vcfarPrWCAl6xFOoqtQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.74.0/24
Signature Algorithm: sha256WithRSAEncryption
18:8d:73:ca:5b:6c:aa:7b:9c:4a:76:69:6d:5b:04:84:7c:d6:
8e:c3:af:03:65:71:59:b8:a5:01:dd:1b:41:30:87:77:4a:ec:
d2:88:b4:61:20:25:88:ff:30:53:e0:9a:4b:73:d8:50:08:85:
05:b0:1c:fb:6b:40:40:99:24:b8:46:2b:cb:60:f6:42:39:97:
cc:ab:ed:45:b4:7d:4d:87:1b:f1:23:af:d3:17:c6:12:99:72:
e8:ac:63:90:fe:77:64:ca:41:fe:1d:02:b6:62:4d:25:fa:ab:
9b:7d:af:2f:21:c4:2a:ad:d1:99:da:4b:8a:54:90:ac:a5:f3:
0d:2f:e1:33:36:57:2a:ab:cd:a6:e3:c6:38:58:b2:ee:85:19:
6b:f8:31:f6:34:d2:a1:8b:97:44:dd:69:92:6a:ed:ff:eb:e7:
d9:b6:9a:36:a6:a5:e5:ff:9c:3d:84:ed:e4:d6:ed:a4:de:3a:
d7:b7:d0:e2:1a:ee:57:f2:a7:4e:ea:67:f0:60:67:35:fd:ea:
b3:df:32:8b:9b:c5:41:4b:f2:41:cb:59:c5:6b:55:34:e2:61:
47:84:be:76:b3:ac:94:82:fa:06:7f:13:67:35:8f:13:31:cd:
40:48:d9:6a:1a:1f:05:90:7a:62:9f:ea:53:c3:c4:a2:78:ed:
27:6b:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-fra.rpki-client.org