Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/N0cw34u7DhMUcXAVlC_UY8CbBRo.roa
File: N0cw34u7DhMUcXAVlC_UY8CbBRo.roa (raw, json)
Hash identifier: /TEeVh2p4cWFSBQB3LCrCok+5Xs/WSOR8+czTVmr7So=
Subject key identifier: 37:47:30:DF:8B:BB:0E:13:14:71:70:15:94:2F:D4:63:C0:9B:05:1A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 101732
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/N0cw34u7DhMUcXAVlC_UY8CbBRo.roa
Signing time: Mon 02 May 2022 08:37:42 +0000
ROA not before: Mon 02 May 2022 08:37:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 157.84.32.0/23 maxlen: 23
157.84.40.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1054514 (0x101732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: May 2 08:37:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=374730df8bbb0e1314717015942fd463c09b051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:1c:f3:44:5b:a2:ab:34:ac:d8:5f:ad:b1:
99:86:cc:2f:8e:62:7b:af:41:7b:f5:db:8b:91:d0:
7c:76:1f:91:c3:c8:39:f6:fc:10:0c:d1:61:1a:51:
fa:77:88:20:df:c7:79:0f:70:56:88:34:47:c5:9f:
f3:ac:bb:64:fb:ff:36:be:8e:f7:5d:3f:99:37:9a:
20:57:2f:11:86:3e:7b:9c:c8:7b:24:3a:2d:40:85:
d6:72:5e:bd:bd:49:f3:89:2d:55:e1:76:f3:a6:4f:
77:75:31:be:47:70:e8:ee:d3:ea:bc:d9:86:ac:f9:
5e:ee:c3:d2:3d:8b:64:2e:79:13:c1:dc:97:dd:1e:
8f:3d:0e:14:37:18:d2:53:1e:b6:30:cb:1b:cf:e9:
4e:6f:5f:6a:ef:d3:db:a6:3e:de:5d:e1:fc:25:a7:
5d:a3:74:ad:14:02:5b:75:0c:17:0c:22:18:17:20:
11:0c:fb:b0:ae:0d:a4:99:25:46:b1:91:49:43:a6:
a8:96:74:a4:a5:90:ee:36:aa:24:4e:61:70:2b:3e:
ee:63:db:3f:02:fb:ab:cf:96:da:47:da:22:46:4b:
99:37:ea:8e:35:d2:c3:98:40:96:69:f3:60:92:4c:
ba:6d:74:75:16:1d:f9:d6:d5:80:46:0f:cc:7d:d8:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:30:DF:8B:BB:0E:13:14:71:70:15:94:2F:D4:63:C0:9B:05:1A
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/N0cw34u7DhMUcXAVlC_UY8CbBRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.84.32.0/23
157.84.40.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:34:21:36:dd:61:ea:3b:ba:03:cc:26:a3:ae:e4:84:1d:55:
fa:ce:b7:a7:68:0a:3e:1a:f7:2a:e0:a8:a4:12:d9:f1:ba:d2:
81:c5:8c:8b:08:3f:b1:d3:88:bb:0e:72:aa:a7:a2:b6:ff:73:
77:28:18:37:8a:39:54:d1:4f:58:f6:8a:f2:43:f3:e5:a4:73:
20:00:5b:33:05:0c:2d:26:ea:a5:11:35:42:03:79:9d:fc:24:
d5:7c:0e:e8:ef:17:82:4c:e7:03:41:82:47:44:83:b7:20:38:
18:d7:9a:0d:2b:91:5a:95:bb:c8:bc:aa:2f:17:d2:42:73:0b:
23:ba:03:ad:a9:47:c4:fa:4f:5e:2e:45:36:13:e2:1b:98:ef:
66:67:66:87:f6:f1:a7:4d:d9:fc:7f:de:f4:3a:3d:97:fb:ed:
71:2e:a5:46:32:b5:60:78:c0:e3:59:25:cd:97:35:0b:c8:9b:
67:65:e9:bd:8c:51:4b:62:fb:3e:df:07:d1:d3:09:f4:69:97:
42:11:7f:c5:6a:58:53:ff:35:aa:6d:ce:3a:0b:a4:fc:a8:a1:
ff:d9:ed:07:b3:a7:f5:26:42:03:7a:e4:a5:98:1f:1e:cd:12:
51:86:8a:3e:66:bb:f9:9f:31:33:76:f5:1a:2e:4a:19:4a:7e:
05:02:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:43 2024 by rpki-client on console-ams.rpki-client.org