Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/Yrv91bQhxv74OxIQ1_jlFlAW-DE.roa
File: Yrv91bQhxv74OxIQ1_jlFlAW-DE.roa (raw, json)
Hash identifier: UgZs7nGX/qqgJecXr0xb1MioPnipGSwCVDOzx0NJhvU=
Subject key identifier: 62:BB:FD:D5:B4:21:C6:FE:F8:3B:12:10:D7:F8:E5:16:50:16:F8:31
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 3607C133
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/Yrv91bQhxv74OxIQ1_jlFlAW-DE.roa
Signing time: Sat 01 Jan 2022 05:53:37 +0000
ROA not before: Sat 01 Jan 2022 05:53:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47447
IP address blocks: 37.247.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906477875 (0x3607c133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 05:53:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62bbfdd5b421c6fef83b1210d7f8e5165016f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:80:10:14:fc:41:ad:91:ed:dd:a7:6d:95:
f8:48:49:36:c2:b0:92:a4:fc:e4:45:7a:cc:2e:e3:
3b:b7:fb:e1:ed:d1:d1:80:18:43:79:9f:ac:e8:59:
2a:8a:7d:4f:d7:ca:72:77:53:8d:b7:0a:a5:de:c4:
4f:fa:ee:ea:bc:d6:23:10:2f:04:6c:56:ce:90:d6:
dd:66:ea:21:b5:76:b6:57:8d:f4:c5:4f:f7:ec:26:
2c:10:97:ca:6d:bf:af:ad:bd:cb:25:a4:97:5f:76:
fa:e9:7e:86:7a:54:f0:0a:78:39:04:6c:82:09:e9:
30:47:ca:6d:ae:dc:21:cf:2a:47:64:90:f4:ff:9c:
e7:5c:f4:39:a0:bc:f1:75:2e:3d:62:79:1a:91:cb:
55:54:32:bc:cc:3c:8c:b5:66:5e:a4:70:44:35:80:
76:b5:38:d6:db:b7:af:ab:14:36:d6:b9:03:4b:62:
76:76:ec:44:5f:7c:a9:54:76:15:c1:e7:55:ea:fa:
3d:e8:31:d0:df:51:16:13:43:54:5f:89:f4:ae:7f:
68:77:3d:0f:0d:2c:68:a9:05:37:a7:70:d0:b8:d3:
03:c5:45:63:de:80:0e:20:13:c8:3d:74:7b:3c:a8:
5e:f6:4b:9d:87:8e:c6:5f:58:71:a1:b5:ec:db:d4:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:FD:D5:B4:21:C6:FE:F8:3B:12:10:D7:F8:E5:16:50:16:F8:31
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/Yrv91bQhxv74OxIQ1_jlFlAW-DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6f:b3:41:37:75:ea:eb:6e:c2:7d:8d:e7:a1:db:a9:22:fb:
4b:5a:54:59:7d:37:d2:55:37:c6:55:ae:f6:cd:02:82:95:87:
a3:70:a1:1e:9b:ae:b5:0f:aa:32:b1:04:de:70:3b:7f:b0:0d:
a3:f6:b9:57:55:38:a4:3e:c2:e6:66:d1:4c:77:2f:ee:a9:1d:
5e:2d:b2:5a:39:94:2b:25:1e:c2:d6:a1:3d:8a:5c:24:99:d0:
f3:76:01:97:5a:fc:45:24:09:47:16:c0:51:73:4f:1b:fc:58:
10:1c:8a:15:63:32:e0:50:c3:79:a4:87:1b:a2:d6:ab:11:e4:
a5:2e:d0:ac:f9:3a:85:51:83:8a:b0:dd:d6:88:f6:38:09:94:
c5:8a:42:01:17:86:88:31:ec:0d:18:52:7f:b0:a3:b9:80:6e:
a8:1a:16:5a:66:ed:6b:4f:f6:5a:8a:33:d0:c1:6c:9d:26:6b:
cc:cd:76:a2:77:56:db:91:58:db:c6:0b:30:bd:90:a4:c4:77:
59:bd:12:8a:c4:fa:c8:cb:6e:4e:66:ba:c8:f6:14:fe:e3:2e:
79:51:6d:07:24:4b:b7:89:6a:f2:59:97:9e:b8:b4:c9:e9:4a:
65:4e:83:51:60:bc:2e:78:a3:06:08:73:b8:bd:a6:7d:c8:e7:
1b:f5:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org