Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/afFmajeDqWa9_HBySeuN5Z0WTwY.roa
File: afFmajeDqWa9_HBySeuN5Z0WTwY.roa (raw, json)
Hash identifier: my09pCWen/+Y7RCwQusNDvlTZQqhD+sGMmtBB+gAEJk=
Subject key identifier: 69:F1:66:6A:37:83:A9:66:BD:FC:70:72:49:EB:8D:E5:9D:16:4F:06
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 3605D36F
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/afFmajeDqWa9_HBySeuN5Z0WTwY.roa
Signing time: Sat 01 Jan 2022 05:53:36 +0000
ROA not before: Sat 01 Jan 2022 05:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 37.247.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906351471 (0x3605d36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 05:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69f1666a3783a966bdfc707249eb8de59d164f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:69:93:cf:69:7d:9f:be:9f:64:24:21:01:
ad:97:22:bd:94:18:6f:38:d7:08:db:a3:76:2d:30:
f7:ad:14:b9:96:4a:b6:32:ff:cc:4a:9f:bc:34:12:
9d:9e:8c:b1:5c:f7:f0:76:6e:be:33:c8:89:31:a8:
7d:c7:df:f6:6b:69:ad:66:58:00:f4:d4:d7:0d:95:
ba:53:1c:df:e0:82:1b:e4:3a:ed:72:ae:84:3d:50:
4a:2f:1b:48:34:a7:1b:12:e0:83:fa:11:83:33:71:
e9:0b:96:4d:65:96:7f:2e:71:36:e0:3f:23:ae:62:
11:ad:34:a1:23:0a:3f:41:a0:43:4d:ca:75:7d:8a:
bb:bb:3a:73:23:2f:57:c0:25:69:d2:8a:ae:4b:98:
d2:08:b5:de:52:98:45:57:5c:50:08:d6:ce:0a:a1:
b6:d5:17:78:68:cf:2f:67:b1:9d:67:25:52:b6:1e:
54:5c:37:9d:a4:4c:ad:b6:fb:57:01:77:63:40:8d:
45:e8:a8:cb:5e:22:0c:9b:8a:55:47:1b:6f:8a:f4:
6e:42:32:a3:07:fb:46:7d:4c:bb:8b:9f:05:55:96:
16:92:c1:11:10:e1:0c:36:4f:83:60:f6:da:e1:b6:
8c:cf:e4:20:30:7f:85:15:1c:53:81:36:cd:50:fd:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:66:6A:37:83:A9:66:BD:FC:70:72:49:EB:8D:E5:9D:16:4F:06
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/afFmajeDqWa9_HBySeuN5Z0WTwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.116.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:b0:3c:e8:71:57:d8:af:84:f8:44:49:42:2b:d6:b1:7a:95:
1c:5d:2e:71:c7:d2:03:03:56:fe:5d:a6:0f:89:09:e0:15:95:
cf:66:be:f9:2e:dd:dc:1f:d0:2b:aa:d4:d1:95:97:1e:09:21:
24:e9:ec:d1:b0:9b:30:ac:1b:12:8f:27:e4:0f:cb:c1:e9:c7:
44:c7:21:06:26:c7:79:f9:94:48:72:0f:c8:57:31:47:98:03:
88:a5:7d:b3:56:1b:93:6c:a0:f6:0e:e8:48:7c:f8:49:56:5a:
83:06:20:94:11:89:c8:ca:d0:03:53:8d:cc:e4:7e:e1:85:f9:
11:9b:82:9a:9b:d6:7d:4b:4d:79:89:33:58:67:42:27:dd:d3:
ac:97:3d:f6:06:b5:d3:94:cd:36:16:6d:c9:6a:bb:25:d9:77:
30:c5:df:ee:6d:ce:2f:24:c5:45:b4:53:63:16:41:c2:2f:b0:
9b:10:fa:6e:8d:9d:a2:d1:b2:83:22:9a:a4:ca:7c:6b:68:8c:
cb:bd:7d:96:41:2d:90:9a:61:88:ec:68:f4:3d:c2:71:32:c1:
f2:d4:cd:19:64:9f:52:ea:4a:10:e4:cd:47:2d:b9:9d:0e:d9:
73:94:72:53:f9:f6:9f:8a:20:47:58:dc:d9:c0:ca:e6:2e:bf:
0c:ef:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:18 2024 by rpki-client on console-ams.rpki-client.org