Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/1V7jNvYJzISwm1v25HYt3vG7Rqo.roa
File: 1V7jNvYJzISwm1v25HYt3vG7Rqo.roa (raw, json)
Hash identifier: QZHNPBJho6xYHnobKTjNCuqfG3e4hvKRfdkv1zG27yg=
Subject key identifier: D5:5E:E3:36:F6:09:CC:84:B0:9B:5B:F6:E4:76:2D:DE:F1:BB:46:AA
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 33BBD464
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/1V7jNvYJzISwm1v25HYt3vG7Rqo.roa
Signing time: Sat 01 Jan 2022 04:55:49 +0000
ROA not before: Sat 01 Jan 2022 04:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212689
IP address blocks: 37.10.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867947620 (0x33bbd464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 1 04:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d55ee336f609cc84b09b5bf6e4762ddef1bb46aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:bb:25:12:7e:51:4a:c3:c8:99:72:64:19:
c8:3b:a9:e1:fd:cc:ae:f4:12:70:48:2d:c5:1e:42:
cd:3f:02:14:72:0b:78:33:6f:33:7e:1e:33:b9:64:
d9:2a:b8:4b:9d:02:30:12:f4:03:dc:30:5b:3e:d4:
a8:9e:4d:3b:53:35:32:23:df:1d:82:97:84:4c:7b:
cb:66:f4:6b:4a:23:94:07:8b:4e:7d:a7:10:40:cb:
19:19:0a:99:8f:e5:99:cf:19:04:0d:4c:b7:38:e2:
60:9d:bf:17:6d:ad:7f:3b:3e:37:0a:9b:e9:4c:a8:
da:76:89:ec:87:f9:96:57:be:d5:40:4f:a2:bc:60:
d7:06:4e:33:bb:55:fc:17:36:24:a5:e5:e2:79:e4:
e4:4a:a2:bd:f4:22:a0:04:7d:08:8a:07:06:2e:53:
6b:e1:f5:68:cd:6e:cf:0b:9c:cc:b1:b9:18:ff:49:
25:31:b6:80:c6:3a:46:8e:37:9a:36:69:e8:69:08:
87:32:fd:83:f9:e5:97:98:4b:ef:99:31:fc:89:4d:
d6:25:8c:8c:90:94:77:16:95:75:5e:a4:c5:26:40:
6b:3a:09:2a:88:70:fe:36:06:31:89:fa:0e:69:1f:
66:cb:58:cc:47:86:ca:03:13:eb:12:3c:22:c2:45:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:E3:36:F6:09:CC:84:B0:9B:5B:F6:E4:76:2D:DE:F1:BB:46:AA
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/1V7jNvYJzISwm1v25HYt3vG7Rqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.10.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5c:e0:50:fe:26:8f:ab:4b:ed:61:b2:e3:36:83:a8:64:a4:
70:97:7b:56:e1:37:22:16:5b:0b:00:14:26:a1:be:ac:86:83:
92:ed:58:1f:58:c5:9e:14:ca:6a:67:9d:96:9d:ef:c2:a5:b9:
4c:ed:b0:88:59:ef:ef:46:a4:5c:4d:af:bd:5b:f5:70:cd:36:
f7:ed:8a:85:48:db:25:9c:4b:23:ae:f5:85:e8:a7:4b:9e:83:
f1:e5:50:8d:f3:99:ef:a9:56:b5:88:27:d6:17:1c:de:31:93:
cb:50:b7:97:5d:ea:0a:b8:5c:8c:d4:48:9e:1b:e4:3d:35:14:
8f:63:9e:d2:d7:e8:29:86:35:8d:56:d6:83:41:96:e0:c4:d6:
ca:9e:4c:8e:6e:00:5d:4c:19:3d:24:08:cb:a1:d9:f1:03:99:
c5:6c:eb:d6:e9:f9:e0:89:c3:d8:80:e8:7f:79:c8:a3:2d:8b:
eb:ae:f0:9b:00:ac:a0:8c:12:25:3d:34:32:32:6f:34:0e:a0:
87:e6:e8:21:00:9c:34:77:3c:0f:73:78:74:6b:39:ad:75:cf:
89:af:19:dd:42:68:3b:6c:41:80:c9:4c:f2:6d:ac:1f:82:b6:
0b:16:ce:1a:e2:f0:9f:21:6f:03:d5:44:94:36:f5:48:f2:ca:
c1:65:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:51 2024 by rpki-client on console-fra.rpki-client.org