Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/y2iDA1evLYIOkIutw7KkNw79WdI.roa
File: y2iDA1evLYIOkIutw7KkNw79WdI.roa (raw, json)
Hash identifier: spcnrjCVRMLH8wa2CYeTfAGhwg9Q5rcvPRwMEx1EAtI=
Subject key identifier: CB:68:83:03:57:AF:2D:82:0E:90:8B:AD:C3:B2:A4:37:0E:FD:59:D2
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 1737AB57
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/y2iDA1evLYIOkIutw7KkNw79WdI.roa
Signing time: Sat 01 Jan 2022 09:06:12 +0000
ROA not before: Sat 01 Jan 2022 09:06:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198370
IP address blocks: 37.18.187.0/24 maxlen: 24
37.18.186.0/24 maxlen: 24
37.18.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389524311 (0x1737ab57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Jan 1 09:06:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb68830357af2d820e908badc3b2a4370efd59d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:f2:70:3a:33:4a:ad:e6:9a:76:e4:f4:44:
b7:c7:65:44:cc:50:d8:d1:3b:52:ba:35:02:4d:f0:
89:5b:3d:81:09:17:47:13:f0:ae:2e:2f:7d:e3:53:
2f:bc:98:b7:30:eb:18:e0:d7:99:9a:7c:88:81:47:
c0:28:ac:5f:52:38:71:8e:39:8d:53:19:b5:d2:e2:
75:e3:4c:b3:6f:87:71:f5:2c:f4:9f:be:54:dc:8c:
cf:d3:2b:1b:e6:c0:f1:ea:f1:80:dd:82:c6:a0:37:
75:6f:94:da:b4:55:34:f8:83:89:07:6b:fd:ad:83:
04:06:f1:4d:9d:a8:1e:83:eb:8e:ee:97:46:cf:07:
f8:73:f4:08:a7:f1:b8:98:59:8e:4e:78:f4:8f:e5:
87:92:bc:4d:43:ca:7a:fa:a5:39:77:c5:30:aa:7d:
7d:33:fe:04:44:08:a5:47:4a:7b:86:b1:c0:1b:0b:
12:e5:cb:6c:d2:9c:3e:09:b9:20:f0:63:e7:e2:7a:
de:3d:28:89:00:d7:3d:0a:e6:7b:da:5d:e0:9d:ef:
e9:4b:1b:e2:d2:1e:96:f8:6d:1d:52:2a:80:d5:a1:
e2:9f:34:79:b2:45:18:a2:e4:b0:6e:be:78:1b:4b:
08:61:8a:4d:30:a4:c6:70:69:f2:03:97:4c:37:01:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:68:83:03:57:AF:2D:82:0E:90:8B:AD:C3:B2:A4:37:0E:FD:59:D2
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/y2iDA1evLYIOkIutw7KkNw79WdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.184.0/24
37.18.186.0/23
Signature Algorithm: sha256WithRSAEncryption
49:54:44:29:bf:d0:73:75:c5:0e:af:ec:68:3b:d7:56:03:00:
10:3e:db:17:26:23:0a:70:38:f3:66:12:a2:b6:77:44:e1:5e:
40:16:56:6f:fc:83:ae:88:c2:4b:f8:b0:57:c4:a8:af:00:0f:
95:61:0c:40:2d:38:61:cc:67:d2:99:d2:10:53:79:5c:06:e9:
14:f2:84:09:53:b4:cd:d8:19:64:b5:b4:b9:cc:a0:9b:5d:27:
cd:89:3e:54:a3:e8:ff:8e:8d:ba:09:98:7d:2b:93:cf:37:17:
40:83:7e:d8:70:41:99:f8:c1:5d:b2:76:af:61:06:af:5e:50:
77:4b:d1:ae:6b:d5:29:bc:d1:b2:a5:8b:35:fc:b1:39:29:ed:
88:33:5f:bc:70:f0:e3:82:d3:bd:07:93:ac:51:b1:25:a0:4e:
55:aa:ab:8b:71:ca:6b:dc:83:68:f1:c0:d6:9c:65:62:2c:6f:
c0:9c:e5:33:59:d8:2b:80:56:05:b7:0a:e6:b5:c2:87:d0:9d:
ce:ea:3b:d0:da:4c:28:7c:71:7b:09:33:d2:c6:5b:c4:31:f0:
10:1c:60:17:37:a5:ee:20:0b:88:79:c1:15:25:9e:24:75:ba:
14:8d:35:c0:53:84:c1:72:d8:f6:5e:5b:63:1a:ea:5c:81:4d:
2d:53:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:06 2024 by rpki-client on console-fra.rpki-client.org