Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/2RerpStJo-T9m0JInlPJh0fS9vo.roa
File: 2RerpStJo-T9m0JInlPJh0fS9vo.roa (raw, json)
Hash identifier: 8AQWYGn3e39NF+rpE2+aTqcnMRIHq3g092bzO2vYEw4=
Subject key identifier: D9:17:AB:A5:2B:49:A3:E4:FD:9B:42:48:9E:53:C9:87:47:D2:F6:FA
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 0182B2A9E8A42E245BD1BCB334638446B9F2
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/2RerpStJo-T9m0JInlPJh0fS9vo.roa
Signing time: Thu 18 Aug 2022 20:34:15 +0000
ROA not before: Thu 18 Aug 2022 20:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57811
IP address blocks: 37.247.235.0/24 maxlen: 24
37.247.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:a9:e8:a4:2e:24:5b:d1:bc:b3:34:63:84:46:b9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Aug 18 20:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d917aba52b49a3e4fd9b42489e53c98747d2f6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:9f:a3:f3:46:55:9f:9c:56:28:c8:96:fc:
e9:bf:37:b2:08:4b:9a:4a:4c:64:ce:a0:72:4b:ec:
9c:a0:f9:3b:fa:aa:b1:59:c2:e6:2a:22:01:66:b7:
18:f7:85:5a:40:ba:ee:b8:e0:5d:fa:2a:e4:d9:88:
20:ac:a6:e2:07:a1:22:71:af:53:83:a4:41:6f:2b:
f4:f9:ad:8e:6a:07:11:0e:62:2c:30:9a:85:cc:cd:
44:22:1f:83:be:77:fe:52:c0:51:21:fc:03:6f:fc:
e3:99:c8:a5:09:78:04:87:79:fa:b7:41:7a:d4:35:
7d:63:98:e8:c9:f6:10:08:aa:96:e5:0a:c2:0a:98:
47:6f:7b:ba:4c:32:88:52:5a:86:ac:79:a2:57:eb:
6a:b0:15:ad:5b:d8:15:95:a4:18:2d:c4:ad:63:9e:
34:af:b4:7e:05:3a:c4:35:73:9d:30:53:0e:1a:7d:
43:24:d4:24:15:3e:62:4a:12:ae:8f:d3:06:4f:b6:
02:ea:f7:ca:c7:84:81:be:e6:11:3e:05:f8:b8:48:
73:ba:14:f0:31:e1:5d:0f:c2:e1:2e:1f:1c:af:d1:
80:fe:98:72:26:be:98:03:1a:b9:f9:33:aa:56:71:
67:26:d3:77:a3:6a:3f:d7:db:d1:60:aa:af:2c:f9:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:AB:A5:2B:49:A3:E4:FD:9B:42:48:9E:53:C9:87:47:D2:F6:FA
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/2RerpStJo-T9m0JInlPJh0fS9vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.235.0-37.247.236.255
Signature Algorithm: sha256WithRSAEncryption
1b:0a:96:47:15:c7:d1:c8:18:5c:93:39:19:52:a3:37:cf:f7:
86:21:1e:2e:5b:9e:fd:27:c5:e4:8a:59:f1:ba:a2:ea:1a:b4:
83:66:f9:c5:eb:ee:73:d3:9f:02:b8:0f:e4:25:44:80:de:d5:
9a:e9:59:26:d3:51:ca:08:da:c2:c4:40:26:78:7f:aa:de:70:
43:b1:8e:6f:94:e7:cb:1a:fd:f2:7e:a7:f3:cb:ba:2b:3b:b9:
af:e3:d6:c5:6b:96:59:3f:e3:f4:b1:7e:11:0c:ab:81:74:04:
9a:52:81:0c:6d:19:a7:a2:f2:ee:35:0d:8e:86:35:c0:a5:96:
8f:0c:ad:3d:ca:f1:2d:d8:50:3d:ba:7c:c6:9e:69:2d:38:6b:
c5:6e:4c:c0:dc:88:52:96:78:5f:6f:88:90:23:1e:71:56:65:
2a:55:ff:68:32:85:32:55:09:aa:be:fd:e0:f2:e0:7c:4c:61:
bd:0e:62:3d:a9:9a:ef:61:cc:9f:47:28:b7:d8:e9:d7:c1:a7:
2b:12:ec:a6:e3:16:67:d3:51:b7:d7:bf:36:fb:0b:02:79:d6:
d2:67:84:27:b1:92:4b:6b:95:d3:18:74:42:e6:87:a4:c6:b8:
0f:5a:ea:ad:72:b4:c5:8e:3f:3a:5d:ab:a6:28:98:f9:bd:f9:
b9:28:5b:51
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYKyqeikLiRb0byzNGOERrnyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2
ZWM2ZTYwHhcNMjIwODE4MjAzNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTE3YWJhNTJiNDlhM2U0ZmQ5YjQyNDg5ZTUzYzk4NzQ3ZDJmNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAKfo/NGVZ+cVijIlvzpvzeyCEua
SkxkzqByS+ycoPk7+qqxWcLmKiIBZrcY94VaQLruuOBd+irk2YggrKbiB6Eica9T
g6RBbyv0+a2OagcRDmIsMJqFzM1EIh+Dvnf+UsBRIfwDb/zjmcilCXgEh3n6t0F6
1DV9Y5joyfYQCKqW5QrCCphHb3u6TDKIUlqGrHmiV+tqsBWtW9gVlaQYLcStY540
r7R+BTrENXOdMFMOGn1DJNQkFT5iShKuj9MGT7YC6vfKx4SBvuYRPgX4uEhzuhTw
MeFdD8LhLh8cr9GA/phyJr6YAxq5+TOqVnFnJtN3o2o/19vRYKqvLPk8LwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNkXq6UrSaPk/ZtCSJ5TyYdH0vb6MB8GA1UdIwQY
MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt
OTE2NGUzNTJhODNjLzEvMlJlcnBTdEpvLVQ5bTBKSW5sUEpoMGZTOXZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj
LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAl9+sD
BAAl9+wwDQYJKoZIhvcNAQELBQADggEBABsKlkcVx9HIGFyTORlSozfP94YhHi5b
nv0nxeSKWfG6ouoatINm+cXr7nPTnwK4D+QlRIDe1ZrpWSbTUcoI2sLEQCZ4f6re
cEOxjm+U58sa/fJ+p/PLuis7ua/j1sVrllk/4/SxfhEMq4F0BJpSgQxtGaei8u41
DY6GNcCllo8MrT3K8S3YUD26fMaeaS04a8VuTMDciFKWeF9viJAjHnFWZSpV/2gy
hTJVCaq+/eDy4HxMYb0OYj2pmu9hzJ9HKLfY6dfBpysS7KbjFmfTUbfXvzb7CwJ5
1tJnhCexkktrldMYdELmh6TGuA9a6q1ytMWOPzpdq6YomPm9+bkoW1E=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org