Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/PhERsv7BxE_QMFjoyFJmZjR0tGM.roa
File: PhERsv7BxE_QMFjoyFJmZjR0tGM.roa (raw, json)
Hash identifier: HIcKdBJj8aUY4DmLMc6DG7vNNWbbINbJ9UA375mSS9M=
Subject key identifier: 3E:11:11:B2:FE:C1:C4:4F:D0:30:58:E8:C8:52:66:66:34:74:B4:63
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0185718C2E44B43285594D360E880F4ACE3E
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/PhERsv7BxE_QMFjoyFJmZjR0tGM.roa
Signing time: Mon 02 Jan 2023 08:14:50 +0000
ROA not before: Mon 02 Jan 2023 08:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211092
IP address blocks: 37.157.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2e:44:b4:32:85:59:4d:36:0e:88:0f:4a:ce:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 2 08:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e1111b2fec1c44fd03058e8c85266663474b463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:9c:19:41:ed:cf:22:72:18:2e:ca:12:73:
02:b5:a7:62:fe:ba:b2:70:4e:a2:dc:cb:c5:bb:02:
31:6d:bb:80:61:e8:4d:27:11:38:24:f9:84:b9:ac:
58:ee:49:29:3b:62:77:73:e6:2c:56:31:1f:4b:12:
5d:02:14:54:3d:44:14:c6:c4:42:e0:47:b9:bd:6d:
d1:22:93:bd:5b:61:58:c7:91:0f:de:d8:7e:c6:75:
89:ea:7b:c9:a6:cf:be:72:99:23:62:a6:88:d7:ef:
4b:10:28:b6:5b:85:49:b4:c2:a0:ea:93:25:cf:f2:
c0:bd:02:45:14:9e:42:89:19:fe:61:5a:b4:f1:0e:
cf:a9:6c:8e:c5:8f:c8:83:d9:75:8e:33:ef:6e:52:
50:52:63:bb:a9:67:46:d0:36:26:a7:f3:74:7c:e4:
9a:92:f0:06:49:be:42:7f:95:09:92:3d:ff:3c:ce:
ff:0d:28:92:85:98:a0:85:1c:d8:26:1a:79:b6:95:
31:eb:98:7c:64:be:19:af:ab:60:da:c5:92:ee:34:
4e:ee:39:d3:6c:7e:b6:e5:cd:e9:05:cf:64:11:b2:
35:80:ca:ed:f0:8d:9f:f7:1b:fc:d4:0a:d8:7d:59:
4b:1b:ed:12:d8:f3:69:32:29:af:38:73:28:e8:d8:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:11:B2:FE:C1:C4:4F:D0:30:58:E8:C8:52:66:66:34:74:B4:63
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/PhERsv7BxE_QMFjoyFJmZjR0tGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.211.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f8:36:1d:fd:7c:b5:5c:9b:dd:fd:92:a0:48:e1:70:aa:a7:
3e:b5:50:37:8f:a7:6b:44:be:23:d0:5b:44:5d:20:72:6c:d9:
c6:3f:5c:d2:a5:bd:df:c3:b1:b3:1d:32:67:bd:a4:9a:d4:cf:
ae:dc:93:a1:63:fd:7d:48:1d:ea:53:00:bd:08:bc:a3:73:3e:
b3:1c:ac:dc:40:60:89:e9:ca:d5:b8:51:63:7e:51:2a:ca:50:
1e:e4:2d:4f:61:2d:b1:64:a1:f0:08:d4:1b:ec:4e:95:78:f7:
13:ee:ad:48:af:a2:b9:66:db:f9:bf:f5:8a:b5:22:ac:1d:1c:
22:a4:7c:a5:19:ab:06:50:54:84:a8:a3:4c:d9:19:d5:73:f6:
13:27:7d:09:cf:26:95:0f:68:95:99:18:91:c3:57:42:32:35:
47:b8:57:93:56:58:77:7d:1a:25:c8:21:9b:4a:80:5c:76:ad:
37:6c:6d:c9:65:43:05:c7:5f:80:48:93:b8:fb:bb:c5:6d:7c:
1f:7c:17:2d:bc:e7:97:4a:16:8b:89:f2:a5:8e:1d:ce:68:60:
d4:46:92:79:dd:e8:b0:90:7d:47:ce:99:43:25:b0:3f:cd:67:
a6:b8:d3:f5:65:4e:1f:b8:77:70:88:9f:2f:67:df:ac:04:2b:
25:41:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:55 2025 by rpki-client