Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/lK1lKMsGqJ-1C92lAmSSo-iXTDk.roa
File: lK1lKMsGqJ-1C92lAmSSo-iXTDk.roa (raw, json)
Hash identifier: NdTMZwvTKRXHqGT1TFfgUPIl1gVanoqnCgeuolrp1/M=
Subject key identifier: 94:AD:65:28:CB:06:A8:9F:B5:0B:DD:A5:02:64:92:A3:E8:97:4C:39
Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial: 01825BC2D6AD0C48E316B8EC93EF04783F0E
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/lK1lKMsGqJ-1C92lAmSSo-iXTDk.roa
Signing time: Mon 01 Aug 2022 23:34:31 +0000
ROA not before: Mon 01 Aug 2022 23:34:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8749
IP address blocks: 37.32.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5b:c2:d6:ad:0c:48:e3:16:b8:ec:93:ef:04:78:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Validity
Not Before: Aug 1 23:34:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94ad6528cb06a89fb50bdda5026492a3e8974c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:bd:51:ef:18:b7:b6:bc:e2:7c:40:76:31:
90:d0:cc:51:a6:9b:a2:c4:25:ec:a2:b4:e3:ae:a9:
b6:0d:01:34:25:5c:10:e2:04:18:50:2e:51:2c:28:
63:6e:25:df:4c:80:0d:41:e2:1e:61:3d:76:ac:41:
cd:36:7a:ca:00:17:34:38:29:49:5a:ff:76:ff:57:
ce:45:67:84:c6:2b:be:db:95:95:fb:70:f4:e6:8a:
a1:7b:c1:93:27:b7:f8:db:3f:65:de:50:90:71:18:
a2:ac:b5:64:ae:e5:9f:33:0f:57:06:22:fb:31:8a:
13:15:12:61:e6:60:86:84:dd:2a:e3:2a:5f:b4:99:
6f:c4:53:33:45:dd:c0:f7:ae:37:fc:42:0a:53:11:
d7:60:07:45:0c:8e:2f:d0:89:20:c1:8d:95:18:05:
74:40:ec:a4:f8:0b:8a:57:8d:c8:16:65:ee:ef:52:
13:65:8e:cf:2e:fa:46:4c:c8:55:4f:f5:d9:1e:40:
72:17:c3:1e:35:36:92:18:7a:c0:8a:72:a7:51:e7:
ff:8c:63:70:5b:d3:c6:a8:7c:06:e5:5b:6d:a1:78:
fd:10:50:a6:74:b8:c8:9a:50:0a:78:d6:c9:4e:c6:
3d:a8:cb:22:f7:e0:c0:12:87:f4:cf:ae:30:02:b9:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:65:28:CB:06:A8:9F:B5:0B:DD:A5:02:64:92:A3:E8:97:4C:39
X509v3 Authority Key Identifier:
keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/lK1lKMsGqJ-1C92lAmSSo-iXTDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.101.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d3:6d:34:09:b6:e8:d1:3c:ab:c0:4f:37:34:f2:bc:c8:7b:
71:f4:a4:f4:3c:24:57:4a:80:1f:06:8a:35:dd:7d:7f:dc:17:
47:28:d7:75:9b:1d:7c:d7:b4:81:9f:15:48:ed:05:90:82:d9:
0c:59:c9:e1:7c:f1:ae:89:b7:32:d5:bd:9e:73:e0:29:ea:cc:
bf:cc:1b:4a:9a:07:e0:c0:ba:36:99:9b:3a:65:2b:97:d3:b0:
5e:29:ad:b4:22:01:b3:5b:20:7b:d5:0d:ae:9c:99:85:e5:93:
8d:5e:93:ac:3f:82:b8:c4:f4:6b:d2:39:ec:2e:c6:67:c8:f7:
00:66:80:88:e2:98:33:57:c1:bb:c8:2d:dc:a0:f8:32:72:94:
5f:2f:d0:04:fb:f0:8a:fc:85:2a:02:19:4a:c5:a4:f8:56:ab:
2d:b0:06:9e:45:3c:b6:e6:03:a5:43:c0:f2:88:51:e3:0a:cf:
15:a8:70:bc:5f:d8:b1:9b:de:9b:a0:7a:9e:c6:10:43:43:6b:
fa:2d:01:4c:b5:a5:cf:59:d5:c3:02:06:81:d4:8b:c6:1b:01:
6d:8f:19:92:9a:89:7c:10:b0:ce:9f:bf:5e:f7:a0:64:3f:2e:
f9:ed:48:44:cc:fc:86:95:2b:a5:e3:15:6c:20:52:cc:6c:29:
56:8a:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:05 2023 by rpki-client on console-fra.rpki-client.org