Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/37msS4kAbanUsPX8Jn-GGi0Fh7g.roa
File: 37msS4kAbanUsPX8Jn-GGi0Fh7g.roa (raw, json)
Hash identifier: 8irB8kD1oMkNjfv3/OvxeDPfLWzbXpEeErKrjX24wQ0=
Subject key identifier: DF:B9:AC:4B:89:00:6D:A9:D4:B0:F5:FC:26:7F:86:1A:2D:05:87:B8
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 023963F3
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/37msS4kAbanUsPX8Jn-GGi0Fh7g.roa
Signing time: Sat 01 Jan 2022 15:00:57 +0000
ROA not before: Sat 01 Jan 2022 15:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 195.74.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37315571 (0x23963f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Jan 1 15:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfb9ac4b89006da9d4b0f5fc267f861a2d0587b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:b9:e7:18:3c:37:d5:62:66:14:53:19:83:
43:99:1c:37:d8:b6:0e:f1:d0:14:64:e9:6c:d6:bd:
a2:ef:0e:7a:ea:9c:21:3b:ad:7b:4c:8c:91:55:b5:
ef:7a:99:42:31:ab:f5:94:3c:62:a9:21:b1:73:3e:
87:f5:96:ef:2d:e1:24:ad:d7:a9:25:ca:e0:34:46:
48:1d:92:05:c0:52:06:4c:82:d3:b7:c1:29:cb:71:
9e:a2:67:1a:30:49:cc:7b:b5:3f:3f:19:5f:69:d3:
6b:a8:1b:1f:7c:8e:27:45:e7:99:e8:a2:7c:2f:f0:
2a:72:9c:d2:b9:53:e5:73:11:c7:f0:b0:3a:43:e8:
fa:1e:a9:bc:33:69:f1:5a:5b:ff:eb:bc:50:19:98:
e9:dd:47:4c:57:d5:2b:ea:6e:1f:8f:b0:b9:8b:0e:
53:94:14:b1:9c:01:f5:b4:f7:63:9b:57:21:86:4c:
16:13:5d:40:67:1f:c4:d7:f5:58:d6:f3:34:79:0c:
f2:96:dd:30:f7:a8:c8:15:27:dd:00:7a:d7:a0:44:
02:73:51:28:77:d0:31:75:61:bc:d4:6b:1f:e4:3b:
8d:bc:35:89:a5:9b:b4:b4:af:4b:c4:12:c1:a1:db:
13:12:2d:45:b0:81:c6:87:6e:d1:75:bc:1f:fe:a7:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:AC:4B:89:00:6D:A9:D4:B0:F5:FC:26:7F:86:1A:2D:05:87:B8
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/37msS4kAbanUsPX8Jn-GGi0Fh7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.74.60.0/24
Signature Algorithm: sha256WithRSAEncryption
22:98:6e:a5:13:8d:b7:27:e8:b6:62:f3:68:f5:0c:13:95:bd:
76:55:eb:04:17:46:95:e9:49:40:c1:46:83:11:81:bf:d1:81:
7a:70:3e:59:2f:22:98:a2:18:3c:2f:65:32:98:24:0c:be:53:
be:8b:c0:6f:9f:fe:3d:64:64:09:89:8b:7c:0a:87:69:7e:08:
38:31:db:54:2c:fe:5d:b5:8b:39:1c:dc:a9:e0:e7:07:f7:5b:
dd:f8:0a:d9:29:e7:d7:72:10:f0:28:ec:dc:34:7e:5d:a8:7b:
79:da:60:43:12:26:92:02:e4:93:21:a9:00:c2:93:52:d6:68:
44:ce:85:51:04:a7:f0:f7:4f:5b:87:ba:78:91:b7:74:94:cd:
e1:82:fd:6b:f0:5e:22:ba:03:7b:60:28:f0:a4:ea:94:4f:b0:
a7:0c:56:42:bd:a3:2d:6c:0f:6a:3e:77:97:10:db:52:2a:5d:
36:39:23:31:f3:10:be:47:92:cc:47:6b:cf:93:15:8a:24:47:
be:ad:a4:3f:da:33:5e:45:6c:73:d7:18:e1:33:8c:77:b2:1b:
cc:d0:29:84:50:a2:a6:75:59:6c:81:5c:44:45:a3:9a:c3:eb:
99:16:fa:ab:c6:0c:e9:a2:4b:23:26:b4:fa:b6:a5:5a:ad:13:
37:34:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:12 2023 by rpki-client on console-fra.rpki-client.org