Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/7tYJOLmVk1-LDXXPdK-LHub2mfQ.roa
File: 7tYJOLmVk1-LDXXPdK-LHub2mfQ.roa (raw, json)
Hash identifier: kdUDHFDvKPdN9s/0yoDfNPntQ2WsXpPznmUYcbaaAoY=
Subject key identifier: EE:D6:09:38:B9:95:93:5F:8B:0D:75:CF:74:AF:8B:1E:E6:F6:99:F4
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 01837438E29382DC1958C6FDF051A4AA9EE1
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/7tYJOLmVk1-LDXXPdK-LHub2mfQ.roa
Signing time: Sun 25 Sep 2022 10:37:08 +0000
ROA not before: Sun 25 Sep 2022 10:37:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12897
IP address blocks: 37.16.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:74:38:e2:93:82:dc:19:58:c6:fd:f0:51:a4:aa:9e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Sep 25 10:37:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed60938b995935f8b0d75cf74af8b1ee6f699f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:2e:83:7c:5b:53:dd:0c:3a:9b:d9:df:45:
3b:dc:1f:f2:97:dd:4c:76:8d:e4:ad:4e:9a:2b:b7:
b8:89:95:be:af:e4:ff:77:7b:b4:88:78:46:04:6e:
26:9e:e9:c0:d7:82:7b:a5:e9:ae:3f:27:a1:7c:e2:
98:b4:0c:c6:cd:78:da:8a:29:ba:c0:74:1f:fd:73:
06:1c:8b:ed:76:54:c3:50:3e:03:36:ff:33:3f:b0:
5b:69:b7:8b:62:fb:2e:84:60:da:14:9c:cb:fa:7d:
a2:61:a9:9a:96:8e:9c:05:65:e4:02:b7:e5:0f:0c:
8e:05:2e:d0:c8:d3:89:c7:c5:fe:ed:81:0c:a4:ae:
ab:88:5c:9e:ad:63:d0:a8:fb:41:c0:56:01:be:84:
7d:27:93:d8:4d:11:75:64:3d:85:8c:01:fe:9f:c2:
5c:57:43:cb:04:ee:c1:11:8a:d9:b7:c3:d2:06:12:
7e:5a:9a:a4:70:0e:20:b6:8c:92:e4:c9:2f:eb:28:
56:12:a8:5a:20:26:cc:bc:34:a7:86:00:ac:e5:4e:
c1:81:6b:44:a8:65:09:8c:e8:3c:65:13:18:80:f2:
6f:67:37:16:4c:43:76:3b:c1:15:2f:dc:cb:77:56:
72:8d:33:00:7e:0d:27:d4:fc:4b:8f:b5:ba:97:9a:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:09:38:B9:95:93:5F:8B:0D:75:CF:74:AF:8B:1E:E6:F6:99:F4
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/7tYJOLmVk1-LDXXPdK-LHub2mfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:89:64:66:57:c2:c5:af:b7:4f:67:76:65:b5:24:2c:c3:f8:
75:81:4b:7b:51:8f:28:91:d2:79:a1:0a:a7:11:64:c4:f1:41:
e6:1c:94:cd:c0:9d:1b:38:b1:f8:e7:6b:68:17:24:62:2d:65:
65:e7:21:24:a7:0b:cb:ed:7f:23:d3:f1:28:ff:a3:8b:a5:66:
6a:be:c1:1e:33:da:c1:d0:a6:17:c2:96:95:1f:ab:ae:c6:54:
f1:9c:72:d3:5b:4a:e8:79:d2:08:8e:50:22:ea:9e:c2:f5:16:
f8:17:5e:29:af:e4:1b:03:d8:95:47:ce:6f:a6:0a:b1:b6:17:
35:b0:72:23:42:d9:2b:69:85:ad:49:26:18:f5:40:5a:52:d6:
34:95:65:bf:52:d6:ad:2c:23:a0:03:a9:69:b9:21:6f:f3:86:
63:c9:38:2c:9f:4a:ea:0f:9c:2d:7b:35:1f:fb:29:40:ce:f8:
a2:2b:7b:3d:4e:2e:af:e6:b3:e1:db:2e:38:7e:ed:24:2c:07:
5e:1e:71:1d:f1:22:42:d8:d0:1c:21:3b:92:7a:59:22:81:5c:
c5:b9:16:77:94:62:b4:62:74:e7:b1:c2:0e:1f:be:d2:3a:65:
3e:60:0d:3a:af:cc:50:26:1e:38:dc:5b:5b:72:55:fb:49:79:
0c:13:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:53 2024 by rpki-client on console-ams.rpki-client.org