Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/oUhQihgO9Ltp2x_C7WuIT6faDGY.roa
File: oUhQihgO9Ltp2x_C7WuIT6faDGY.roa (raw, json)
Hash identifier: rKQaz0Z2IHZDMHbssGfOzuxT4kiL09s+v2x2I2cQhmc=
Subject key identifier: A1:48:50:8A:18:0E:F4:BB:69:DB:1F:C2:ED:6B:88:4F:A7:DA:0C:66
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 01837438E3686EC79256B2C8372B59B5DC9E
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/oUhQihgO9Ltp2x_C7WuIT6faDGY.roa
Signing time: Sun 25 Sep 2022 10:37:08 +0000
ROA not before: Sun 25 Sep 2022 10:37:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200548
IP address blocks: 37.16.92.0/22 maxlen: 22
37.16.93.0/24 maxlen: 24
37.16.94.0/24 maxlen: 24
37.16.92.0/24 maxlen: 24
37.16.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:74:38:e3:68:6e:c7:92:56:b2:c8:37:2b:59:b5:dc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Sep 25 10:37:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a148508a180ef4bb69db1fc2ed6b884fa7da0c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:54:8c:92:64:8d:87:93:11:3c:1a:87:99:07:
67:d9:69:59:8a:1b:44:3b:c0:0a:96:40:59:24:93:
b1:47:9a:52:de:d8:1d:40:77:b0:98:0a:66:25:3f:
59:96:fe:2b:bd:d5:1b:66:47:41:5b:b7:d0:82:dc:
53:18:a2:51:b4:d7:b2:87:d8:27:fa:8e:d2:b1:c8:
0c:84:98:5c:44:0f:a9:a4:98:bc:29:75:a6:d8:28:
a2:a6:cd:3f:7b:d6:26:c0:c1:8d:3c:50:84:fb:26:
5f:c6:01:f4:bc:7c:fb:65:d5:c3:e2:26:e4:6c:fd:
18:98:73:84:2d:63:d9:f2:69:46:73:1e:e3:91:25:
2e:95:88:bb:5a:09:ee:1e:09:67:0e:76:07:28:e5:
24:7c:2e:11:8c:3f:2d:ab:00:35:6f:c9:c3:26:a1:
dd:e2:72:58:61:23:4b:40:e1:1a:31:37:72:02:e8:
d5:a5:7b:9c:de:c1:7f:05:fc:30:3e:77:c8:b6:91:
93:96:3b:28:35:ef:6f:6e:61:3b:27:28:a4:62:2d:
f5:01:45:b9:c6:de:d5:02:c7:8d:43:86:9c:da:bc:
8f:e9:0d:66:80:a8:ec:b5:f0:b0:ae:d5:6e:78:b2:
3d:08:d8:67:61:87:48:15:b6:98:b2:86:2e:26:98:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:50:8A:18:0E:F4:BB:69:DB:1F:C2:ED:6B:88:4F:A7:DA:0C:66
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/oUhQihgO9Ltp2x_C7WuIT6faDGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.92.0/22
Signature Algorithm: sha256WithRSAEncryption
47:04:1e:9d:9f:5f:ef:af:bc:01:f4:53:49:03:db:34:36:3b:
46:3b:77:ae:8f:59:91:36:5d:1c:da:32:42:0d:c2:c5:56:ad:
76:e5:e0:0f:10:b8:1b:b3:50:cc:0c:42:92:2e:22:af:66:53:
cb:dc:40:0e:ae:5d:aa:29:ee:50:48:96:79:10:89:33:b1:c4:
30:dc:84:ce:03:af:85:94:97:5f:84:33:ee:57:d7:3e:9f:0f:
94:cd:1c:ec:5c:ad:b2:91:05:cd:69:c4:ab:c7:ff:86:58:b2:
71:94:3f:29:a0:70:f6:73:36:bf:cd:f5:fa:87:32:f6:95:b3:
12:1d:9b:bb:a9:11:56:bc:84:7d:32:8c:f7:b1:8e:31:56:ce:
f9:c6:79:72:c9:35:dc:99:98:22:63:8b:af:e4:af:62:ed:d6:
30:4b:d1:77:bc:97:88:d3:09:aa:d1:0f:56:5f:4b:42:2f:b7:
e9:61:69:b6:2c:75:47:ee:fe:a5:74:f6:43:fa:52:c4:a4:33:
a6:65:25:25:47:25:0f:83:dd:60:05:06:f2:e5:86:56:65:a9:
4a:18:2f:2b:ed:4c:8e:e8:dd:be:a6:f9:5e:de:31:51:56:cc:
b2:0d:e9:0c:fe:36:ef:d9:6c:a7:7a:77:3e:73:77:76:04:8e:
e6:c7:71:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN0OONobseSVrLINytZtdyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm
NmE1Y2YwHhcNMjIwOTI1MTAzNzA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTQ4NTA4YTE4MGVmNGJiNjlkYjFmYzJlZDZiODg0ZmE3ZGEwYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1SMkmSNh5MRPBqHmQdn2WlZihtE
O8AKlkBZJJOxR5pS3tgdQHewmApmJT9Zlv4rvdUbZkdBW7fQgtxTGKJRtNeyh9gn
+o7SscgMhJhcRA+ppJi8KXWm2Ciips0/e9YmwMGNPFCE+yZfxgH0vHz7ZdXD4ibk
bP0YmHOELWPZ8mlGcx7jkSUulYi7WgnuHglnDnYHKOUkfC4RjD8tqwA1b8nDJqHd
4nJYYSNLQOEaMTdyAujVpXuc3sF/BfwwPnfItpGTljsoNe9vbmE7JyikYi31AUW5
xt7VAseNQ4ac2ryP6Q1mgKjstfCwrtVueLI9CNhnYYdIFbaYsoYuJpjVcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKFIUIoYDvS7adsfwu1riE+n2gxmMB8GA1UdIwQY
MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt
Zjk5OWUxYmViOTYxLzEvb1VoUWloZ085THRwMnhfQzdXdUlUNmZhREdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx
LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJRBcMA0G
CSqGSIb3DQEBCwUAA4IBAQBHBB6dn1/vr7wB9FNJA9s0NjtGO3euj1mRNl0c2jJC
DcLFVq125eAPELgbs1DMDEKSLiKvZlPL3EAOrl2qKe5QSJZ5EIkzscQw3ITOA6+F
lJdfhDPuV9c+nw+UzRzsXK2ykQXNacSrx/+GWLJxlD8poHD2cza/zfX6hzL2lbMS
HZu7qRFWvIR9Moz3sY4xVs75xnlyyTXcmZgiY4uv5K9i7dYwS9F3vJeI0wmq0Q9W
X0tCL7fpYWm2LHVH7v6ldPZD+lLEpDOmZSUlRyUPg91gBQby5YZWZalKGC8r7UyO
6N2+pvle3jFRVsyyDekM/jbv2Wynenc+c3d2BI7mx3Eh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:53 2024 by rpki-client on console-ams.rpki-client.org