Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/eCPQhgWvhs7sT0T54_7SRxt-mjc.roa
File: eCPQhgWvhs7sT0T54_7SRxt-mjc.roa (raw, json)
Hash identifier: JXPFgubYsWMF2X+/1lA84myQKVh/MC34b1MQfC0ODw8=
Subject key identifier: 78:23:D0:86:05:AF:86:CE:EC:4F:44:F9:E3:FE:D2:47:1B:7E:9A:37
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 0FF72A3B
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/eCPQhgWvhs7sT0T54_7SRxt-mjc.roa
Signing time: Sat 01 Jan 2022 02:58:54 +0000
ROA not before: Sat 01 Jan 2022 02:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62381
IP address blocks: 185.37.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267856443 (0xff72a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jan 1 02:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7823d08605af86ceec4f44f9e3fed2471b7e9a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:04:e0:7c:82:d6:1a:f8:8a:75:4a:5f:d8:
eb:a4:e8:b7:39:66:38:18:5c:7e:04:85:06:15:33:
3d:fb:81:36:5b:de:10:13:3d:d6:74:01:87:4d:c9:
70:16:bd:19:54:8f:e3:da:91:73:d8:b3:94:7d:de:
dc:f3:d0:49:a1:61:25:cc:1b:fa:72:9a:4a:ed:aa:
2a:f7:67:75:4a:f3:74:d0:70:d1:50:1d:c8:69:61:
76:ff:c1:af:ae:4e:ed:ce:e0:19:a0:0e:43:35:40:
7b:45:2f:59:a0:71:4b:f9:b0:91:13:cc:b3:80:95:
31:9e:3e:11:a9:ef:22:0a:2f:29:34:6c:ba:de:64:
c0:74:2b:6f:fb:a3:37:65:98:db:32:06:a4:97:17:
ab:a9:3e:3a:25:e5:1e:33:a7:e0:13:97:55:c2:62:
5a:50:09:2e:55:02:f9:ce:64:c6:5c:61:4c:0f:df:
11:98:8b:d2:6c:25:cd:16:72:24:e1:52:f6:3a:a8:
43:3a:38:73:64:6d:92:d8:6c:45:95:15:a7:63:0d:
f8:4c:a2:bd:f1:10:f5:92:97:2c:4f:7d:26:d2:68:
30:fa:0b:50:a2:5e:2c:5f:e3:53:b8:0f:26:06:05:
6d:e6:ef:3b:07:c4:4c:49:b4:42:4b:a0:d5:d5:47:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:D0:86:05:AF:86:CE:EC:4F:44:F9:E3:FE:D2:47:1B:7E:9A:37
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/eCPQhgWvhs7sT0T54_7SRxt-mjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.80.0/22
Signature Algorithm: sha256WithRSAEncryption
81:f3:ae:18:3f:e8:37:68:f9:0d:f8:53:a5:be:35:d8:75:56:
a0:a2:a0:23:02:8f:a9:0f:da:cf:7f:e3:96:4e:e0:25:ae:3c:
e2:3f:62:c5:63:26:c0:01:68:14:3d:6f:63:2f:e7:3a:11:f2:
38:ae:04:a2:1a:92:8d:2f:06:75:a5:49:98:b4:07:58:ba:4e:
79:77:1c:b9:b7:e2:ba:a4:36:53:9d:66:39:0b:1c:c8:dc:8d:
37:3f:a8:f5:6b:68:5e:ee:b0:92:10:2e:c9:8c:ea:6e:8c:3d:
ec:80:6f:0a:3a:fe:a8:57:90:63:74:9f:2b:84:99:69:d4:01:
4f:ac:03:b8:cc:14:ad:b3:a2:1f:8f:b4:a2:5f:6e:b8:87:88:
91:60:83:aa:96:21:ee:b5:bd:7a:eb:45:3b:16:d4:ab:d4:b1:
3b:c6:d5:fc:e5:f1:38:79:f3:9e:5d:f1:87:3b:aa:e2:f9:61:
56:0d:b1:35:d3:14:4c:0f:d0:90:63:cf:4a:ae:aa:f5:96:db:
a4:31:f5:24:b4:e3:38:9c:c0:25:5d:9c:97:d9:92:d0:fd:bc:
64:5c:6e:ed:c9:58:b6:8d:b6:ae:a2:ca:42:6c:02:7a:2a:c3:
b8:dc:e3:1c:d1:00:08:5c:76:cb:2a:95:8b:77:0c:47:8e:03:
c5:b2:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:28 2023 by rpki-client on console-ams.rpki-client.org