Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/rPEY6AYHU2CVhzWjZUFMYtiUtXI.roa
File: rPEY6AYHU2CVhzWjZUFMYtiUtXI.roa (raw, json)
Hash identifier: efBXu3mM31xWm6684YSN+SGP9fYqT7ewPQ/pNHdYLAg=
Subject key identifier: AC:F1:18:E8:06:07:53:60:95:87:35:A3:65:41:4C:62:D8:94:B5:72
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 03867A13
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/rPEY6AYHU2CVhzWjZUFMYtiUtXI.roa
Signing time: Sat 01 Jan 2022 02:00:45 +0000
ROA not before: Sat 01 Jan 2022 02:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207339
IP address blocks: 37.123.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59144723 (0x3867a13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jan 1 02:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acf118e806075360958735a365414c62d894b572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:5f:0e:a7:4b:f3:35:fe:1b:20:51:ba:cf:
85:bd:ca:8d:98:f1:e0:2f:24:ab:79:96:36:12:34:
29:7e:40:88:cc:45:c1:fd:21:35:88:95:51:8d:e2:
e4:3f:56:f7:0a:83:95:55:6b:78:9f:13:3d:1f:fa:
f9:83:06:3d:21:3c:41:2d:1b:e0:3e:16:c3:ae:f1:
4d:5b:9c:6f:2f:36:26:55:35:b5:92:88:d1:64:52:
78:0c:9e:2f:c8:fd:e6:21:c1:81:b3:80:f9:be:39:
f6:bf:26:d7:8b:cf:3e:65:29:3a:7e:34:28:b3:aa:
df:2e:a0:a4:5d:6a:f5:e6:47:43:75:c9:f5:51:87:
a4:10:b6:e2:45:27:81:39:85:4f:3b:87:d1:9c:37:
04:e0:2a:9a:63:96:7d:b3:51:f2:58:1c:1c:01:a2:
4c:5e:e7:4b:15:0c:b9:e5:47:2e:5d:e0:2c:08:cc:
84:29:b8:b5:9d:6d:a3:cc:a4:e2:f9:82:65:a3:fa:
8c:4d:a9:e9:7c:de:18:37:b2:a0:df:3b:97:34:bf:
07:98:94:99:f8:b9:63:eb:df:b2:5d:3d:d0:91:74:
fe:f5:f9:6d:35:6c:d3:bd:86:b8:e2:e3:82:ca:d4:
dc:c1:64:30:54:16:94:a3:62:7c:22:a1:ac:75:36:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:18:E8:06:07:53:60:95:87:35:A3:65:41:4C:62:D8:94:B5:72
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/rPEY6AYHU2CVhzWjZUFMYtiUtXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.254.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7a:14:cc:6f:2d:83:13:8e:b3:4a:b6:db:71:e4:a3:8c:ab:
f6:66:a0:ad:e3:52:54:08:41:0a:43:ba:6c:06:19:aa:d6:17:
f8:61:81:ae:07:69:6c:fa:30:ec:3d:91:be:db:88:d2:bc:ba:
0e:bb:db:00:0b:66:09:f1:87:95:88:ed:36:33:6d:0a:1b:ca:
78:57:c9:4d:f1:51:d8:48:27:93:cf:49:99:45:4c:1e:01:d9:
2f:20:b7:9c:15:47:c9:e7:83:8e:70:0f:6a:90:92:ca:e9:2b:
45:de:34:10:29:b2:e8:9b:12:af:8b:34:24:6d:72:a7:d3:56:
f3:04:1f:59:73:24:13:6c:6e:97:88:73:17:35:b5:e8:a9:86:
a0:10:36:c3:7f:02:76:42:3b:cc:2e:46:51:37:13:25:2f:95:
ff:92:a0:36:94:4b:9f:3f:86:23:71:80:be:4e:f1:43:ae:23:
ed:75:6d:b5:ef:af:fb:6e:c2:97:f4:4e:d1:1c:e6:14:c2:61:
f7:aa:cc:59:ef:71:96:30:f8:05:06:9e:59:e8:3a:f6:89:f1:
c2:2f:0a:0b:de:8e:83:95:8f:bd:67:af:76:f1:19:c9:dd:1d:
e4:65:40:5d:0d:e0:10:4d:bf:b6:c8:18:a9:1a:ff:5c:ba:fb:
49:22:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:46 2024 by rpki-client on console-ams.rpki-client.org