Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/AnU2BY1a2Nktrwgz728D9ZJtzis.roa
File: AnU2BY1a2Nktrwgz728D9ZJtzis.roa (raw, json)
Hash identifier: anPNwasXU4+2/r4LeiSmiSDJatrbRtfH/W/CvzmR3F8=
Subject key identifier: 02:75:36:05:8D:5A:D8:D9:2D:AF:08:33:EF:6F:03:F5:92:6D:CE:2B
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 1B3108B7
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/AnU2BY1a2Nktrwgz728D9ZJtzis.roa
Signing time: Sat 01 Jan 2022 06:55:41 +0000
ROA not before: Sat 01 Jan 2022 06:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34592
IP address blocks: 37.137.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456198327 (0x1b3108b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jan 1 06:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=027536058d5ad8d92daf0833ef6f03f5926dce2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:10:f4:8e:41:3c:79:4f:19:1d:08:b2:90:
a4:2c:00:2a:f2:ae:0c:aa:08:41:36:12:28:f5:26:
88:a4:af:9f:db:90:dc:0d:ee:af:17:12:38:44:8d:
d5:ad:36:e8:d5:e3:66:c9:f4:93:6b:85:f8:21:e7:
54:88:ea:e4:5a:38:0b:ab:e5:40:2b:e5:0c:c6:09:
cc:c9:ae:0a:bb:22:02:4f:5b:7d:f5:be:90:66:e9:
8f:5e:c6:7c:bf:b1:b7:5a:b3:42:2f:b3:95:30:30:
dc:01:fc:55:15:1c:3f:c7:d7:00:28:6f:33:cb:00:
4c:07:2d:78:b5:39:6e:93:2c:42:ff:ac:da:7e:35:
ca:4f:3d:09:fb:02:db:42:f9:12:74:b1:f2:d6:13:
32:77:d4:8a:0b:13:b5:55:4b:ec:e5:99:97:2b:a4:
c8:ec:6a:e8:eb:51:67:8d:54:92:cb:40:49:0d:29:
8a:73:d0:a1:72:0d:74:28:3e:cf:49:a9:dc:7b:8d:
43:16:b9:7d:d9:e3:39:0b:6a:a9:a4:de:97:0a:bb:
07:04:21:dc:00:30:3d:42:1a:cc:b0:9e:c1:1f:21:
53:10:b8:1a:86:af:ce:ff:23:23:af:af:b2:bd:e5:
6e:13:0b:51:28:7f:02:05:78:74:d4:65:88:7b:de:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:75:36:05:8D:5A:D8:D9:2D:AF:08:33:EF:6F:03:F5:92:6D:CE:2B
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/AnU2BY1a2Nktrwgz728D9ZJtzis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.137.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:27:77:ad:43:e9:85:0b:1b:a8:ee:c0:f1:e9:c7:36:71:44:
5b:ce:1c:51:0b:ab:76:fe:b6:00:d4:f1:7a:60:5f:c9:ad:dc:
07:70:e0:b2:78:05:c9:97:e5:cc:42:64:2a:08:fc:05:f8:f6:
00:d3:12:8b:f5:6e:ed:eb:66:19:04:04:b2:0b:e9:ab:c6:ce:
03:59:9a:c0:34:a3:68:4d:d7:7b:26:ec:eb:f8:e7:96:6c:1d:
71:f5:36:56:bb:6f:53:16:86:80:49:a3:ab:7b:f6:9c:bd:da:
9a:b0:3c:07:64:29:1f:18:05:b5:99:0e:1c:aa:bf:49:30:43:
5f:70:84:28:99:09:60:32:27:3b:cd:5a:e3:87:d6:ac:05:19:
80:e4:1a:de:73:c1:e5:0a:03:ed:95:c8:70:84:ee:a8:8a:57:
ae:eb:39:4e:31:c1:69:37:b3:1b:7b:dc:f0:c3:05:10:66:36:
a3:8f:3d:6b:82:f3:3b:99:3b:41:1e:9f:f2:f4:bd:76:7e:a6:
20:ce:89:d3:c7:a6:ac:d5:e3:a9:31:ce:6a:13:57:82:3d:79:
3d:da:b7:b8:87:b3:f8:c9:08:5c:66:28:b2:31:38:32:a7:57:
53:dd:6e:90:76:87:e2:f7:a2:d7:b3:e4:50:52:95:47:1f:cf:
f8:71:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org