Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/7WYnWcUks7D4Oz8V5CpYUU7PBBY.roa
File: 7WYnWcUks7D4Oz8V5CpYUU7PBBY.roa (raw, json)
Hash identifier: 1LC4TBq1fVPtqQiQJF/cmMqlOyK1vJH1yOLjoNBV8Wo=
Subject key identifier: ED:66:27:59:C5:24:B3:B0:F8:3B:3F:15:E4:2A:58:51:4E:CF:04:16
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: E0B72C
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/7WYnWcUks7D4Oz8V5CpYUU7PBBY.roa
Signing time: Sat 01 Jan 2022 05:59:37 +0000
ROA not before: Sat 01 Jan 2022 05:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211031
IP address blocks: 37.140.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14726956 (0xe0b72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jan 1 05:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed662759c524b3b0f83b3f15e42a58514ecf0416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:4d:b3:b1:dd:07:7f:e0:61:db:f4:f2:29:
85:40:8b:2f:10:5b:9a:a3:3a:5b:ce:a2:3d:96:f6:
2c:e0:d4:8e:32:ef:4e:06:56:78:98:57:46:34:e4:
f5:94:45:f5:37:26:29:6a:38:a5:67:d9:ae:f9:64:
52:c1:46:e1:4c:c7:6f:12:c8:65:b3:8d:4b:06:85:
b7:5d:73:e6:bf:0e:86:66:a2:48:0f:eb:68:60:a9:
e9:17:e3:ec:bf:1c:f1:4e:76:73:44:46:8d:ad:7c:
80:ae:86:52:2b:28:ee:1f:5e:9d:84:15:5a:5f:33:
21:28:b1:f7:2e:d8:4c:b4:c0:0f:37:99:17:25:12:
61:23:3d:37:0b:b7:bc:69:16:9a:4b:13:cb:6e:8a:
87:90:1d:e5:03:97:44:dc:10:a6:07:f3:4a:c5:67:
4d:f2:d3:ca:b7:35:f8:78:ac:c2:7f:64:7d:c4:8c:
e0:67:93:a0:2b:2d:a6:0f:40:dd:df:d6:ed:81:6e:
88:70:5c:b4:46:b3:1e:bc:59:f5:c3:95:b0:a9:57:
f5:92:8a:fe:9b:21:e2:d4:09:83:c2:09:cb:4c:22:
81:d8:85:69:44:6a:b0:73:84:00:2c:d2:35:7a:c9:
c8:c6:f2:6d:48:ec:fd:cc:0b:ed:7f:d0:4f:2a:fa:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:27:59:C5:24:B3:B0:F8:3B:3F:15:E4:2A:58:51:4E:CF:04:16
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/7WYnWcUks7D4Oz8V5CpYUU7PBBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.249.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:1a:8b:26:62:18:dc:a0:6e:ab:8f:b2:09:89:86:08:bf:
ec:31:f1:c6:fa:8f:1e:8a:62:90:44:89:91:ce:0b:fa:83:66:
0f:7a:bc:7f:44:05:ad:cf:93:db:cc:57:20:21:7b:0d:e0:5e:
00:0c:92:6f:60:2c:f8:e1:99:e3:55:d7:f5:89:b2:d0:cf:cc:
7a:f4:b6:63:0d:8e:33:65:0c:35:6f:c4:ed:3f:3a:4b:8b:6e:
9c:d7:87:fb:95:a2:91:5c:0d:66:13:11:8f:05:e3:c3:76:a6:
0d:b1:9c:ae:ae:6b:cf:21:a3:d1:3a:71:fa:bc:48:e3:84:57:
be:9c:b2:b9:36:86:4a:72:e8:f1:21:d6:56:fe:c5:2a:fa:e7:
89:61:80:e8:4e:e2:fc:b5:09:0b:91:46:93:4c:b6:a6:5d:4f:
80:9d:26:c6:f8:a8:c3:ea:85:76:68:b8:20:2c:50:74:bc:4f:
ce:23:45:62:e3:93:ec:88:b9:81:4e:26:37:a8:2e:6b:67:16:
bc:b5:2a:f0:eb:71:17:7f:f9:8a:e5:9a:6a:56:54:05:30:f7:
30:05:a6:06:eb:ca:de:53:c6:ef:b3:c2:a8:7f:2e:03:f3:0b:
e8:3d:4e:bb:4a:1c:b8:2e:d1:9c:5b:f8:56:f6:49:58:c6:33:
4f:a7:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org