Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/UEEoFJMlYgQOUOQtNqpzQzFGD0Y.roa
File: UEEoFJMlYgQOUOQtNqpzQzFGD0Y.roa (raw, json)
Hash identifier: r05TqhetzkarAhCzTC21xOSrR7nvk4SQBmD3zBOydzw=
Subject key identifier: 50:41:28:14:93:25:62:04:0E:50:E4:2D:36:AA:73:43:31:46:0F:46
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 091C6B9B
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/UEEoFJMlYgQOUOQtNqpzQzFGD0Y.roa
Signing time: Sat 01 Jan 2022 12:54:13 +0000
ROA not before: Sat 01 Jan 2022 12:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57862
IP address blocks: 37.122.152.0/22 maxlen: 22
37.122.152.0/24 maxlen: 24
37.122.152.0/23 maxlen: 23
37.122.154.0/23 maxlen: 23
37.122.154.0/24 maxlen: 24
37.122.153.0/24 maxlen: 24
37.122.156.0/24 maxlen: 24
37.122.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152857499 (0x91c6b9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 1 12:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50412814932562040e50e42d36aa734331460f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:56:b9:dc:0e:17:ee:2c:6a:ab:75:98:48:
dd:e3:2b:ca:c2:c3:7e:ce:fe:1d:55:c4:7c:5c:99:
fa:f2:e3:e4:56:a8:54:7e:04:48:ab:de:62:cd:23:
cd:bd:c4:20:f8:33:f6:1c:98:bf:16:35:cf:a8:3f:
28:ad:3e:cf:17:91:a9:f5:63:ab:85:3b:cb:a0:51:
7e:06:d9:8b:3a:27:dc:13:64:ad:48:63:f3:ec:c2:
55:41:77:fd:41:ab:40:ec:3e:04:f2:34:95:41:aa:
a3:5d:0e:64:4a:f1:1f:c2:c1:69:bb:7b:0d:19:ea:
45:ea:13:a2:73:80:09:1a:44:41:00:05:fd:26:88:
04:a2:55:da:10:29:e0:c2:7d:e6:fe:8e:13:37:6e:
1b:3c:d6:e1:fc:79:d2:02:70:5a:76:c4:fc:35:08:
7c:d6:1e:81:de:1b:2b:7c:f3:e1:7c:12:6a:43:83:
34:43:08:94:37:da:7e:38:49:83:b7:d4:85:c0:00:
11:40:a6:d8:44:95:a1:e4:9e:56:cc:df:49:d9:3e:
e5:7e:1a:8e:ee:6f:d3:f6:2c:61:dc:05:ff:60:1a:
f4:82:93:11:bc:41:85:e4:35:16:6b:84:96:47:63:
57:df:e1:d1:0e:f3:4a:06:44:2a:07:86:6b:f8:59:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:28:14:93:25:62:04:0E:50:E4:2D:36:AA:73:43:31:46:0F:46
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/UEEoFJMlYgQOUOQtNqpzQzFGD0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.152.0-37.122.156.255
Signature Algorithm: sha256WithRSAEncryption
a7:17:f0:50:2e:d2:20:dd:e1:c2:f4:90:85:c3:ef:73:9c:1e:
b9:d4:f5:d5:0f:2d:75:52:0d:2c:53:36:46:0c:ba:67:1c:d9:
fd:cc:dd:de:93:59:5d:6f:94:47:e3:ff:60:cc:ac:7f:f7:c2:
16:75:08:3a:87:d1:01:27:af:8f:1f:87:59:cf:b1:b0:c2:29:
6f:50:9d:5e:2f:bd:d9:fb:00:28:d3:cb:ad:95:df:e8:e2:f9:
4d:7a:78:3d:11:c7:35:1b:f7:9c:2d:05:5e:e9:6a:27:57:21:
ac:1f:5e:6c:82:93:76:a4:1f:b9:9a:af:7c:52:15:e1:e7:25:
da:c3:a6:17:41:6e:00:92:66:53:eb:ac:71:6e:0a:cb:bc:1d:
60:a0:94:de:49:64:ef:d1:ae:a1:ae:10:e0:99:54:41:a7:c5:
0b:26:ea:63:78:c3:ce:5a:c3:07:14:a6:a5:0d:2b:ba:a5:ed:
d3:ac:d4:4c:ea:ff:92:7e:21:89:f1:0e:0e:bf:32:45:86:cd:
e8:3e:7d:99:5b:d4:9c:e7:93:db:a4:4d:b3:5e:88:52:97:26:
73:17:b4:b3:45:07:96:21:e7:50:86:28:e1:06:72:d2:96:02:
e4:ca:af:a0:cd:1d:e1:f4:b8:d2:23:65:ca:7b:e6:58:89:0e:
9d:65:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:16 2024 by rpki-client on console-ams.rpki-client.org