Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/Vuk64LpfnUuhWJ4vQLUXuOvCZzI.roa
File: Vuk64LpfnUuhWJ4vQLUXuOvCZzI.roa (raw, json)
Hash identifier: hIRIVPAEcD7tL9zirgbkJO3KqeNiV8VpY0TODSdEl6Q=
Subject key identifier: 56:E9:3A:E0:BA:5F:9D:4B:A1:58:9E:2F:40:B5:17:B8:EB:C2:67:32
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 091C47F0
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/Vuk64LpfnUuhWJ4vQLUXuOvCZzI.roa
Signing time: Sat 01 Jan 2022 12:54:12 +0000
ROA not before: Sat 01 Jan 2022 12:54:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47962
IP address blocks: 37.122.156.0/23 maxlen: 23
37.122.156.0/24 maxlen: 24
37.122.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152848368 (0x91c47f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 1 12:54:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e93ae0ba5f9d4ba1589e2f40b517b8ebc26732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:94:56:4b:60:28:3b:8a:42:c5:9e:08:5d:
53:54:c4:37:cb:50:5e:60:6c:39:91:6c:49:44:56:
74:07:53:a1:72:99:cf:a3:a1:8c:55:cb:fa:0a:d6:
f3:c4:5e:ef:01:78:5b:ad:43:09:b4:10:9e:b4:48:
2d:36:e7:58:c4:12:aa:46:7e:9d:78:2d:ea:11:3d:
7f:8b:ad:d0:09:38:71:e0:82:f9:9c:78:c5:cb:88:
e9:c6:58:ea:be:86:0b:ac:89:35:27:a8:19:dc:d6:
27:4e:e5:ea:7e:60:33:e3:78:ad:82:59:1a:8c:e2:
f8:fa:33:a4:c0:6a:29:98:53:aa:dc:81:de:bd:29:
14:dc:f5:b2:28:f8:fb:ad:6e:61:7a:93:06:ca:ad:
e9:06:81:98:fa:de:fc:75:b9:6b:2b:25:9f:4a:0c:
2b:b6:87:cb:47:e3:a3:9c:e4:78:12:1e:a3:ad:93:
f0:45:69:c5:38:8f:58:0e:88:e1:14:ee:4c:46:0a:
0b:ff:8b:05:11:86:66:c3:0a:e8:f1:65:42:88:fb:
ca:93:02:c8:45:a0:57:67:76:3d:1a:08:bc:28:ef:
30:13:a1:47:ee:52:06:5d:a6:12:6b:7b:b4:c5:d0:
ef:fb:a0:af:56:19:12:c1:3d:54:08:32:58:9a:8e:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:3A:E0:BA:5F:9D:4B:A1:58:9E:2F:40:B5:17:B8:EB:C2:67:32
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/Vuk64LpfnUuhWJ4vQLUXuOvCZzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.156.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:21:d5:1d:ff:2a:75:ec:04:3b:e2:6e:77:00:4b:83:6e:cb:
f6:99:c0:99:bb:4c:27:d2:5b:b3:07:49:04:bb:fa:07:da:7e:
c8:98:8f:5f:83:58:36:87:db:b0:c1:91:27:1c:0d:9b:b8:a5:
f5:4d:b8:0a:9c:fc:37:ca:b0:e5:68:5e:cd:50:10:fa:2f:19:
47:b6:c8:ac:16:4e:54:f7:3a:92:29:d8:7d:c5:c8:bb:67:a3:
69:d6:20:23:77:70:ef:44:b6:3f:c4:ef:a0:88:9b:55:c0:50:
de:a2:bf:37:74:62:8b:2d:ba:fd:9f:dd:12:3f:b9:33:56:23:
d0:7c:d0:26:ab:5b:d3:5c:fe:a8:99:25:e4:3a:d7:bf:2b:20:
71:0d:e3:54:2e:39:4a:ab:b9:c1:7a:2c:bc:15:36:40:a5:af:
16:bf:7d:26:6f:6b:28:e9:4f:78:b5:05:97:40:8e:76:ce:8f:
1f:b0:97:fa:a9:fa:ab:4e:69:42:42:54:94:5a:f9:93:ba:20:
72:2c:a1:63:1b:3d:63:00:68:21:f6:15:90:69:05:82:bc:18:
f1:fa:df:b9:59:57:eb:7a:0d:b4:f2:e6:6c:a3:73:96:cb:55:
a0:6e:fd:b4:9c:5e:9e:6f:be:ca:72:0e:70:36:89:19:72:e4:
e3:28:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:16 2024 by rpki-client on console-ams.rpki-client.org