Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/bzDLQbMnmPP92x7q2RJNrNN18U0.roa
File: bzDLQbMnmPP92x7q2RJNrNN18U0.roa (raw, json)
Hash identifier: LvFJdQak2SridY6ITTHHWCRteBli1Iq7E5iXIC8CIaQ=
Subject key identifier: 6F:30:CB:41:B3:27:98:F3:FD:DB:1E:EA:D9:12:4D:AC:D3:75:F1:4D
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 09B7E0A3
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/bzDLQbMnmPP92x7q2RJNrNN18U0.roa
Signing time: Thu 10 Mar 2022 20:32:19 +0000
ROA not before: Thu 10 Mar 2022 20:32:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50440
IP address blocks: 37.122.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163045539 (0x9b7e0a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Mar 10 20:32:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f30cb41b32798f3fddb1eead9124dacd375f14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:16:1c:ba:80:82:35:57:4e:32:1e:a1:ab:
53:3c:a7:aa:23:09:a1:59:4d:52:b7:03:f0:84:60:
b0:6e:b2:3c:20:77:bf:37:9c:58:d2:90:59:6a:7f:
dc:f9:e9:ae:7f:8a:50:ff:fb:90:bf:f2:0f:2e:ab:
35:59:3c:87:6f:50:2e:90:72:22:60:0e:9f:c0:1d:
39:a2:1d:1a:90:c6:db:48:40:e8:4b:79:b8:85:dc:
82:6c:2c:74:58:a6:37:ac:e8:38:cb:f2:6c:ff:32:
04:a9:ce:34:15:65:e6:09:f7:cd:39:4a:5c:ce:97:
2a:5a:67:27:fe:44:f2:31:6f:98:27:64:a1:0f:5c:
1a:bd:73:fe:29:b5:83:91:ad:b3:c5:35:38:c7:5f:
54:61:32:db:cd:8c:1f:e6:fd:1a:61:be:45:47:02:
97:cb:3d:9b:49:bc:73:7a:08:ab:71:af:08:b1:c2:
dd:67:2c:f7:17:b6:bc:ad:92:0a:b7:34:77:9b:f5:
0b:e2:a4:e5:ce:66:14:53:02:0f:b8:b9:c9:8e:27:
3a:c7:22:03:3a:72:6a:fd:87:c5:92:50:1a:17:b4:
2a:c1:00:8e:52:8a:d4:27:a4:53:bd:9e:c8:19:ef:
a5:70:95:d0:07:03:af:ea:5b:70:2f:c5:36:07:7c:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:CB:41:B3:27:98:F3:FD:DB:1E:EA:D9:12:4D:AC:D3:75:F1:4D
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/bzDLQbMnmPP92x7q2RJNrNN18U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.154.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ed:50:a3:5d:f5:c6:53:a7:2a:06:de:57:0c:37:69:2d:96:
80:e4:21:4f:dc:49:fd:09:64:17:b7:7c:06:2b:a1:d5:a8:12:
fa:06:7b:d9:c0:6e:21:84:93:3d:8f:2b:89:6d:12:c1:96:16:
ab:b9:e0:28:5f:01:d7:4b:ab:d7:fb:85:96:b2:04:bb:41:63:
fc:d3:a1:74:a3:60:18:98:19:0d:e8:e9:35:12:3b:6d:46:84:
c3:35:b2:82:d0:9b:f8:59:e6:9c:e6:ef:7c:d2:39:d7:d9:c9:
95:13:3d:7e:42:55:60:3d:45:f6:e8:75:22:5b:59:a5:73:08:
84:18:d4:d0:ba:d3:c0:98:35:c0:1b:53:b4:df:6f:f9:75:dc:
22:b5:e1:c2:3d:42:f8:9e:3f:80:ef:9d:0d:98:83:a6:7a:22:
55:e5:ff:2a:d5:0c:38:e9:7d:58:b9:22:3a:4c:ab:f6:fa:94:
17:3c:27:40:5a:e8:e1:35:42:2f:f5:b4:b1:1f:14:c0:63:c6:
6d:80:39:5c:6c:72:09:3f:7f:ce:a1:ec:aa:9d:07:7c:21:cd:
b9:d6:4e:0b:9c:53:8a:da:90:8c:a5:c2:e9:2a:5c:f1:54:48:
97:2d:97:24:00:4e:9e:9d:f3:d2:9c:ee:a8:d4:6a:4f:be:93:
a9:87:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org