Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/m9xxgZAJc4MBrxCULGuZKTGrf1M.roa
File: m9xxgZAJc4MBrxCULGuZKTGrf1M.roa (raw, json)
Hash identifier: m8csO3KxL6AN2VToGc++80LInBC1W2t1kbt/r0s0nnE=
Subject key identifier: 9B:DC:71:81:90:09:73:83:01:AF:10:94:2C:6B:99:29:31:AB:7F:53
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 09CB0C5C
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/m9xxgZAJc4MBrxCULGuZKTGrf1M.roa
Signing time: Wed 16 Mar 2022 19:00:22 +0000
ROA not before: Wed 16 Mar 2022 19:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47962
IP address blocks: 176.106.230.0/24 maxlen: 24
37.122.153.0/24 maxlen: 24
37.122.157.0/24 maxlen: 24
37.122.156.0/23 maxlen: 23
37.122.156.0/24 maxlen: 24
37.122.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164301916 (0x9cb0c5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Mar 16 19:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bdc71819009738301af10942c6b992931ab7f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:85:79:37:2b:73:b5:c0:b1:32:87:99:87:
a5:11:b1:ce:d9:5f:a9:8e:8e:51:77:87:25:59:46:
06:9e:19:b6:cb:55:cc:e1:23:6f:4d:fd:e4:02:94:
e7:74:b1:b5:46:71:03:b4:77:5d:de:34:56:6e:b5:
63:00:df:fe:da:3a:85:90:78:4a:c3:c4:d8:dd:80:
36:be:32:9e:94:c0:7b:f6:04:b2:80:a6:3a:ac:ab:
f2:70:0f:8e:ff:48:f7:7c:d0:a9:c7:6e:8b:3b:bd:
70:93:85:c4:40:d5:ac:64:30:02:84:07:80:17:a6:
7f:26:ca:fd:83:66:2f:e3:04:99:94:09:9b:0c:ae:
86:09:59:03:51:6d:80:77:09:0b:ff:41:bc:8e:e0:
f0:77:75:2f:e6:42:07:d7:5f:cb:e5:c3:c0:ba:6f:
7c:60:7c:e4:5b:79:62:0a:d6:3a:1a:6d:d3:5f:c7:
f9:9f:a5:9a:14:d7:cd:eb:27:f1:b6:16:66:0b:24:
89:11:bd:13:63:c2:d2:52:c2:58:78:8d:3b:99:f4:
d3:9d:aa:d2:4b:f3:0b:9c:cb:84:eb:16:49:d0:b7:
6e:cc:91:02:a4:27:53:01:9b:17:3b:73:1b:f2:f4:
5b:c5:24:a6:6d:0e:c9:a3:5b:7a:ea:5f:31:ae:9a:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:71:81:90:09:73:83:01:AF:10:94:2C:6B:99:29:31:AB:7F:53
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/m9xxgZAJc4MBrxCULGuZKTGrf1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.153.0-37.122.154.255
37.122.156.0/23
176.106.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0a:5a:7d:bc:a4:92:0c:8b:ab:be:f5:8c:26:f9:cb:dd:09:
02:58:05:db:fa:4b:ee:85:50:37:5c:13:27:33:5e:17:69:99:
90:a4:2b:63:be:6c:a5:d5:7b:02:44:de:a3:26:ab:4e:60:79:
72:dd:b8:90:38:49:27:a7:13:a0:c2:8b:52:3c:68:ca:09:b6:
4f:f6:a5:ad:54:9f:34:8a:38:4e:03:68:d3:50:0f:23:be:2b:
70:48:3e:68:f8:51:a5:bf:7c:ec:4f:c3:b0:ca:31:49:31:12:
5a:48:24:df:eb:af:c1:ce:b2:04:82:a6:6a:87:93:4a:15:a3:
f2:bc:cf:c0:5f:35:83:49:a3:03:90:a2:85:af:37:4e:7c:a6:
e0:db:f3:9c:4b:31:6c:30:db:2b:21:b9:b7:03:63:f1:c0:0b:
a3:ca:41:74:65:16:b2:44:d4:f0:b9:96:15:c6:66:bd:86:6e:
8b:c8:a6:8d:e4:6d:1e:e4:52:4a:65:b1:d6:05:31:bc:44:26:
db:60:1f:68:ab:6d:f1:6c:be:9d:92:71:70:70:f7:a2:92:8c:
3b:a3:86:90:ba:6c:7a:dc:f9:e5:4d:91:c3:37:ff:8d:17:93:
13:1b:1a:2e:cd:0a:4f:cd:c2:da:54:43:e9:aa:78:27:24:b2:
7a:ad:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:16 2024 by rpki-client on console-ams.rpki-client.org