Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/uFB76lQFi0_2PM1yHJSr0LAzC2o.roa
File: uFB76lQFi0_2PM1yHJSr0LAzC2o.roa (raw, json)
Hash identifier: uVrzOEKp+IjqfmmcsnixwAimQolxFV9eYB2UeDaZPzc=
Subject key identifier: B8:50:7B:EA:54:05:8B:4F:F6:3C:CD:72:1C:94:AB:D0:B0:33:0B:6A
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 09A1D821
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/uFB76lQFi0_2PM1yHJSr0LAzC2o.roa
Signing time: Wed 02 Mar 2022 16:36:15 +0000
ROA not before: Wed 02 Mar 2022 16:36:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47962
IP address blocks: 37.122.153.0/24 maxlen: 24
37.122.157.0/24 maxlen: 24
37.122.156.0/23 maxlen: 23
37.122.156.0/24 maxlen: 24
37.122.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161601569 (0x9a1d821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Mar 2 16:36:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8507bea54058b4ff63ccd721c94abd0b0330b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:58:81:6c:62:82:d9:86:ef:b4:d6:7c:c7:
d3:91:1a:dd:3f:7a:f0:6d:f8:17:34:60:c5:9a:5d:
15:ab:f9:f3:a7:b8:1a:2d:2e:30:4e:95:cf:20:a8:
99:63:4d:65:f3:16:5a:04:7a:c1:09:e2:c2:fa:83:
d5:ca:43:58:b6:3a:da:5b:26:2f:17:35:25:59:6c:
33:25:9d:9c:fa:2e:4e:46:2c:d7:01:28:7f:08:0e:
68:8c:3d:c5:f8:9a:02:99:b7:29:7e:b4:e0:b8:ca:
d3:cf:71:e5:5d:20:f7:db:2c:8d:c5:b6:18:f5:b2:
c6:c3:d8:e3:42:83:8b:96:48:74:1f:65:24:ca:e8:
64:ee:78:35:5f:86:9f:ce:3f:d1:27:da:e8:89:77:
03:c0:08:53:47:13:40:52:f4:00:cb:ce:06:8b:44:
c2:fe:46:2c:78:38:0e:b6:f7:28:19:59:9a:91:4a:
ef:66:4e:f4:be:25:27:d9:2c:a5:b9:21:3b:e2:87:
d4:a6:20:20:3c:a2:d7:66:b0:61:92:bb:bb:94:94:
f4:37:0a:2f:f0:ae:3e:03:4f:d6:b6:2f:24:ea:92:
c9:e0:94:fc:39:c7:68:a7:4c:79:33:e3:93:c3:b2:
5b:cf:5a:18:6b:7a:aa:d5:9f:aa:7d:35:95:c7:eb:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:50:7B:EA:54:05:8B:4F:F6:3C:CD:72:1C:94:AB:D0:B0:33:0B:6A
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/uFB76lQFi0_2PM1yHJSr0LAzC2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.153.0-37.122.154.255
37.122.156.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ae:52:ab:53:4f:d2:45:a3:f1:ce:21:f0:72:18:c2:c5:5b:
55:6e:ef:8f:b0:0a:73:6e:24:9f:60:e6:65:7b:46:bf:87:4a:
71:63:0c:ba:c5:5d:3a:9b:f8:5d:62:19:a8:30:3f:50:46:f3:
8b:ea:13:c7:02:8f:20:fb:62:bf:c4:b9:76:7d:3f:26:46:e9:
31:0c:e5:85:fa:a5:2b:12:cd:51:16:72:a5:96:a8:fd:c0:66:
e0:d6:52:9e:3f:f0:36:21:13:75:f3:2a:82:b0:45:95:f1:2c:
3c:f3:cb:db:a8:3a:54:9a:dc:4c:62:20:47:57:e9:9d:04:bf:
ba:c6:b1:c1:69:4c:b6:fc:f8:62:fe:77:c8:a2:28:0d:f1:c5:
fb:db:83:c2:68:2d:49:c9:41:62:ec:f6:ed:e7:74:16:bb:5b:
4f:06:64:b4:09:59:9a:9d:16:c7:ee:89:b6:f3:fc:74:26:f4:
13:ec:b3:f9:43:5f:7a:02:d8:af:04:ca:9f:b4:84:3c:be:69:
16:35:c6:90:d2:4f:89:dc:0a:15:27:96:fe:60:2a:13:ae:90:
9a:5b:39:21:00:fe:24:12:92:2f:64:d9:d9:d0:13:e4:b6:ba:
a9:11:ac:c7:46:66:82:6f:70:03:c3:b9:2f:de:25:12:38:b4:
ee:c8:0b:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIECaHYITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGQxNzFmOTNjYzFjYTcxNmZjODA2ZTM2YTU1ODUyY2RmNGYxYzFjMB4XDTIyMDMw
MjE2MzYxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjg1MDdiZWE1NDA1
OGI0ZmY2M2NjZDcyMWM5NGFiZDBiMDMzMGI2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLsWIFsYoLZhu+01nzH05Ea3T968G34FzRgxZpdFav586e4
Gi0uME6VzyComWNNZfMWWgR6wQniwvqD1cpDWLY62lsmLxc1JVlsMyWdnPouTkYs
1wEofwgOaIw9xfiaApm3KX604LjK089x5V0g99ssjcW2GPWyxsPY40KDi5ZIdB9l
JMroZO54NV+Gn84/0Sfa6Il3A8AIU0cTQFL0AMvOBotEwv5GLHg4Drb3KBlZmpFK
72ZO9L4lJ9kspbkhO+KH1KYgIDyi12awYZK7u5SU9DcKL/CuPgNP1rYvJOqSyeCU
/DnHaKdMeTPjk8OyW89aGGt6qtWfqn01lcfrOT8CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBS4UHvqVAWLT/Y8zXIclKvQsDMLajAfBgNVHSMEGDAWgBRk0XH5PMHKcW/I
BuNqVYUs308cHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pORngtVHpCeW5GdnlBYmphbFdGTE45UEhCdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjcvZjJkOWRmLTE2ZWItNDQ5ZS04M2YwLWE0NjM1ZGY0N2Q3MC8x
L3VGQjc2bFFGaTBfMlBNMXlISlNyMExBekMyby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcv
ZjJkOWRmLTE2ZWItNDQ5ZS04M2YwLWE0NjM1ZGY0N2Q3MC8xL1pORngtVHpCeW5G
dnlBYmphbFdGTE45UEhCdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAJXqZAwQAJXqaAwQBJXqcMA0G
CSqGSIb3DQEBCwUAA4IBAQB1rlKrU0/SRaPxziHwchjCxVtVbu+PsApzbiSfYOZl
e0a/h0pxYwy6xV06m/hdYhmoMD9QRvOL6hPHAo8g+2K/xLl2fT8mRukxDOWF+qUr
Es1RFnKllqj9wGbg1lKeP/A2IRN18yqCsEWV8Sw888vbqDpUmtxMYiBHV+mdBL+6
xrHBaUy2/Phi/nfIoigN8cX724PCaC1JyUFi7Pbt53QWu1tPBmS0CVmanRbH7om2
8/x0JvQT7LP5Q196AtivBMqftIQ8vmkWNcaQ0k+J3AoVJ5b+YCoTrpCaWzkhAP4k
EpIvZNnZ0BPktrqpEazHRmaCb3ADw7kv3iUSOLTuyAsT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org