Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/0SW__GUDJNPChYPkNsvsnQa0q3s.roa
File: 0SW__GUDJNPChYPkNsvsnQa0q3s.roa (raw, json)
Hash identifier: o99SX19l7BT4t6aQ/HlasNu3PEMroUv2FdYxkbwMma0=
Subject key identifier: D1:25:BF:FC:65:03:24:D3:C2:85:83:E4:36:CB:EC:9D:06:B4:AB:7B
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 0A4658AE
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/0SW__GUDJNPChYPkNsvsnQa0q3s.roa
Signing time: Sat 01 Jan 2022 06:04:48 +0000
ROA not before: Sat 01 Jan 2022 06:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43779
IP address blocks: 37.235.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172382382 (0xa4658ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 06:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d125bffc650324d3c28583e436cbec9d06b4ab7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:c1:44:69:88:ad:35:38:f4:bf:85:37:3b:
86:28:5f:25:93:a9:46:a3:ad:90:d7:a1:56:91:f0:
94:9d:ed:cd:ae:bc:63:16:df:9b:85:13:9a:d3:57:
9e:24:b5:13:4d:18:ac:88:8d:5e:a0:10:eb:1c:14:
cd:84:80:48:b2:f9:e2:2c:03:af:60:22:3b:da:1b:
31:c3:4a:8e:6c:06:bd:ff:e8:78:8d:5b:a6:16:c4:
a6:ff:2e:83:79:d2:d1:69:04:7a:9a:16:94:a7:ed:
ea:f5:1a:4b:cb:22:19:7f:c4:db:81:82:10:ab:38:
52:14:b1:87:62:07:93:fe:98:cb:f1:04:a2:dc:8d:
fa:d3:49:62:69:51:e3:ef:48:a2:e4:af:3a:82:6b:
33:55:a8:a4:eb:3a:07:d1:f5:9f:79:74:50:da:81:
fc:89:93:e1:9d:23:23:38:e7:0d:b1:a1:50:46:1a:
3b:ca:02:7c:23:fc:41:df:3f:5d:42:dd:28:63:df:
94:54:68:ea:c8:b3:22:21:4f:ec:2c:cb:5a:b7:52:
c7:5c:f3:32:75:8c:e3:7e:5b:0e:55:5a:68:c8:07:
25:95:fc:43:92:e9:69:98:3f:94:e3:c5:c6:1b:bf:
a9:b9:5d:b3:3d:0b:17:16:22:0b:d0:b8:2b:cf:49:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:BF:FC:65:03:24:D3:C2:85:83:E4:36:CB:EC:9D:06:B4:AB:7B
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/0SW__GUDJNPChYPkNsvsnQa0q3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8f:01:bc:77:25:f4:cf:1f:bd:38:f5:d0:2f:52:f5:00:c5:
a0:12:f7:6e:95:43:ad:4f:41:9d:0f:87:e2:68:8c:bd:5a:76:
8b:fd:b1:79:b9:f8:9d:09:44:96:9b:06:8a:c3:5a:52:08:21:
79:d2:7a:94:dc:4e:05:74:57:c3:eb:97:dc:4e:1a:25:3c:40:
43:e2:eb:4f:2c:27:a1:75:b7:2c:1b:5c:a4:0f:ab:3d:5f:45:
b7:df:7b:2a:ac:21:c9:01:a9:7c:e7:c2:b7:86:12:8f:7a:b4:
1d:01:e5:85:b1:38:c9:30:59:cd:c7:64:ac:ce:c9:4b:49:1a:
98:d6:11:97:e2:52:fa:a5:e3:21:7f:28:1b:38:5c:84:a0:aa:
db:43:b9:c4:57:9b:2e:41:83:6e:15:7c:e3:e9:3f:d4:c7:fc:
02:d7:11:cd:6e:8f:ca:77:1c:e9:50:da:73:46:eb:00:bf:dd:
16:d6:69:3d:23:eb:38:58:62:aa:93:17:18:3a:a3:df:a7:4a:
9d:a6:4f:9d:c5:12:1a:cf:4b:7d:6e:4b:fb:c8:f2:fa:91:c1:
6f:7d:80:b1:3a:cf:0b:17:7d:65:1f:88:b3:64:e0:dd:8e:89:
92:ac:4a:f0:f2:e5:73:93:fd:49:48:db:84:c3:8c:9c:4e:c3:
23:21:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org