Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/WvjvgyOWhsz0zI-3iGtv5qUkeEg.roa
File: WvjvgyOWhsz0zI-3iGtv5qUkeEg.roa (raw, json)
Hash identifier: mRCxmpVZoHd66aSrQ5T2LDZScLYNVuUxmMT59z7Br/A=
Subject key identifier: 5A:F8:EF:83:23:96:86:CC:F4:CC:8F:B7:88:6B:6F:E6:A5:24:78:48
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 0A462423
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/WvjvgyOWhsz0zI-3iGtv5qUkeEg.roa
Signing time: Sat 01 Jan 2022 06:04:48 +0000
ROA not before: Sat 01 Jan 2022 06:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21427
IP address blocks: 37.235.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172368931 (0xa462423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 06:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5af8ef83239686ccf4cc8fb7886b6fe6a5247848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:d4:90:c0:ed:24:24:60:4f:3c:b1:9f:5e:
3c:0d:65:d5:fd:8f:96:63:13:2d:e1:64:9f:39:66:
b4:3f:c3:b6:eb:4c:02:56:5d:2b:48:03:1f:73:e1:
ad:90:22:b9:55:64:8e:5a:1e:1a:a4:b5:8c:6b:c8:
a6:47:65:ec:2b:4e:72:fd:38:9e:ee:09:b2:c8:60:
cf:94:2f:34:7a:31:87:37:e3:00:96:e9:b0:8b:f2:
e4:eb:a4:6f:4e:0c:b5:ca:8c:f1:65:0c:59:a8:78:
f6:29:29:d2:c6:3c:6a:dc:58:b8:a3:8a:85:9b:53:
fc:20:8c:d0:04:9d:eb:e7:f2:ea:00:d1:05:25:a9:
1c:c6:e3:65:57:19:ff:56:6d:70:37:6c:ae:ad:92:
9d:3d:2a:ad:b4:45:2f:f1:fa:45:a6:f9:37:55:fb:
89:87:e6:0f:3a:9d:fe:89:46:81:79:b2:43:e2:1f:
5e:ee:20:ae:43:ca:c2:46:4f:10:07:d1:07:ff:38:
69:16:07:0b:a5:74:fb:dc:1b:8a:0c:75:36:7f:df:
d2:49:cd:77:a0:88:81:1d:c2:81:0d:67:43:57:e6:
d8:a2:e4:57:a8:64:01:84:8f:16:cf:6a:c2:39:17:
f8:09:8e:bd:5d:fa:16:d3:86:b6:c5:c8:bd:76:cf:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:EF:83:23:96:86:CC:F4:CC:8F:B7:88:6B:6F:E6:A5:24:78:48
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/WvjvgyOWhsz0zI-3iGtv5qUkeEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
18:99:5c:a2:78:c6:7e:85:6d:6f:c6:c7:79:96:74:8c:c9:a7:
c2:34:6c:97:ce:99:7d:e2:e5:53:09:2b:ec:ba:f7:e1:5c:0a:
58:df:9a:83:3f:9a:08:0a:59:50:44:28:a4:44:d0:df:34:c4:
d0:7b:f4:e2:31:8d:07:30:cc:be:ea:4b:5d:22:5b:b5:a3:cb:
61:ef:61:1e:b0:8d:e2:da:0b:1b:80:c5:6f:0d:35:8e:d6:b0:
31:29:01:93:e5:c3:ef:d3:1e:23:ba:16:e4:18:aa:b2:d3:e2:
1b:87:86:73:83:4f:c7:a9:54:07:0e:3b:59:fe:bf:4e:a7:0e:
3f:64:8b:59:2c:52:8b:46:63:2d:97:26:b8:95:69:f0:2f:ad:
42:61:20:43:7f:ca:b7:78:4a:90:2e:6a:3a:b9:5f:f4:a6:2e:
3c:1f:7b:fa:d1:e4:c6:d0:31:b4:38:e3:cc:c4:9b:ee:1d:3d:
f8:45:7a:ff:85:d3:9c:77:1a:84:a8:c1:4f:05:a0:ac:6a:d8:
e4:ec:72:f2:74:03:33:aa:0f:2c:4e:85:dd:86:29:03:7c:d4:
65:61:e0:e7:28:75:6f:30:96:72:df:06:89:ea:44:63:c8:5d:
01:ad:41:78:06:c5:b0:72:2f:af:d1:c5:8d:ee:eb:f7:10:4d:
c7:40:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org