Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/A_DW-yrP1UJYaMbjQ9PyEV4Icus.roa
File: A_DW-yrP1UJYaMbjQ9PyEV4Icus.roa (raw, json)
Hash identifier: 5XPFFe8qeYPLoJ84axqLwdEiDcTjoOnk9hV5zeab1Dc=
Subject key identifier: 03:F0:D6:FB:2A:CF:D5:42:58:68:C6:E3:43:D3:F2:11:5E:08:72:EB
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01836B2F44D09D082CAD2D1D1159C70B5AA6
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/A_DW-yrP1UJYaMbjQ9PyEV4Icus.roa
Signing time: Fri 23 Sep 2022 16:30:03 +0000
ROA not before: Fri 23 Sep 2022 16:30:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202848
IP address blocks: 185.137.38.0/24 maxlen: 24
185.137.37.0/24 maxlen: 24
185.137.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6b:2f:44:d0:9d:08:2c:ad:2d:1d:11:59:c7:0b:5a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Sep 23 16:30:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03f0d6fb2acfd5425868c6e343d3f2115e0872eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:ab:34:8c:71:52:3f:44:0d:7d:1b:03:5b:
9a:f6:04:2a:42:f1:27:d5:4e:a0:43:07:89:07:d1:
dc:b4:53:34:79:60:3f:52:ce:5d:f2:de:79:8a:80:
09:f0:41:24:51:bd:43:42:d5:a6:ac:f5:52:a2:a0:
ca:9f:86:dd:62:48:65:e8:00:71:7c:3b:be:47:37:
87:bc:07:3a:ee:d1:a9:44:c4:5b:4a:1c:1d:c6:00:
84:a6:93:fc:ff:27:6d:37:75:85:d4:ed:d8:25:24:
23:e9:26:d9:ee:47:08:c2:8f:e6:1f:5b:e3:90:a3:
be:93:58:4e:32:99:82:c4:36:f1:38:00:14:32:97:
1d:22:fe:5c:d2:f3:88:8a:b5:eb:84:2d:fc:23:0c:
40:44:fd:c5:f2:08:df:10:76:2a:b3:70:a4:c0:6b:
99:14:f0:dc:57:9d:3e:f6:9d:ba:c0:1a:24:55:38:
4f:59:54:ff:04:54:a7:18:33:e5:d6:d7:fc:0b:05:
28:55:2e:55:0b:13:13:c0:f7:58:4a:bf:0c:02:0d:
f0:93:0d:61:58:be:2f:71:d6:d7:26:d1:bb:78:95:
9b:90:64:4d:ed:71:52:ad:c2:d7:3a:90:4b:26:3f:
f7:4f:72:da:bc:7a:c7:f0:54:84:49:fe:a1:62:e9:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:D6:FB:2A:CF:D5:42:58:68:C6:E3:43:D3:F2:11:5E:08:72:EB
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/A_DW-yrP1UJYaMbjQ9PyEV4Icus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.37.0-185.137.39.255
Signature Algorithm: sha256WithRSAEncryption
51:c6:16:07:cf:00:2f:56:02:4b:fe:19:db:ba:48:5b:f1:b0:
db:5e:68:14:5e:03:07:c8:36:a3:26:db:4a:24:d3:39:bc:bc:
c2:16:d1:95:a7:f0:f6:3d:5f:df:57:bb:c1:73:be:e5:4e:e4:
33:0a:49:57:73:70:cc:b7:c3:ca:ff:29:ef:24:bb:10:fb:38:
5c:47:46:57:3e:90:aa:51:64:bd:8f:9d:44:62:ac:34:eb:72:
e3:7d:90:79:ac:12:9e:2e:95:f9:80:8f:eb:b5:8a:65:11:54:
42:ed:19:25:bd:66:59:43:fc:bd:78:86:38:af:f0:1a:da:a0:
20:0b:26:3e:db:50:db:72:c8:a2:b4:7e:32:92:05:33:ca:c2:
ba:5c:fa:87:1a:e9:fc:7f:ab:a1:4a:58:10:db:42:5b:94:53:
09:2e:3f:5f:92:f4:c2:76:a9:07:cf:32:ad:a3:d2:f8:21:58:
48:c8:5d:d3:6a:5b:3c:bc:19:11:90:7e:9a:4d:ef:dc:99:43:
cc:3e:c5:99:34:9f:db:4b:21:e1:a9:43:56:0d:72:26:f7:4f:
3f:89:d8:01:33:f5:ee:55:2f:b0:1b:b1:26:1b:1c:87:2d:11:
f0:24:38:a2:60:f1:72:20:8d:38:65:8a:8a:9f:a2:94:31:8c:
18:91:45:69
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYNrL0TQnQgsrS0dEVnHC1qmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjIwOTIzMTYzMDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2YwZDZmYjJhY2ZkNTQyNTg2OGM2ZTM0M2QzZjIxMTVlMDg3MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArferNIxxUj9EDX0bA1ua9gQqQvEn
1U6gQweJB9HctFM0eWA/Us5d8t55ioAJ8EEkUb1DQtWmrPVSoqDKn4bdYkhl6ABx
fDu+RzeHvAc67tGpRMRbShwdxgCEppP8/ydtN3WF1O3YJSQj6SbZ7kcIwo/mH1vj
kKO+k1hOMpmCxDbxOAAUMpcdIv5c0vOIirXrhC38IwxARP3F8gjfEHYqs3CkwGuZ
FPDcV50+9p26wBokVThPWVT/BFSnGDPl1tf8CwUoVS5VCxMTwPdYSr8MAg3wkw1h
WL4vcdbXJtG7eJWbkGRN7XFSrcLXOpBLJj/3T3LavHrH8FSESf6hYumWTwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAPw1vsqz9VCWGjG40PT8hFeCHLrMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvQV9EVy15clAxVUpZYU1ialE5UHlFVjRJY3VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5iSUD
BAO5iSAwDQYJKoZIhvcNAQELBQADggEBAFHGFgfPAC9WAkv+Gdu6SFvxsNteaBRe
AwfINqMm20ok0zm8vMIW0ZWn8PY9X99Xu8FzvuVO5DMKSVdzcMy3w8r/Ke8kuxD7
OFxHRlc+kKpRZL2PnURirDTrcuN9kHmsEp4ulfmAj+u1imURVELtGSW9ZllD/L14
hjiv8BraoCALJj7bUNtyyKK0fjKSBTPKwrpc+oca6fx/q6FKWBDbQluUUwkuP1+S
9MJ2qQfPMq2j0vghWEjIXdNqWzy8GRGQfppN79yZQ8w+xZk0n9tLIeGpQ1YNcib3
Tz+J2AEz9e5VL7AbsSYbHIctEfAkOKJg8XIgjThlioqfopQxjBiRRWk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org