Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/m7dJfafQQjoGbMo0Ip4mZXe1lCA.roa
File: m7dJfafQQjoGbMo0Ip4mZXe1lCA.roa (raw, json)
Hash identifier: 8HJ8RVjLUpc4QjUW756fvTuf2Fo94oPgk1tfr33Dy6k=
Subject key identifier: 9B:B7:49:7D:A7:D0:42:3A:06:6C:CA:34:22:9E:26:65:77:B5:94:20
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0185310197FE1B773429DD1F32F85F4EC18B
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/m7dJfafQQjoGbMo0Ip4mZXe1lCA.roa
Signing time: Tue 20 Dec 2022 19:27:46 +0000
ROA not before: Tue 20 Dec 2022 19:27:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202848
IP address blocks: 185.137.38.0/24 maxlen: 24
185.137.37.0/24 maxlen: 24
185.137.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:01:97:fe:1b:77:34:29:dd:1f:32:f8:5f:4e:c1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Dec 20 19:27:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bb7497da7d0423a066cca34229e266577b59420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:c1:b4:47:fa:91:1f:c0:07:9b:15:80:50:
25:29:43:f9:12:93:33:39:57:2a:83:75:d2:12:15:
fa:8d:ba:b9:43:bd:39:72:24:1c:56:d2:d1:b2:3b:
44:3a:9b:9d:8e:30:ba:53:5b:cc:2e:3a:be:26:4a:
6a:82:71:54:d6:e1:20:8d:a7:2c:54:d7:ca:26:47:
9c:69:9d:95:33:1e:4f:8f:10:85:e1:13:a0:01:e0:
4c:e3:a8:45:00:3f:31:61:ec:a2:ed:27:f5:ef:b5:
77:1f:b3:3c:0e:d5:5a:a8:46:c8:10:4d:55:04:b6:
7f:37:d4:ca:93:4b:5f:23:18:77:11:97:6a:d5:a1:
50:75:d2:0a:d9:34:0b:d9:3a:5d:4d:a2:54:11:d9:
40:22:f2:af:97:e1:d4:b6:b3:df:ed:5a:04:5d:f3:
c3:1b:00:ea:ce:64:ab:2d:de:f9:bd:a6:48:6d:37:
23:a3:f9:81:87:f3:fb:d5:3c:0d:d8:08:f4:e8:aa:
47:2c:17:fe:24:e5:59:10:85:87:ff:90:d6:df:b8:
22:7c:f3:a4:89:49:65:3c:bf:e9:50:c6:3d:55:da:
3c:a5:10:a4:3a:c7:5b:e6:7f:0e:33:c3:e4:b3:53:
9e:26:5d:65:19:20:2c:d9:18:7b:dd:6e:d1:66:76:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:49:7D:A7:D0:42:3A:06:6C:CA:34:22:9E:26:65:77:B5:94:20
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/m7dJfafQQjoGbMo0Ip4mZXe1lCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.37.0-185.137.39.255
Signature Algorithm: sha256WithRSAEncryption
04:de:bc:f8:4d:5b:44:ed:22:d3:9b:5c:7f:3d:f2:a1:b8:70:
bc:6d:8a:ab:13:f5:07:83:04:c3:3f:7f:66:26:83:5c:fe:27:
19:d8:e1:15:85:b9:bb:42:c9:61:59:1d:ac:fc:ee:ba:48:0e:
8d:d4:79:31:3d:dc:07:0f:25:5e:25:96:44:21:8c:ce:cb:b3:
5d:87:a0:dd:c5:7c:9d:2d:e6:ca:35:87:24:17:4c:b6:41:83:
4f:c5:a1:a0:96:8a:8c:85:03:7c:0b:c8:b0:79:e2:fc:90:44:
9e:0c:4c:b8:7b:51:87:f4:70:38:f3:6c:c0:16:4d:c7:b4:02:
24:16:c4:10:7a:3e:9f:ec:5e:df:85:63:97:b5:16:9f:df:66:
02:7d:ec:57:72:57:92:27:fc:ea:10:b4:21:e0:0e:3a:23:5d:
ad:2b:02:be:c4:f3:6d:06:f1:bd:c8:dc:b5:e5:52:14:97:3d:
1e:21:c7:48:dd:6f:94:ae:da:72:26:a6:70:db:81:21:d7:c3:
6e:0b:b8:1a:71:b8:0b:63:0e:3c:53:c9:f8:5a:89:ac:aa:e8:
4c:ab:23:d9:c5:2d:f4:16:22:62:29:1a:aa:bc:e3:ff:2e:b5:
31:8c:56:99:b4:c3:8d:58:f5:4a:77:e9:a1:8c:e5:06:7c:38:
c8:59:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org