Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fztEMYEKlgsic0pGbKPMjl3idZc.roa
File: fztEMYEKlgsic0pGbKPMjl3idZc.roa (raw, json)
Hash identifier: GbO6plsrJf43tuJ+mb5Qb1bIoq0To0uNf2lDu95uKyw=
Subject key identifier: 7F:3B:44:31:81:0A:96:0B:22:73:4A:46:6C:A3:CC:8E:5D:E2:75:97
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01851156662FED6C8C1773FDFD9962514282
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fztEMYEKlgsic0pGbKPMjl3idZc.roa
Signing time: Wed 14 Dec 2022 15:52:33 +0000
ROA not before: Wed 14 Dec 2022 15:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 37.153.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:56:66:2f:ed:6c:8c:17:73:fd:fd:99:62:51:42:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Dec 14 15:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f3b4431810a960b22734a466ca3cc8e5de27597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:0d:94:57:d4:b4:86:19:6b:f0:95:e9:94:
f3:a1:5e:74:15:71:b7:0a:ee:b7:be:14:ef:4c:aa:
35:6e:6d:0d:6e:fd:7e:27:54:68:bb:72:a1:61:ec:
df:32:1f:49:9c:bb:51:38:df:a8:2b:df:04:2e:89:
ca:a2:5e:46:ed:85:a0:e1:94:2e:80:41:26:07:c8:
d5:e6:a5:6c:65:88:90:b4:47:1a:9f:4a:4d:fe:59:
9d:d0:b2:5c:25:bd:79:9e:b0:fa:b5:56:2c:9c:d1:
27:ee:99:16:ce:74:58:46:4b:35:ec:e9:ea:20:07:
23:28:55:58:75:0b:0c:a0:74:a7:ea:75:e0:c7:6a:
48:3e:fd:8b:c8:2c:2e:ca:d0:9d:89:05:16:4d:01:
d2:2c:76:43:ad:7a:0b:c1:76:ed:a8:b9:47:52:4d:
d6:aa:81:31:63:8b:4e:ac:53:07:c7:50:eb:56:05:
2a:2a:bd:5f:1c:a8:42:5e:9a:2c:6d:b5:c2:af:e8:
93:cd:fe:c8:0a:5d:a6:f7:f9:6c:4a:d7:26:aa:cb:
25:3c:7d:72:2f:a7:ad:8d:cb:73:09:e7:ee:b6:3d:
64:d6:d8:8c:2d:d7:3b:53:10:c4:e2:bf:11:46:ac:
9b:6a:b1:8c:85:f1:c7:72:26:5a:4c:89:e4:f6:8b:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:44:31:81:0A:96:0B:22:73:4A:46:6C:A3:CC:8E:5D:E2:75:97
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fztEMYEKlgsic0pGbKPMjl3idZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b5:aa:27:31:07:3d:1d:c8:94:86:e6:88:36:22:b6:de:b7:
b0:7c:46:07:19:0b:a1:b6:9b:6b:1c:3f:bf:e0:15:33:fc:d9:
22:3a:cd:3d:06:ab:69:ed:bf:c9:d1:f0:3d:15:b9:36:d3:c7:
aa:95:61:14:ce:a2:66:a0:66:73:87:de:50:e3:56:ff:3a:41:
31:8a:19:b7:8f:52:cd:b4:73:8f:f3:86:a6:16:e3:bd:5e:e2:
57:34:f0:0f:5a:d8:26:bc:67:ef:45:b7:d6:ca:a6:f0:dc:06:
7e:d9:fc:b0:2b:cf:12:b4:c2:07:62:c1:88:8b:9c:e8:a0:96:
3f:e9:53:e9:ae:c6:d0:0a:4c:87:e3:17:3e:1e:bd:35:46:6b:
a5:90:4a:b9:cf:00:48:56:ac:41:89:34:31:29:fe:10:90:08:
09:5d:7d:7c:f4:34:b2:2d:ba:02:26:a8:0b:d3:fc:7d:a4:b6:
28:84:eb:f5:40:c6:a8:2d:6d:b9:5b:2e:68:1d:81:32:5c:b3:
4f:b4:0e:01:c8:6b:27:b9:95:3a:cc:5c:2d:a5:8c:a7:c2:3b:
cc:2c:80:cc:9f:b7:2c:ed:a0:da:be:20:d8:ba:ce:90:e0:b8:
9b:78:79:e1:be:b2:28:03:c7:83:01:70:23:60:6e:65:b9:cf:
4e:ca:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org