Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/esZK1htcoUmG_VcGtsKs-bDorVo.roa
File: esZK1htcoUmG_VcGtsKs-bDorVo.roa (raw, json)
Hash identifier: zUbUoaj+QGFI/VC4nXQTjfm3NY18hHC/8ptMWH7dPcc=
Subject key identifier: 7A:C6:4A:D6:1B:5C:A1:49:86:FD:57:06:B6:C2:AC:F9:B0:E8:AD:5A
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0529811E
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/esZK1htcoUmG_VcGtsKs-bDorVo.roa
Signing time: Sat 01 Jan 2022 14:05:51 +0000
ROA not before: Sat 01 Jan 2022 14:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210817
IP address blocks: 37.148.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86606110 (0x529811e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jan 1 14:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ac64ad61b5ca14986fd5706b6c2acf9b0e8ad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:07:43:6c:a1:ae:8b:21:2d:e4:a3:ec:f3:
a4:ef:35:2c:25:33:3e:df:ee:d5:8a:78:cd:99:19:
fd:28:9f:98:18:cf:40:09:32:0d:71:ae:f6:7c:44:
12:80:23:ed:85:78:72:1f:34:bd:48:ee:90:91:0f:
d9:cd:76:de:5a:b7:86:f9:6d:2a:a8:46:97:8e:a1:
79:50:a4:6e:9a:4d:10:32:47:f0:58:19:e0:b4:34:
c4:a1:ff:66:c2:35:86:a0:74:58:74:49:0d:ef:4d:
07:85:59:bf:af:50:1a:5d:49:6e:0d:c7:97:63:9f:
87:dd:c7:14:d9:8b:39:5b:c0:40:26:01:34:e6:ee:
48:77:d8:45:b3:be:32:d0:ca:f9:be:be:31:e1:55:
0e:b6:4c:9d:c6:f4:6f:55:45:68:95:1e:c5:1e:73:
91:0b:2b:9f:0e:22:61:d7:1d:0c:71:88:ad:fa:28:
c8:ea:7e:fe:e2:eb:20:c6:44:76:6d:f6:0a:07:01:
49:9e:30:1f:d4:30:6f:d4:9b:0f:88:a1:3b:4d:93:
a8:59:90:9b:09:f7:ca:cb:29:18:09:a2:c0:a4:d0:
ae:c0:76:b7:ff:de:7a:f8:e0:c4:cc:81:f6:b9:21:
9f:6f:fd:46:40:26:74:64:0c:a6:15:6c:86:7b:d7:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:4A:D6:1B:5C:A1:49:86:FD:57:06:B6:C2:AC:F9:B0:E8:AD:5A
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/esZK1htcoUmG_VcGtsKs-bDorVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.172.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b1:25:6c:5a:57:e2:3f:ad:dc:e3:9c:07:ac:16:40:6a:d2:
c5:6f:a2:ca:f8:c7:7d:92:d3:06:3f:32:65:69:73:98:ae:17:
2d:ea:da:5a:b4:7a:d9:96:77:05:2c:87:88:f7:aa:6f:8f:dc:
24:6b:02:4c:93:bb:0d:c6:f6:11:80:9d:22:87:f6:97:43:68:
d0:96:5b:80:c4:21:8a:df:9e:2d:75:ff:47:16:2a:f9:64:ee:
75:41:30:d7:54:af:03:a8:a5:39:3b:66:e1:9e:6c:af:46:e2:
d0:2f:48:e1:c7:29:c9:95:cd:74:9e:81:25:3a:dd:43:1f:8a:
15:08:21:e9:b5:f8:31:38:d9:f9:5e:c1:29:11:0f:1e:b9:f4:
4b:1b:db:1c:06:ef:f7:a1:c8:ef:ff:36:5b:5e:69:0d:4b:63:
51:a2:ff:7d:4e:8f:b5:b4:b1:54:d6:44:54:86:37:d9:b9:a8:
21:5d:37:f9:33:e0:e6:07:8c:7b:b8:8f:bd:eb:c3:4a:6e:7e:
fe:94:80:4b:72:5c:1a:02:b7:71:6b:b6:b1:cd:c7:f9:f6:5c:
2b:7c:01:38:76:86:d0:da:32:4c:af:bd:a9:13:fb:64:af:8a:
e9:41:30:41:3f:83:7d:f5:a9:fb:e0:01:6b:8d:87:cd:7f:a9:
72:ed:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:23 2023 by rpki-client on console.sobornost.net