Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/zYcynl61ZqMxK4C_amtbx8weuj0.roa
File: zYcynl61ZqMxK4C_amtbx8weuj0.roa (raw, json)
Hash identifier: og3L6a88NKkjhwbYQM3tdCb6X+tkxNviitTu83XTesM=
Subject key identifier: CD:87:32:9E:5E:B5:66:A3:31:2B:80:BF:6A:6B:5B:C7:CC:1E:BA:3D
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 158FCFA2
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/zYcynl61ZqMxK4C_amtbx8weuj0.roa
Signing time: Sat 01 Jan 2022 06:54:47 +0000
ROA not before: Sat 01 Jan 2022 06:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211859
IP address blocks: 37.247.111.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361746338 (0x158fcfa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 06:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd87329e5eb566a3312b80bf6a6b5bc7cc1eba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:3a:6b:aa:f5:31:be:e4:e3:3d:e2:c0:92:
46:64:9d:1b:e4:b9:98:f3:7d:b5:a8:03:b1:96:55:
e5:68:f2:ce:40:b8:41:67:3c:8f:f6:a9:d8:44:13:
14:40:ab:1e:27:24:f9:ca:7d:6b:c3:bc:9b:19:14:
da:1c:0f:a7:af:88:8f:b7:ac:dd:f6:d4:03:1e:01:
14:f7:92:c5:43:2f:d8:59:0b:8d:da:6f:05:93:c0:
cb:1a:36:43:2b:46:7e:57:9b:fd:27:af:6d:af:58:
99:c0:06:74:15:84:21:e5:ae:8d:6d:e1:52:d9:81:
fa:a1:9c:5e:21:97:20:97:a0:90:52:9b:55:f6:74:
0a:41:a8:64:9b:69:57:ce:3f:87:57:74:f2:18:4c:
e4:b6:1d:06:6f:4e:98:36:2c:34:22:fc:29:54:9b:
21:02:6b:81:29:ce:0a:36:61:74:5b:67:1f:97:53:
98:89:ac:f8:41:ae:0e:db:6f:c1:e2:9f:93:04:69:
b2:b2:b2:f1:74:28:fb:1c:b3:a4:23:e5:35:85:36:
f6:45:a2:98:d2:22:a4:60:0d:a3:d3:29:65:59:a3:
9a:a8:d1:77:ea:2d:9f:1d:24:49:8d:66:75:72:2e:
47:dc:22:fd:ce:ec:2c:ee:80:92:6d:1b:7e:80:07:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:32:9E:5E:B5:66:A3:31:2B:80:BF:6A:6B:5B:C7:CC:1E:BA:3D
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/zYcynl61ZqMxK4C_amtbx8weuj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.108.0/24
37.247.111.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a7:f0:e9:7e:0b:24:a5:69:5b:2d:d3:d0:1d:da:ab:d3:70:
79:fc:d0:bc:3a:c3:44:ce:63:ae:08:62:d4:cf:71:13:30:b7:
f2:bb:21:39:b7:08:a7:1f:57:f2:d5:6a:ea:8e:01:34:69:ae:
2a:42:93:58:c7:8d:b5:21:61:dd:d7:66:1f:d4:e5:06:c6:74:
f6:91:22:2f:e0:49:6d:fa:e3:3d:65:7a:ad:ff:da:e5:10:ef:
80:b4:f6:33:4e:2a:9c:d0:ea:af:e1:ff:f7:16:e4:29:aa:1f:
d0:ee:96:46:fa:70:98:53:ed:42:66:6e:f0:33:df:15:2a:c9:
9b:30:62:50:31:08:0b:83:41:82:b7:f4:a1:1b:a9:c4:55:a2:
b3:09:b8:84:92:ee:08:01:99:9f:f6:0c:1c:56:1a:bd:82:d2:
70:81:a6:b8:a3:9b:36:bb:e9:3a:29:11:6a:d4:5e:c5:85:d6:
c8:f2:48:8c:f1:ff:c6:f3:82:74:26:a5:f4:67:e8:04:1d:f3:
b5:53:09:ad:2e:fb:32:a3:91:9a:9d:d0:56:12:a4:14:5b:2b:
ad:19:d5:f5:bd:b8:ad:a7:aa:87:d2:fe:62:2c:07:2d:27:d1:
24:e0:f8:cc:74:cd:cb:c1:10:02:ad:1b:25:39:af:47:49:8f:
96:1a:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net