Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/l92evwmCLiplyazswyiKExgd-gg.roa
File: l92evwmCLiplyazswyiKExgd-gg.roa (raw, json)
Hash identifier: hNATJJYXFnRDh+YHyKw/glw3odJlV8gQ8FnNwIWUzN0=
Subject key identifier: 97:DD:9E:BF:09:82:2E:2A:65:C9:AC:EC:C3:28:8A:13:18:1D:FA:08
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 018573BA9B4D1927209FB3233F450BAAF808
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/l92evwmCLiplyazswyiKExgd-gg.roa
Signing time: Mon 02 Jan 2023 18:24:47 +0000
ROA not before: Mon 02 Jan 2023 18:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3227
IP address blocks: 185.37.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:9b:4d:19:27:20:9f:b3:23:3f:45:0b:aa:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Jan 2 18:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97dd9ebf09822e2a65c9acecc3288a13181dfa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:40:a3:66:dc:53:08:52:c3:42:f4:a7:74:
1b:0a:54:4d:d6:8e:b6:c4:e5:e8:6d:d2:3d:85:04:
8d:27:8d:57:c5:54:e0:1e:95:da:ee:76:d1:b2:c2:
64:93:1b:3a:39:97:8c:de:a9:fd:94:bb:8f:c3:79:
15:30:e1:87:97:de:30:ab:ae:8e:ab:45:2e:4e:0e:
c2:80:74:24:97:e5:d7:b2:36:81:37:c7:44:81:34:
e7:1f:b6:fb:df:24:56:6d:56:91:07:1a:3f:16:a4:
b7:08:45:fe:14:94:36:0f:34:e5:bd:f9:3d:93:e8:
50:47:ea:6e:48:24:27:86:32:cb:4e:53:44:e1:5b:
ca:8e:97:a0:da:b8:1b:b7:c9:21:3c:8c:1d:73:d9:
5e:cf:18:95:d2:a1:6c:23:9b:ba:ae:07:33:94:04:
9a:6f:bf:17:39:67:d6:19:0d:e4:d8:60:c2:64:34:
05:82:be:0a:ac:68:e2:cf:c1:0e:bf:c0:70:50:1f:
1c:e4:bc:ed:f6:c9:1d:20:af:44:95:3f:e9:04:2e:
ef:1a:ee:25:3e:27:58:17:dc:93:31:6b:a7:ff:a0:
17:df:6c:0a:62:c6:12:e8:d1:c5:4e:65:ae:c8:07:
03:87:51:76:53:3c:07:d6:63:54:6e:81:94:34:9d:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DD:9E:BF:09:82:2E:2A:65:C9:AC:EC:C3:28:8A:13:18:1D:FA:08
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/l92evwmCLiplyazswyiKExgd-gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2a:fe:0d:4e:9b:82:49:6a:e7:67:4e:e3:7c:05:b0:63:1a:
0a:46:c2:64:81:d5:5e:ac:f1:d6:e3:b4:08:c1:46:4c:01:23:
02:7c:ed:44:2c:30:8b:57:25:49:3b:ad:af:75:43:4d:78:69:
4f:2a:91:6e:09:55:8a:33:8b:a7:65:86:d2:f8:dc:bb:49:9e:
15:67:1c:b2:01:2f:2c:78:f8:c7:6e:26:37:66:60:4c:08:5f:
8b:e0:2e:27:15:93:10:5d:81:33:a6:1f:10:cf:d1:25:05:3a:
db:07:17:f5:e8:ba:83:e1:21:65:ac:19:d2:ad:a1:2b:25:7a:
6a:fe:c9:f0:89:13:e5:3d:36:1d:bd:86:d9:ac:bd:97:42:a2:
a9:f8:24:a5:fd:f2:7e:25:e3:bd:24:45:b0:d1:52:57:a8:45:
9a:33:f6:4f:34:0c:e0:d5:04:80:56:b6:24:02:f9:03:15:86:
cc:9a:4a:3a:94:7f:7f:05:22:23:60:76:02:d9:09:fc:a5:f2:
fe:72:da:c2:bf:80:d0:9c:f7:e4:93:7e:ff:e9:bf:7b:7b:96:
56:3b:ad:07:71:fb:74:ba:e2:61:11:d2:d8:86:1c:e2:69:c3:
70:3d:b0:1a:8d:6b:b0:aa:40:66:66:76:25:26:9f:cf:05:65:
b5:ac:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:03 2025 by rpki-client