Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/t2_UImvMrE3OgVPhLi5ffJNEans.roa
File: t2_UImvMrE3OgVPhLi5ffJNEans.roa (raw, json)
Hash identifier: CB4pfcmEYXArO9E2CJ9YhQKsNdQDG7UY5kZTL+gnnAU=
Subject key identifier: B7:6F:D4:22:6B:CC:AC:4D:CE:81:53:E1:2E:2E:5F:7C:93:44:6A:7B
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 15D2DFDD
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/t2_UImvMrE3OgVPhLi5ffJNEans.roa
Signing time: Sat 01 Jan 2022 04:58:41 +0000
ROA not before: Sat 01 Jan 2022 04:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48571
IP address blocks: 37.143.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366141405 (0x15d2dfdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 1 04:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b76fd4226bccac4dce8153e12e2e5f7c93446a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d0:a0:d5:cb:92:5a:79:bc:50:a3:45:c6:57:
8a:91:94:a3:b0:d5:14:80:02:94:3b:3f:1f:9c:a6:
6c:c5:c2:95:16:7c:68:7a:af:52:7b:d0:18:a8:93:
44:7b:a7:1f:c0:de:d4:c2:56:ca:42:ee:3e:a8:7b:
e9:b5:a5:c6:4b:a8:4d:11:49:48:b8:3b:52:ba:de:
6d:d5:32:86:4a:7f:c1:0f:b3:30:34:67:1d:ea:eb:
6c:dc:47:57:19:79:58:0c:60:88:cd:09:1b:46:72:
1d:34:c1:4e:55:db:07:f8:f7:b6:dd:42:47:9b:0c:
c2:82:41:dd:1e:a6:21:2a:69:7e:46:fc:e6:71:f5:
56:6f:cd:90:4e:89:56:7f:19:47:d3:74:10:19:9c:
57:4a:b1:44:aa:0f:16:03:a5:2b:9b:e8:e1:13:ff:
55:ad:0b:e3:5f:49:f4:aa:b3:80:28:ad:b4:95:48:
b3:df:c5:5b:69:42:83:ad:23:8b:d1:2a:d9:bc:6b:
6f:1c:78:3a:e0:c9:18:77:f0:47:58:67:90:2c:d0:
44:46:17:3d:e9:4d:3d:d4:4d:4f:a3:27:92:09:f2:
1b:bc:10:25:8b:f7:72:2b:1b:43:6d:ed:75:45:b3:
57:9f:3a:60:d0:e4:cf:98:7a:10:ee:f8:48:27:cd:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:D4:22:6B:CC:AC:4D:CE:81:53:E1:2E:2E:5F:7C:93:44:6A:7B
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/t2_UImvMrE3OgVPhLi5ffJNEans.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.173.0/24
Signature Algorithm: sha256WithRSAEncryption
32:25:14:e1:54:e2:34:6c:12:4e:89:85:ab:24:6a:11:ee:42:
cd:f4:fa:58:9e:c8:4e:d4:62:ad:e5:38:8f:9a:a2:ff:f8:db:
3e:60:1b:6d:2e:f9:03:47:94:ed:5d:d6:e4:b3:74:94:ac:80:
01:58:58:9e:9d:95:f7:44:ee:41:6d:38:37:a9:87:7a:0f:a6:
ee:d7:5a:88:67:32:a5:26:d7:b2:37:f0:2e:62:64:5d:7e:07:
e7:49:73:b1:02:5b:6f:57:b9:91:cf:76:2e:51:96:c5:9d:3a:
af:dd:17:10:a3:52:a0:36:83:3f:0f:d5:06:d6:d5:b4:de:24:
fb:a7:b9:42:18:e7:73:3f:81:cd:3e:87:a2:66:fb:bc:68:7e:
4b:11:e8:39:93:23:95:7e:61:3c:72:ce:07:4d:de:1d:03:8f:
c8:66:43:fd:a4:81:60:de:34:21:59:79:4f:b2:66:5f:1f:79:
d0:ab:fb:9e:ec:4e:27:8c:70:fb:d9:1c:cb:98:83:a0:13:66:
a2:6a:41:9f:59:32:80:6a:51:6e:f4:31:1f:d4:e5:6e:f7:44:
87:d4:be:86:a7:d3:0b:89:16:5b:31:96:61:ce:36:74:23:99:
2a:81:12:ee:4a:a5:82:d1:95:59:89:31:fe:2a:92:59:8d:64:
32:cc:cc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:01:53 2025 by rpki-client