Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/MEXfzbyNrp09qU8gocynlsdEOC8.roa
File: MEXfzbyNrp09qU8gocynlsdEOC8.roa (raw, json)
Hash identifier: eIeoHc8wSfP/aZs8dqu2UrP5SQT2Ywbno3st6Mk2FeE=
Subject key identifier: 30:45:DF:CD:BC:8D:AE:9D:3D:A9:4F:20:A1:CC:A7:96:C7:44:38:2F
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01856ED4DA1C5F01085E10CD651F64072D54
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/MEXfzbyNrp09qU8gocynlsdEOC8.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25188
IP address blocks: 37.202.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:da:1c:5f:01:08:5e:10:cd:65:1f:64:07:2d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3045dfcdbc8dae9d3da94f20a1cca796c744382f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:3f:b1:ee:fb:8b:db:28:3a:32:31:eb:cc:
67:44:67:7a:e9:44:7a:b7:80:9e:e4:22:e2:0b:71:
b4:93:a2:df:26:8c:7c:7a:05:a9:6f:6c:b4:cc:51:
f0:85:46:3a:c0:c8:ba:9c:e9:c2:68:47:a1:70:cd:
b0:61:7e:4f:f3:50:83:45:4f:bc:bb:2f:9b:3e:e8:
b1:b8:78:6a:86:9c:ff:a4:95:de:a5:c3:16:8b:44:
11:81:4a:a0:3b:34:fa:64:23:a3:61:c6:be:11:f0:
49:0e:f6:fd:35:17:7d:c8:cb:86:f5:cc:6a:76:bb:
36:95:f1:4a:d1:4b:f6:27:40:f6:5f:f3:61:fe:28:
67:91:81:e2:bf:23:be:e0:e4:75:ed:2f:a5:43:1b:
1a:3a:e1:49:b3:a7:cd:3c:ac:a6:1c:d6:19:7d:85:
e2:b1:72:f2:3d:46:42:50:56:2e:f8:9a:32:b1:c9:
25:ad:06:92:8f:2a:05:5e:cd:9c:95:e9:eb:2a:50:
8e:29:0d:29:af:b3:0b:c6:3f:09:0b:a4:1b:76:30:
0b:7d:72:98:f5:39:2d:c7:77:ef:b9:9b:43:d2:1e:
14:5c:cd:bd:59:4b:5d:b5:5d:ce:42:c0:3b:29:3c:
f2:b4:62:a8:37:80:88:19:b9:fc:17:5c:6a:57:38:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:DF:CD:BC:8D:AE:9D:3D:A9:4F:20:A1:CC:A7:96:C7:44:38:2F
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/MEXfzbyNrp09qU8gocynlsdEOC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.8.0/22
Signature Algorithm: sha256WithRSAEncryption
34:33:14:87:cf:26:44:5a:9d:ec:0a:b9:58:2a:40:49:f0:d9:
8b:5a:67:b9:51:47:8a:27:76:8d:1e:18:24:05:ae:02:02:fc:
01:11:f3:72:b3:db:6e:8a:9e:00:05:d6:f4:b9:ce:39:58:0e:
79:fa:2b:f2:26:6d:b9:cb:71:86:40:4a:85:ca:6a:2a:ab:61:
29:57:b2:b8:c9:71:87:94:6e:54:1e:a5:65:4b:4c:4d:26:7d:
5a:a0:9d:0e:78:38:8c:a2:04:c0:01:9c:2d:e8:e6:dd:6e:d0:
41:d1:de:fc:c3:35:5a:3c:44:5f:98:c4:d9:c0:0f:b9:11:07:
29:94:e4:a4:a3:a1:81:6b:96:42:94:89:5d:3e:ec:fa:d4:41:
d8:2d:19:62:b1:fa:90:0e:2b:c8:85:b7:65:9d:09:62:05:06:
d0:63:37:26:54:a9:90:e6:2b:4d:44:dd:c8:e3:23:1a:46:31:
03:7b:47:ef:f5:97:66:32:c0:b0:75:b3:88:28:70:11:68:a4:
a9:7a:03:50:7a:0a:4b:cf:53:d6:ab:93:49:9d:3f:a1:2e:72:
0f:ad:01:26:c3:d5:d4:08:38:3f:77:da:ba:74:27:5a:68:58:
6c:6b:81:33:37:46:ae:f9:59:d0:b3:54:f8:da:3e:2f:be:8f:
38:51:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:35 2025 by rpki-client