Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/16_L_mNvLyy-vpwy8JUkRN9bhWw.roa
File: 16_L_mNvLyy-vpwy8JUkRN9bhWw.roa (raw, json)
Hash identifier: C0Z3EBDJrvfYCru8EcltnB3vr38UccPDdwR9CJAovcU=
Subject key identifier: D7:AF:CB:FE:63:6F:2F:2C:BE:BE:9C:32:F0:95:24:44:DF:5B:85:6C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018AEAAF839CC118B87A87240BC663CD0257
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/16_L_mNvLyy-vpwy8JUkRN9bhWw.roa
Signing time: Sun 01 Oct 2023 10:01:25 +0000
ROA not before: Sun 01 Oct 2023 10:01:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 37.128.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:af:83:9c:c1:18:b8:7a:87:24:0b:c6:63:cd:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 1 10:01:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7afcbfe636f2f2cbebe9c32f0952444df5b856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:62:b7:69:fc:d1:21:b2:b5:ee:61:7f:dd:b1:
29:c6:c3:f5:f0:8f:53:52:ea:16:30:f0:a9:31:ab:
0e:77:9a:ff:e7:31:86:ab:8d:30:d8:8b:b9:b2:85:
a7:0b:a2:2b:0e:d0:12:b1:25:09:cd:2f:06:92:3c:
18:59:22:5c:49:e0:a3:97:64:80:ef:08:ca:e3:b3:
68:f8:f9:2d:58:12:2d:d3:35:57:c8:28:1a:cc:54:
85:79:5e:b9:7f:95:0f:57:54:b8:ba:5e:53:88:c2:
9f:bd:3b:b9:d6:6a:46:f2:3d:99:7f:92:88:7d:8a:
e9:3d:9a:88:03:3d:33:d1:65:3a:83:d4:27:32:2b:
98:1e:e1:cb:89:ce:8e:53:eb:c2:2b:08:70:a0:07:
32:50:a3:e1:6f:3c:55:00:e8:d7:11:ea:de:1c:cb:
96:59:44:de:33:60:9d:59:6e:c2:7f:85:92:c0:92:
9e:a4:de:74:1f:e6:4e:fc:68:10:bf:99:ce:71:62:
bf:53:36:2e:f3:c6:2a:ea:41:4f:b3:52:f7:df:d1:
49:ee:55:31:68:2e:da:36:c5:0c:bc:ee:25:dd:d4:
69:4a:d2:8f:ec:7f:2d:b0:46:bb:f6:85:10:5c:43:
1f:2b:56:8a:cd:2d:2f:3c:ea:2d:17:5e:11:78:c3:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:CB:FE:63:6F:2F:2C:BE:BE:9C:32:F0:95:24:44:DF:5B:85:6C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/16_L_mNvLyy-vpwy8JUkRN9bhWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:ed:f9:7b:6d:2e:ea:e4:2c:d9:53:be:37:ef:1a:e9:72:ae:
97:5f:55:9a:4e:23:8f:4c:cb:64:05:10:29:dd:e4:a0:f3:77:
56:29:10:e1:31:c6:45:ba:a4:bf:f0:c6:d8:9e:6a:96:9c:c9:
94:22:76:99:46:1e:21:3a:c7:69:e4:31:32:c5:cf:0e:e9:fb:
89:06:5e:67:2c:50:1c:2f:09:5b:cc:78:ee:ca:c2:a6:32:bf:
7a:1f:3d:49:ed:e4:4e:87:97:a6:f7:28:cb:0f:18:f8:8f:8f:
6e:59:19:08:e3:46:04:9f:91:55:ca:49:35:30:f6:f0:30:e5:
4d:77:f4:74:e2:f4:e7:80:eb:4d:39:ce:b3:cf:36:0f:c8:1a:
e3:6b:b9:2e:0d:40:db:79:e6:a6:1d:7a:b4:e4:3f:3a:93:2b:
7b:86:b7:dd:16:f3:ea:1f:78:ef:0a:85:c3:ae:1e:ba:a8:c6:
ea:bc:50:95:32:79:90:c3:e1:80:39:bd:95:3b:96:f7:5e:58:
3f:7d:7f:25:0c:cb:18:0b:26:10:29:1e:66:32:07:d7:0c:80:
fb:d9:8c:68:2b:e7:01:46:65:65:9f:73:20:34:f8:02:84:04:
56:f9:72:2d:eb:cb:5d:53:86:33:75:69:de:f6:30:0e:b0:88:
20:78:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:41 2025 by rpki-client