Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/9SJq5oON2ryjDBJR6Wj1Bu1vXM4.roa
File: 9SJq5oON2ryjDBJR6Wj1Bu1vXM4.roa (raw, json)
Hash identifier: xvusc8TYhLwPRCd+BH+/sBxXwnq/s2Sbm1LbiZOdDTg=
Subject key identifier: F5:22:6A:E6:83:8D:DA:BC:A3:0C:12:51:E9:68:F5:06:ED:6F:5C:CE
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018C9C16F12C15227CD0DF485CD507635A47
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/9SJq5oON2ryjDBJR6Wj1Bu1vXM4.roa
Signing time: Sun 24 Dec 2023 13:49:58 +0000
ROA not before: Sun 24 Dec 2023 13:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57974
IP address blocks: 37.128.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9c:16:f1:2c:15:22:7c:d0:df:48:5c:d5:07:63:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 24 13:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5226ae6838ddabca30c1251e968f506ed6f5cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:da:46:3e:88:d9:90:97:3b:50:55:f5:38:
bf:ba:c2:2e:15:f6:76:66:c4:3d:39:b0:75:38:f3:
f7:ea:41:ed:3a:ad:88:1f:22:11:98:68:0d:20:74:
1f:50:7a:6a:46:7c:d6:71:b0:7e:52:68:7c:a5:e7:
81:ac:1f:12:dc:ef:92:ae:e2:21:d0:09:e0:92:bc:
36:9d:79:13:8b:23:e7:d6:c8:09:06:ec:0e:c2:91:
16:80:a8:10:34:f4:c8:b3:f4:e4:72:fe:85:94:d0:
0b:47:e8:10:62:02:c5:05:d0:ca:8e:96:3d:43:7f:
c3:c8:c3:b8:92:98:a4:9c:26:ef:f4:86:fb:51:cd:
b2:56:03:80:85:d6:6f:a6:8a:fc:1a:5f:bc:ee:cb:
b2:81:11:1a:40:71:b3:20:be:f4:e3:a9:f9:60:b0:
a4:1b:89:8a:c2:4a:ff:61:57:10:59:c2:1e:01:f8:
9f:34:74:8b:51:ec:28:d7:9a:91:e3:2f:f0:da:e8:
c1:63:79:a2:45:18:35:52:17:12:b7:5f:f6:a4:2a:
8e:a9:52:05:54:65:f1:41:98:dc:ff:45:da:b5:6b:
0b:5d:96:6f:6d:28:e7:53:2b:a9:71:d4:cf:f5:e0:
cc:c8:38:ce:ee:f5:68:7d:f6:11:ae:93:23:04:86:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:6A:E6:83:8D:DA:BC:A3:0C:12:51:E9:68:F5:06:ED:6F:5C:CE
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/9SJq5oON2ryjDBJR6Wj1Bu1vXM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
59:55:14:10:0e:f4:9b:34:e0:68:20:aa:7a:14:97:b4:2c:61:
1f:aa:7e:1f:8a:06:d0:b5:da:f0:6f:03:67:70:aa:73:de:05:
e6:ef:03:d7:17:56:a1:31:f6:55:ec:86:df:9b:23:56:52:8c:
25:3c:bf:4f:6f:e9:a9:7b:1a:63:33:75:2f:b2:f8:a3:15:ad:
9a:61:24:30:65:69:24:df:4c:37:5d:e2:02:5b:c1:a8:82:c3:
1a:49:d5:93:f6:a6:23:2a:76:21:f4:73:78:04:aa:42:ec:96:
16:82:f6:40:0c:d0:db:43:fd:05:dc:9d:48:9c:15:49:2a:d2:
56:12:98:84:ff:f8:93:f4:7b:36:f6:3d:1a:e6:50:3d:fa:f6:
8f:83:55:8b:14:5d:e8:44:9e:6a:43:93:11:e1:ce:0f:d9:22:
75:1c:b0:99:3b:8a:fa:64:5c:19:c8:11:27:99:dc:ba:bb:3c:
67:58:82:89:bc:92:cb:e0:0a:f4:0f:e9:c0:df:aa:dc:ed:07:
21:5d:b5:a8:f8:33:27:c6:c1:18:54:73:ce:90:47:c0:49:2d:
c1:45:26:3e:7c:e0:d3:70:0c:e6:a9:d1:63:2e:23:d3:13:80:
82:17:c3:37:5e:7c:3e:ec:c0:30:c0:b5:16:29:0a:32:0b:67:
e9:eb:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:00 2025 by rpki-client