Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/t4T7S2h2Rre8oYmFIaaO858LvuU.roa
File: t4T7S2h2Rre8oYmFIaaO858LvuU.roa (raw, json)
Hash identifier: rcPXVGJlrLfTQ46dTn+wU5XXPVkihb4BRW7M1tgQFPs=
Subject key identifier: B7:84:FB:4B:68:76:46:B7:BC:A1:89:85:21:A6:8E:F3:9F:0B:BE:E5
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B85E800397C8B0645BA3C12AAD3AE7D85
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/t4T7S2h2Rre8oYmFIaaO858LvuU.roa
Signing time: Tue 31 Oct 2023 13:24:15 +0000
ROA not before: Tue 31 Oct 2023 13:24:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400395
IP address blocks: 37.128.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:e8:00:39:7c:8b:06:45:ba:3c:12:aa:d3:ae:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 31 13:24:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b784fb4b687646b7bca1898521a68ef39f0bbee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:5c:33:ee:d0:ff:49:df:41:43:81:cb:33:
43:ca:1f:27:2e:73:67:25:ad:2f:26:e2:4c:72:75:
27:a1:93:67:96:69:33:77:47:f0:87:13:58:56:ba:
a2:f5:74:8e:fe:ef:3f:84:ad:40:fa:49:b4:ae:74:
cd:95:54:1f:48:67:2e:e0:f7:7e:cc:ff:ed:e8:d8:
c5:b9:a2:61:0a:c7:23:66:db:65:81:30:cc:76:8b:
c9:60:78:1b:bc:62:d9:4a:8d:e0:fe:b8:0b:b0:8e:
f1:de:ba:fe:65:79:10:1c:d8:8e:0a:67:7f:7a:12:
ea:bb:c1:c5:51:f3:c9:c3:db:42:df:25:df:e7:b2:
b1:3b:1a:3b:f6:28:0b:39:0f:ae:6d:e3:3a:77:09:
2a:c1:ea:f8:64:b4:03:69:94:77:d4:b8:56:d4:c3:
61:f0:30:ce:91:1f:ff:9f:e7:18:a3:5b:89:53:0a:
63:5f:d9:99:2c:3d:31:2f:51:25:43:d2:71:20:6b:
ac:43:84:ba:29:46:e4:d4:46:6a:89:2a:81:9b:f5:
34:ca:ca:8e:81:fc:b7:68:84:4b:cf:4e:90:20:21:
1c:91:38:2e:96:a4:9f:70:80:12:0e:ba:bd:62:b8:
23:7f:c0:7d:50:36:07:98:15:f6:47:22:05:23:1c:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:FB:4B:68:76:46:B7:BC:A1:89:85:21:A6:8E:F3:9F:0B:BE:E5
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/t4T7S2h2Rre8oYmFIaaO858LvuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:87:fc:6e:14:a9:99:da:d7:8a:64:8f:b8:ce:11:26:5c:77:
d4:af:f0:53:79:7e:aa:b2:72:93:7c:f9:13:b6:6d:71:4c:d5:
99:7a:c1:1f:a9:ec:b5:d5:09:21:41:e3:89:ce:04:63:00:d7:
bc:11:0f:1e:14:2c:5a:7b:22:85:60:12:41:e1:64:6c:14:89:
1f:d5:80:de:2a:46:c0:9e:ad:6a:9f:ae:01:78:58:44:33:89:
ac:f8:ae:3b:31:0c:ed:d8:9d:b6:e4:2b:bb:b8:bf:ab:b2:d4:
52:1a:13:fb:5f:03:91:b0:66:30:b0:9e:4e:7c:ee:70:07:23:
e8:24:c8:54:9c:61:0f:d7:2d:f8:af:1e:3d:c3:1e:3b:b5:25:
50:0e:0b:35:5d:53:23:7e:88:57:c2:bf:e3:7d:82:cd:fd:ef:
f8:18:97:e9:ce:68:08:22:97:a5:78:2a:ad:2b:24:66:49:f8:
60:00:8b:93:ac:be:85:b0:bb:3a:a5:b2:0c:f0:58:bb:21:ba:
8d:35:a6:e4:eb:25:e8:c7:de:ba:64:23:7d:43:9e:ae:e9:e1:
6f:b4:7b:77:d1:88:a1:a2:70:8b:9c:69:97:1d:72:66:4e:c6:
02:87:c1:b1:42:a1:e6:c0:d7:6a:38:1b:49:48:72:07:02:fc:
ac:df:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:30 2025 by rpki-client