Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x_H8_rjMFYVkUB4vTelekBMlt1E.roa
File: x_H8_rjMFYVkUB4vTelekBMlt1E.roa (raw, json)
Hash identifier: ComeVBVIGSPbzQwElQc0uKGQ5x1w8j4B7lP1pk0jsF4=
Subject key identifier: C7:F1:FC:FE:B8:CC:15:85:64:50:1E:2F:4D:E9:5E:90:13:25:B7:51
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0187984C2BC1D8BB85728725148CAD0F63B7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x_H8_rjMFYVkUB4vTelekBMlt1E.roa
Signing time: Wed 19 Apr 2023 06:55:41 +0000
ROA not before: Wed 19 Apr 2023 06:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 37.128.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:4c:2b:c1:d8:bb:85:72:87:25:14:8c:ad:0f:63:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 19 06:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7f1fcfeb8cc158564501e2f4de95e901325b751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:6d:2c:c9:b8:00:ec:e0:e6:47:af:cd:79:
32:58:f7:c2:b5:d3:7b:de:e7:9f:57:a4:4a:d9:05:
3f:94:ff:60:6d:01:ae:e2:7f:f7:3f:f7:60:0e:41:
45:3e:92:5a:78:15:21:08:64:45:bd:1d:6e:dd:e0:
81:52:eb:ab:a4:50:d3:61:4b:77:59:23:65:ab:1f:
76:05:f2:b0:39:ce:de:84:2d:f4:b5:5a:0d:e7:7f:
a4:cf:b8:61:80:27:af:f0:6c:76:1a:02:81:9d:82:
f1:7d:37:96:fd:0b:7f:24:9b:be:27:e8:54:a3:12:
af:6f:e0:0d:87:ed:34:6c:bf:56:b3:7e:5e:8b:fb:
c8:8b:76:a2:e1:fa:14:c8:c3:08:d5:9d:52:57:22:
49:6b:44:20:cf:37:d6:a9:b3:cb:7f:87:c6:27:bd:
4b:bd:09:10:f7:22:ca:d8:42:54:d7:99:ca:58:da:
94:ae:5f:99:fa:90:e3:0c:b3:6b:d7:29:f9:56:5c:
49:c2:aa:f7:2c:c1:46:ba:6d:7b:c4:99:89:ee:bc:
92:8c:09:2c:be:69:a1:ea:d9:7c:ab:4c:60:3b:a4:
15:63:8a:ca:4d:54:a2:7e:ab:fb:ad:0e:76:22:a6:
1e:4e:6e:fc:ca:69:8c:ae:26:bf:25:5a:af:bf:d5:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:FC:FE:B8:CC:15:85:64:50:1E:2F:4D:E9:5E:90:13:25:B7:51
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/x_H8_rjMFYVkUB4vTelekBMlt1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.252.0/22
Signature Algorithm: sha256WithRSAEncryption
47:c2:23:1a:b5:d8:a5:dc:10:76:be:04:ee:4f:2f:94:6b:d3:
76:15:fb:89:e4:e0:01:38:c8:d6:b7:77:a4:17:57:5c:b1:5a:
1b:82:cd:29:dd:44:e4:c2:dc:cd:1a:a8:7e:5f:8a:3b:4c:12:
6a:45:70:35:53:19:13:a5:78:ce:9f:c7:3b:2d:bd:c6:55:6e:
dd:42:6b:87:da:5a:22:7d:54:af:6a:4b:1e:49:41:2d:53:4c:
7f:46:31:8d:bb:e8:8d:91:07:20:2a:3a:5d:f4:91:05:8a:6b:
1b:e5:6f:0a:17:de:16:91:5a:63:63:4a:b7:ad:01:29:bf:05:
09:d5:df:6e:48:80:10:c6:a9:cc:ed:8a:71:5a:65:bb:7f:28:
9d:8d:04:2e:38:11:6b:b6:78:59:67:f6:79:41:e2:89:6b:c8:
37:9c:a4:cb:5b:f6:f8:5b:15:63:ff:ad:02:b8:18:98:81:6c:
53:1f:ee:7e:60:fc:e5:97:79:a4:bd:32:e6:00:ce:df:40:d3:
46:ec:04:30:32:cc:f9:a2:00:c7:d8:f2:1a:9c:84:39:24:03:
ff:c9:4f:dc:d3:d4:22:2b:d1:da:0e:e6:10:5a:8b:6d:29:36:
78:40:f6:4a:a7:9e:c5:57:6b:51:9f:02:45:cc:fa:2b:28:44:
75:fa:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:21 2025 by rpki-client