Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/chyvZzKZJVoH5Uz_tlJyYR_R0uI.roa
File: chyvZzKZJVoH5Uz_tlJyYR_R0uI.roa (raw, json)
Hash identifier: 4bQnejVNsCMLr/qay/kUyJqNSzR8SS4WKkKiOJG7vow=
Subject key identifier: 72:1C:AF:67:32:99:25:5A:07:E5:4C:FF:B6:52:72:61:1F:D1:D2:E2
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0185701EDDC1D596A568E5979F177984D47D
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/chyvZzKZJVoH5Uz_tlJyYR_R0uI.roa
Signing time: Mon 02 Jan 2023 01:35:49 +0000
ROA not before: Mon 02 Jan 2023 01:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 37.247.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:dd:c1:d5:96:a5:68:e5:97:9f:17:79:84:d4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 2 01:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=721caf673299255a07e54cffb65272611fd1d2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:7b:46:b4:5c:fa:93:9c:74:1b:e6:07:63:
27:03:01:74:7c:92:7d:ab:3d:a3:96:1f:63:83:97:
77:e8:5a:3b:e2:20:2a:9b:20:15:3d:f5:25:1a:0f:
4d:ad:c6:5a:f4:87:50:f9:10:74:98:e5:87:dc:7d:
98:8d:65:7e:95:ae:d2:a1:01:a6:05:91:e6:b9:ea:
c0:be:77:86:03:d3:1d:09:3e:77:1a:f2:2a:f2:dc:
12:27:44:ed:ac:74:e3:73:01:d6:44:25:25:14:51:
da:23:80:de:20:c8:fc:33:31:5a:95:63:7a:ee:2f:
b5:17:62:d4:c0:fd:9e:0c:1a:03:7c:2f:e1:1f:40:
7b:ac:36:73:81:5e:8a:4d:5e:80:39:67:25:9d:dd:
40:7c:7a:b8:a3:b3:16:5f:34:21:7d:bd:a7:9e:b4:
7f:40:a2:31:fb:ff:f7:12:b3:a9:b1:ef:8e:25:b0:
64:40:57:9e:72:33:be:e2:b7:b7:4f:ce:4f:aa:7b:
09:4c:bf:8a:cc:0d:ba:fa:0f:a6:e5:ea:89:f9:7c:
77:4d:c0:e3:86:28:65:58:33:69:3f:83:38:0d:d5:
9b:48:d0:53:d7:79:cd:84:ea:24:3c:c2:ba:84:57:
c3:f4:91:28:9d:52:3a:82:94:00:06:27:1d:1c:c8:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:AF:67:32:99:25:5A:07:E5:4C:FF:B6:52:72:61:1F:D1:D2:E2
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/chyvZzKZJVoH5Uz_tlJyYR_R0uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.108.0/24
Signature Algorithm: sha256WithRSAEncryption
72:83:66:1d:31:23:9a:16:b6:e8:5b:bc:76:d0:1c:f4:f8:59:
d9:51:94:07:a3:e0:4a:a9:c1:87:a7:35:91:62:ef:11:08:5e:
88:04:b6:32:0c:ec:3d:00:ea:ea:c6:19:4a:e7:ce:3a:40:d4:
15:ae:ad:2e:f5:02:26:0b:63:18:5d:e4:f3:a0:98:76:97:aa:
20:32:b6:c3:9b:bc:00:ba:e2:e8:3a:7c:4e:4a:3f:46:f8:ee:
ce:eb:01:05:58:f5:63:c4:7f:b1:08:7b:50:75:e1:50:c4:c1:
18:95:39:32:c7:a6:c8:7b:30:b1:72:8d:ef:92:8b:c4:cf:9e:
87:4d:dd:90:06:da:a4:4d:4b:be:d3:cc:94:11:86:6b:30:ea:
6e:7e:82:2f:41:4c:88:68:59:85:1f:af:df:7e:79:c1:17:73:
11:66:80:9a:08:1a:d9:7e:05:b1:ae:e2:9b:10:eb:4f:63:63:
d4:c1:5b:40:4d:28:4d:54:1f:c9:62:4f:6b:3b:be:31:50:fa:
6e:70:e7:2e:f3:f6:bd:8d:e7:e7:cd:50:50:10:95:fc:d2:ae:
bc:c5:ca:38:c9:1b:ab:c9:a5:93:8d:2d:47:a3:e5:08:1d:cf:
35:d5:21:e8:79:94:c0:98:74:13:c6:59:e3:02:7c:34:7e:da:
31:df:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:17:55 2025 by rpki-client