Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/h4yZTtJ0X1xAcJdKW8Nsy-9QrGw.roa
File: h4yZTtJ0X1xAcJdKW8Nsy-9QrGw.roa (raw, json)
Hash identifier: LMW3Nck/yBWfZRVl+ZCEQkk89ALWDV+6uq2SoQIwEOw=
Subject key identifier: 87:8C:99:4E:D2:74:5F:5C:40:70:97:4A:5B:C3:6C:CB:EF:50:AC:6C
Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial: 04DB39C3
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/h4yZTtJ0X1xAcJdKW8Nsy-9QrGw.roa
Signing time: Sat 01 Jan 2022 15:55:26 +0000
ROA not before: Sat 01 Jan 2022 15:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57873
IP address blocks: 37.143.64.0/21 maxlen: 21
185.14.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81476035 (0x4db39c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
Validity
Not Before: Jan 1 15:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=878c994ed2745f5c4070974a5bc36ccbef50ac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:66:cb:84:f2:4c:64:9d:3c:27:00:f8:28:
a4:2f:15:ce:6d:06:61:df:20:65:79:db:8e:ae:cf:
2a:db:86:4d:57:66:67:19:72:36:56:7e:8e:8a:bc:
d3:8b:4e:00:fe:94:6c:bb:11:7d:9f:1e:d1:de:bf:
5d:20:ec:30:bc:27:82:98:73:98:a5:fc:fb:eb:04:
0f:9e:c9:ca:f2:cd:bf:24:45:ab:42:ea:8b:e1:50:
c7:72:5d:42:76:90:c5:64:7d:a8:d3:1c:45:6e:17:
64:5b:04:c6:d2:1c:81:40:75:a5:aa:fa:df:f6:d5:
12:8c:25:0f:f7:40:ce:4a:e1:1e:3e:c7:3b:89:9b:
a6:65:2b:d1:a9:dc:f4:8e:e9:b5:d8:ee:51:2c:46:
03:73:16:33:da:1a:37:92:56:7b:ac:66:4d:2f:92:
a3:9c:5f:ac:75:e9:62:3a:5e:98:c4:ac:16:e0:43:
37:d4:92:9b:3d:2e:d6:25:7b:e3:ba:4a:17:73:f3:
1c:2d:3d:08:f0:45:b2:03:1a:05:ba:b3:5f:ff:37:
5c:65:2e:e8:f5:7d:38:57:b2:8c:0a:9d:f3:ea:02:
a8:15:70:94:fc:bf:d2:6c:55:9a:03:a1:92:50:75:
a5:2a:45:c4:90:d8:ce:71:4f:13:e1:ed:7d:d8:50:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:99:4E:D2:74:5F:5C:40:70:97:4A:5B:C3:6C:CB:EF:50:AC:6C
X509v3 Authority Key Identifier:
keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/h4yZTtJ0X1xAcJdKW8Nsy-9QrGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.64.0/21
185.14.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:2b:56:7c:41:e1:cc:5e:a1:ed:a7:6b:bb:23:a0:d7:80:cb:
56:71:9c:b0:d1:6b:16:61:91:1a:59:97:40:df:6f:07:39:68:
45:bb:d2:55:00:5b:55:f0:3a:0d:38:3f:54:1a:b7:d3:2c:cf:
1e:ef:07:74:31:ac:ee:d1:52:66:a8:cb:e0:f5:86:68:91:a1:
d9:bf:b8:df:dd:73:e3:c9:c9:0b:a5:6a:bd:f6:d3:89:33:b4:
f8:3f:63:78:93:86:63:0f:f8:73:15:7e:d2:93:05:cd:c3:89:
a6:53:b4:83:39:70:c6:46:7c:cb:5a:5a:e0:a5:84:72:2e:23:
3a:04:a2:9f:2e:42:b5:f1:6d:9b:5a:a9:6d:47:2e:3c:ec:0e:
37:b2:43:54:b4:8d:96:6d:67:8a:ed:b4:5a:14:0a:27:a8:c2:
ae:cb:41:6f:6b:59:02:b5:18:21:25:71:32:1c:93:d9:4d:1b:
f3:3b:c5:f3:39:d7:a7:36:d8:8f:58:47:f3:c4:27:82:d5:78:
07:9b:77:9f:d8:c5:82:89:9b:2d:a9:22:6c:dc:24:a6:08:0b:
1d:03:c4:2b:2c:b8:b4:b2:66:ad:38:d7:5f:4a:79:23:e8:17:
0d:b0:82:78:4f:c1:57:f1:4d:db:52:e0:de:c1:af:1d:37:83:
d2:ed:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:23:56 2025 by rpki-client