Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/SrwOXYCZbdokF73Y2-pYlba2IEA.roa
File: SrwOXYCZbdokF73Y2-pYlba2IEA.roa (raw, json)
Hash identifier: R/UUD37JxCUrWn4ebq1LAxUwsmB/Y8YIvjKQxW9f+Ug=
Subject key identifier: 4A:BC:0E:5D:80:99:6D:DA:24:17:BD:D8:DB:EA:58:95:B6:B6:20:40
Certificate issuer: /CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Certificate serial: 051B9783
Authority key identifier: 37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/SrwOXYCZbdokF73Y2-pYlba2IEA.roa
Signing time: Sat 01 Jan 2022 05:54:06 +0000
ROA not before: Sat 01 Jan 2022 05:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39232
IP address blocks: 178.237.72.0/21 maxlen: 21
185.81.84.0/23 maxlen: 23
185.81.84.0/22 maxlen: 22
185.81.86.0/23 maxlen: 23
178.237.64.0/21 maxlen: 21
178.237.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85694339 (0x51b9783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Validity
Not Before: Jan 1 05:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4abc0e5d80996dda2417bdd8dbea5895b6b62040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:c5:a7:64:48:9f:7d:29:9e:0e:09:95:9b:
d6:14:da:10:e6:c9:09:24:51:74:83:d8:74:93:a2:
ba:e9:10:e9:cc:e3:fa:b9:9c:18:b4:f1:fa:25:4f:
9f:fd:90:3e:45:16:d8:e9:75:6a:04:dc:db:81:97:
5c:5e:7b:93:fe:c1:2c:70:97:43:25:5f:f9:c1:57:
8e:33:53:25:5b:e1:bb:01:da:c9:2c:90:14:ca:ea:
db:60:02:94:75:99:23:bb:0c:28:ee:99:01:57:ae:
fa:28:c7:fe:a8:b8:b5:b3:dd:22:53:67:41:d4:78:
14:79:d8:29:e9:87:02:0c:4a:4d:45:56:4d:0f:79:
3a:9e:42:4f:82:54:eb:87:3a:ce:38:1b:0d:d1:c6:
03:91:14:85:b7:ed:87:ce:a1:d5:59:e6:d5:6e:5c:
0f:ec:46:66:17:84:8b:90:9b:a3:e5:c8:7b:ff:7d:
f7:b6:6a:3d:ac:de:a5:ff:a5:82:ab:20:87:36:be:
b5:bf:16:d4:65:b9:87:64:89:09:46:61:68:2d:56:
7e:ce:d3:10:50:77:2e:4d:38:28:28:de:7a:18:fb:
bc:88:79:f3:ea:71:8d:ef:65:65:a7:84:b0:f7:4c:
62:f9:aa:4e:19:59:7e:56:d3:47:59:bf:10:6f:a6:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BC:0E:5D:80:99:6D:DA:24:17:BD:D8:DB:EA:58:95:B6:B6:20:40
X509v3 Authority Key Identifier:
keyid:37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/SrwOXYCZbdokF73Y2-pYlba2IEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.64.0/20
185.81.84.0/22
Signature Algorithm: sha256WithRSAEncryption
87:3d:84:82:b0:e1:72:ea:2a:f9:41:fe:34:4f:97:2a:0c:21:
36:d7:95:ca:fb:d4:3e:c1:02:ec:1f:8f:3c:22:e8:64:95:45:
a6:96:d6:78:70:4a:18:a4:e0:6d:e0:34:ae:08:26:db:62:bc:
95:dd:b7:60:2f:93:b6:14:3c:f7:ec:cc:da:50:ab:ef:58:dd:
e3:6a:30:2d:66:47:ee:42:de:41:70:e5:74:70:ed:25:ed:2d:
1c:44:f2:3d:17:8a:4e:f2:61:3c:f0:c1:82:46:9b:37:69:1c:
72:69:24:56:96:d5:3b:58:05:3c:28:c5:17:66:5d:88:19:87:
62:4a:ea:20:c8:3f:24:e6:f0:f4:2e:0b:c0:e9:4f:c3:7b:2f:
11:c6:9a:a3:b5:72:db:45:14:01:65:50:a4:2e:54:eb:be:70:
ef:a0:82:fe:cb:5e:97:cb:3a:48:e7:2d:56:8f:5b:e6:b6:9c:
ee:2a:f9:59:36:94:56:52:e6:8a:4a:5a:64:5c:a2:b9:04:f7:
e0:27:e3:e7:35:3b:23:24:aa:5c:52:7c:f4:c4:5e:f8:83:91:
a7:b7:cb:f9:70:9f:41:22:91:ca:dd:c7:2e:ee:d4:dd:4e:a7:
05:a7:2d:06:0d:67:42:60:c0:9b:f7:28:e0:70:4a:9e:ed:b9:
b9:22:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:19 2025 by rpki-client