Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3ppdS-CjKlUPRGN00AEg9ViubLM.roa
File: 3ppdS-CjKlUPRGN00AEg9ViubLM.roa (raw, json)
Hash identifier: uETXaK+KYgUfoBEbKZzDXbp+RNtkhbZGTpPYmYihqts=
Subject key identifier: DE:9A:5D:4B:E0:A3:2A:55:0F:44:63:74:D0:01:20:F5:58:AE:6C:B3
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 307EF82A
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3ppdS-CjKlUPRGN00AEg9ViubLM.roa
Signing time: Sat 01 Jan 2022 05:56:50 +0000
ROA not before: Sat 01 Jan 2022 05:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61113
IP address blocks: 37.209.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813627434 (0x307ef82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jan 1 05:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de9a5d4be0a32a550f446374d00120f558ae6cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:94:6e:5a:1d:54:25:04:e3:80:ff:6a:2f:
0f:24:42:fd:15:48:36:23:4c:5e:4d:1c:fa:84:1e:
86:d9:79:a0:55:87:11:5e:46:1a:60:de:6e:1f:45:
11:16:42:8a:f4:fa:ad:0f:33:cf:10:b1:a3:65:88:
d9:e9:ef:b0:cf:1e:33:3a:1a:89:ad:1d:b9:7e:78:
57:f5:f3:26:29:5e:bf:3f:12:b9:8b:82:98:61:bd:
8d:b3:b0:23:ae:ac:27:de:41:60:9a:80:4e:6e:c8:
1e:5c:a8:76:0c:01:c6:ef:35:39:ea:ed:ea:92:8b:
ca:48:b3:12:9d:c6:f6:cf:8f:d5:60:9c:ef:14:6f:
8e:18:f9:7d:31:bc:9e:fd:fa:1f:c1:e3:a3:92:5f:
21:c0:89:a7:20:fe:a7:09:28:c1:3a:9b:d3:75:3d:
92:a1:1a:a8:1a:b1:65:33:07:cf:cb:5f:30:b4:d4:
e0:8a:2c:96:0c:72:67:21:94:e8:be:dd:db:11:99:
b7:42:93:6a:e0:ec:ab:49:cb:50:68:78:58:29:dc:
31:15:ae:05:8d:fc:cc:c7:51:35:ec:70:06:bd:9b:
7e:d5:1e:56:5d:86:f5:2d:2e:87:07:56:c4:17:97:
b3:1b:20:df:00:5d:03:06:e6:aa:74:22:4e:11:de:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:5D:4B:E0:A3:2A:55:0F:44:63:74:D0:01:20:F5:58:AE:6C:B3
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3ppdS-CjKlUPRGN00AEg9ViubLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:78:3d:4a:6d:eb:60:80:7b:ed:7a:63:49:87:0b:10:b1:9e:
f4:70:ed:24:0f:09:73:ad:dd:0b:a3:a7:8d:79:42:aa:ad:60:
91:91:c1:c4:96:03:d3:65:4f:a8:55:ea:6e:9b:5d:40:8e:3d:
77:fe:18:71:ff:e2:ae:a9:d0:cc:f9:dc:d7:b2:34:06:0d:09:
78:85:73:fc:2a:54:c4:a6:b5:0b:81:94:48:47:51:38:0b:cd:
3e:82:d0:1c:ec:78:e0:2c:46:01:e9:7d:f7:e7:b8:9f:da:58:
e8:87:5e:95:b4:d6:d0:1a:fc:05:f9:a2:48:00:d6:13:b0:f3:
c1:65:12:a2:cc:32:13:b1:e3:57:bb:88:09:01:bf:61:c0:41:
bd:4f:e7:54:d8:57:c7:12:ee:c8:2f:81:e1:75:1b:5f:b5:29:
4d:35:e2:a3:ed:c4:57:4f:4c:b3:18:e4:84:39:bc:3b:bf:0b:
3f:db:a0:cf:77:06:24:ad:24:49:ac:5d:69:e5:cd:14:c3:37:
eb:55:9f:be:66:5d:d5:b3:7f:92:60:4b:9a:01:4f:a3:07:55:
f6:1f:f8:19:b5:a6:1f:b5:3b:aa:14:6f:5a:90:9c:e4:1c:0c:
2d:b8:36:5d:c9:f6:03:e9:4c:8e:73:2d:8f:50:8d:45:df:5b:
ff:d9:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:29 2025 by rpki-client