Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/Fi1_hRlxmmQY4kbeeq6B5Ins-cU.roa
File: Fi1_hRlxmmQY4kbeeq6B5Ins-cU.roa (raw, json)
Hash identifier: +/NMdwaO+PV5Ggn4Zq9ONcfT6McydfxgqIzQ/0bWqtk=
Subject key identifier: 16:2D:7F:85:19:71:9A:64:18:E2:46:DE:7A:AE:81:E4:89:EC:F9:C5
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 01856EB90DB1B4BC1CDBECA7601868CF7336
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/Fi1_hRlxmmQY4kbeeq6B5Ins-cU.roa
Signing time: Sun 01 Jan 2023 19:04:59 +0000
ROA not before: Sun 01 Jan 2023 19:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199633
IP address blocks: 37.32.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:0d:b1:b4:bc:1c:db:ec:a7:60:18:68:cf:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Jan 1 19:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=162d7f8519719a6418e246de7aae81e489ecf9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:6b:18:02:34:4e:b4:68:2f:80:fd:b7:5b:
5c:58:d2:1b:92:8c:49:1d:90:2d:c0:26:73:1c:2f:
52:8d:66:cb:d2:8c:e6:d8:74:54:fe:cd:84:20:1f:
95:14:b6:bc:b7:f0:74:26:8a:67:19:94:ae:e9:3f:
33:eb:61:40:58:9a:00:a8:fb:7a:df:a0:2a:d4:61:
23:cd:c6:7f:a7:b8:cb:de:9b:29:2d:c5:10:4c:02:
46:57:04:41:c2:da:30:d1:36:2b:85:40:82:33:c0:
a6:67:08:97:ea:53:b7:13:af:b2:50:02:24:a0:0f:
18:2b:65:e2:6a:a2:6f:87:97:16:97:dd:11:8c:40:
2e:ff:64:0a:42:a2:bf:3d:b6:0a:07:e2:63:5c:97:
27:31:64:72:e3:62:60:bd:50:7d:6f:cf:40:cf:f2:
1d:a7:39:16:77:a8:fb:47:3c:04:a4:7f:2d:53:7b:
5c:b3:89:2f:04:26:e9:b3:be:e1:a7:80:9c:bb:af:
fb:dc:68:d1:9d:50:a9:16:f6:7e:1b:5d:25:66:00:
75:6e:bd:6a:cc:11:7a:c1:06:2f:88:cb:c7:f9:8e:
23:a4:32:8d:ed:02:64:52:57:df:dc:12:4d:9a:d1:
be:b3:60:27:69:ae:60:e3:20:09:04:a1:42:b8:f2:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:7F:85:19:71:9A:64:18:E2:46:DE:7A:AE:81:E4:89:EC:F9:C5
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/Fi1_hRlxmmQY4kbeeq6B5Ins-cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.117.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a5:ff:aa:cf:86:91:d4:2f:76:c9:b3:ae:15:03:29:ec:f9:
ce:7f:78:9b:f8:2d:26:ac:19:62:54:51:ba:eb:e2:e0:10:f3:
8c:4e:5e:e5:b4:a5:50:3a:38:09:5b:6d:43:6c:b7:1a:7c:96:
ad:59:da:8d:5c:57:60:3d:38:f7:74:dc:4d:24:2f:04:1f:7e:
2b:61:82:89:2e:67:17:0e:32:c9:c2:07:86:06:18:18:84:86:
e4:5f:05:04:6b:db:9a:b5:fd:65:d3:96:82:4d:1a:98:68:b4:
7d:5b:97:0d:fa:81:6e:4a:20:c6:d0:02:cf:2b:2a:3a:5f:31:
1c:0d:04:e3:26:44:dc:99:93:ad:7d:ce:af:bc:a3:25:2d:6a:
02:3a:d9:d8:03:49:15:65:ea:b9:8d:ee:bd:ec:a5:07:84:aa:
50:33:1c:c5:b3:76:85:ff:4c:d3:93:15:a0:c9:ea:f6:ad:cd:
89:92:ae:6e:1b:28:ad:1c:1f:c2:33:2d:ea:7f:66:b7:0a:a5:
63:0f:91:48:40:b1:c1:83:e2:48:35:d9:6f:54:96:85:4e:b2:
60:9c:5f:41:73:ef:fe:8f:2c:0d:0a:40:fd:99:6b:7b:29:e7:
ba:b2:2c:dc:89:d0:16:fc:26:5c:cf:c0:2b:7d:30:c1:4a:da:
ca:e0:25:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuQ2xtLwc2+ynYBhoz3M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDIwMjk3ODM5YzczOTBkZjIwMjUxYTVjMDkzMGU2YTY3
MmJlZTMwHhcNMjMwMTAxMTkwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJkN2Y4NTE5NzE5YTY0MThlMjQ2ZGU3YWFlODFlNDg5ZWNmOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArstrGAI0TrRoL4D9t1tcWNIbkoxJ
HZAtwCZzHC9SjWbL0ozm2HRU/s2EIB+VFLa8t/B0JopnGZSu6T8z62FAWJoAqPt6
36Aq1GEjzcZ/p7jL3pspLcUQTAJGVwRBwtow0TYrhUCCM8CmZwiX6lO3E6+yUAIk
oA8YK2XiaqJvh5cWl90RjEAu/2QKQqK/PbYKB+JjXJcnMWRy42JgvVB9b89Az/Id
pzkWd6j7RzwEpH8tU3tcs4kvBCbps77hp4Ccu6/73GjRnVCpFvZ+G10lZgB1br1q
zBF6wQYviMvH+Y4jpDKN7QJkUlff3BJNmtG+s2Anaa5g4yAJBKFCuPL66wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBYtf4UZcZpkGOJG3nqugeSJ7PnFMB8GA1UdIwQY
MBaAFBwCApeDnHOQ3yAlGlwJMOamcr7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFJQ2w0T2NjNURmSUNVYVhBa3c1cVp5dnVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83OTczM2YtNTMzMi00NTFiLTg2YWYt
MTQyYTJiOThmNGM4LzEvRmkxX2hSbHhtbVFZNGtiZWVxNkI1SW5zLWNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83OTczM2YtNTMzMi00NTFiLTg2YWYtMTQyYTJiOThmNGM4
LzEvSEFJQ2w0T2NjNURmSUNVYVhBa3c1cVp5dnVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSB1MA0G
CSqGSIb3DQEBCwUAA4IBAQB5pf+qz4aR1C92ybOuFQMp7PnOf3ib+C0mrBliVFG6
6+LgEPOMTl7ltKVQOjgJW21DbLcafJatWdqNXFdgPTj3dNxNJC8EH34rYYKJLmcX
DjLJwgeGBhgYhIbkXwUEa9uatf1l05aCTRqYaLR9W5cN+oFuSiDG0ALPKyo6XzEc
DQTjJkTcmZOtfc6vvKMlLWoCOtnYA0kVZeq5je697KUHhKpQMxzFs3aF/0zTkxWg
yer2rc2Jkq5uGyitHB/CMy3qf2a3CqVjD5FIQLHBg+JINdlvVJaFTrJgnF9Bc+/+
jywNCkD9mWt7Kee6sizcidAW/CZcz8ArfTDBStrK4CXb
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:41 2025 by rpki-client