Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/L-b_SM1_yQoU37DFPLbOSn0HIjk.roa
File: L-b_SM1_yQoU37DFPLbOSn0HIjk.roa (raw, json)
Hash identifier: 5AxBgeBFzRORxb+rJ1rSm4u3QSMyMZoNi4UKPM1Lm8Q=
Subject key identifier: 2F:E6:FF:48:CD:7F:C9:0A:14:DF:B0:C5:3C:B6:CE:4A:7D:07:22:39
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 37E1DA91
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/L-b_SM1_yQoU37DFPLbOSn0HIjk.roa
Signing time: Sat 01 Jan 2022 04:52:48 +0000
ROA not before: Sat 01 Jan 2022 04:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6823
IP address blocks: 178.251.43.0/24 maxlen: 24
178.251.44.0/24 maxlen: 24
178.251.40.0/24 maxlen: 24
178.251.40.0/21 maxlen: 21
178.251.42.0/24 maxlen: 24
178.251.41.0/24 maxlen: 24
178.251.45.0/24 maxlen: 24
178.251.47.0/24 maxlen: 24
178.251.46.0/24 maxlen: 24
37.202.48.0/21 maxlen: 21
37.202.49.0/24 maxlen: 24
37.202.48.0/24 maxlen: 24
37.202.51.0/24 maxlen: 24
37.202.50.0/24 maxlen: 24
37.202.55.0/24 maxlen: 24
37.202.53.0/24 maxlen: 24
37.202.52.0/24 maxlen: 24
37.202.54.0/24 maxlen: 24
2a01:6be0::/32 maxlen: 32
2a01:6be0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937548433 (0x37e1da91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Jan 1 04:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fe6ff48cd7fc90a14dfb0c53cb6ce4a7d072239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:4c:1e:5f:d4:14:c1:92:7f:5f:43:35:a2:
e3:5d:10:9f:71:b3:2b:35:7d:a2:f7:c6:a2:6f:3b:
64:56:ef:93:9d:58:16:06:e2:d4:7f:7b:e2:5a:31:
99:b7:8b:dd:09:a5:72:3f:83:3b:27:e5:93:25:44:
a3:52:8b:ca:d7:6d:9f:3e:94:c0:4e:e9:a0:24:c0:
30:a7:1a:5c:49:21:9e:56:29:62:d8:28:12:3f:b8:
8b:86:6a:17:dd:a2:24:9c:39:61:9a:b4:95:65:69:
16:28:d9:29:98:21:98:29:8c:3d:5e:bc:9d:63:a5:
b1:c0:31:cb:0a:3f:96:0d:78:21:a0:66:14:51:84:
95:85:e0:a7:81:5b:95:52:91:20:69:ee:f0:a7:a1:
db:f7:ae:20:d4:73:de:aa:83:fb:b1:61:7a:4a:bc:
92:0c:5c:09:4f:36:e4:f5:92:a3:f6:0c:80:75:be:
ac:b2:f7:1f:ea:6a:a4:c7:74:66:0e:04:2b:55:d5:
4d:b4:6e:db:10:b0:dd:de:ae:01:28:e7:41:47:3f:
90:1d:fb:70:c1:95:d6:a1:c7:14:3b:a2:06:68:a5:
23:3e:f7:52:0d:18:ca:6b:45:ec:ff:f5:4e:76:be:
42:f8:3e:e9:76:a6:16:35:79:65:44:71:dc:2c:97:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:FF:48:CD:7F:C9:0A:14:DF:B0:C5:3C:B6:CE:4A:7D:07:22:39
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/L-b_SM1_yQoU37DFPLbOSn0HIjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.48.0/21
178.251.40.0/21
IPv6:
2a01:6be0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:c5:78:5c:05:21:c0:03:6a:36:34:1b:95:0b:c4:38:6c:21:
7f:83:83:fc:05:60:ee:81:ae:ad:1a:db:94:ff:22:0b:50:0e:
85:39:df:7c:70:09:d4:2f:3a:ee:a7:ae:83:bd:f7:c3:86:c2:
dc:af:7d:86:01:67:0e:69:3b:a2:59:3c:e9:d6:47:e0:3e:8e:
7a:5a:c2:90:79:20:d6:c9:2c:dc:58:50:60:a6:20:fd:37:20:
dd:33:a8:38:df:6b:12:27:f0:c0:6a:36:39:60:8c:c8:5e:5b:
ad:d9:ff:66:a4:c4:68:a0:d5:f4:7a:71:5e:be:f6:62:92:2f:
8b:f5:f1:4d:8c:94:49:5c:be:84:19:a0:9c:1e:ca:ff:a6:d7:
43:27:dd:84:f7:68:fc:b9:f9:36:c1:64:17:99:5c:12:1b:24:
1e:06:6f:92:ff:76:a3:b1:d9:d5:37:fd:f5:49:6c:77:5f:a6:
58:87:3c:88:b3:c7:e1:bb:37:ef:ae:4b:fa:94:1e:5d:cb:49:
4f:29:b1:fb:ec:95:e4:4d:bf:84:78:48:94:c8:6c:f7:c2:ac:
ed:38:e0:99:cc:c3:75:7a:58:0b:ce:d9:10:55:c3:90:1a:44:
57:c7:d6:2f:d6:d6:3e:16:17:0f:6b:55:e3:1d:c0:f0:0c:1a:
06:64:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:30 2025 by rpki-client