Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/4kl_h0oICD3OFbFjaEYbhtQnDn4.roa
File: 4kl_h0oICD3OFbFjaEYbhtQnDn4.roa (raw, json)
Hash identifier: 8NIAbrIpqaKaPWUUAcx7ItaOAToa5Cv8pEacn79t8A8=
Subject key identifier: E2:49:7F:87:4A:08:08:3D:CE:15:B1:63:68:46:1B:86:D4:27:0E:7E
Certificate issuer: /CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
Certificate serial: 01DAD4C8
Authority key identifier: 56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/4kl_h0oICD3OFbFjaEYbhtQnDn4.roa
Signing time: Sat 01 Jan 2022 04:56:29 +0000
ROA not before: Sat 01 Jan 2022 04:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211210
IP address blocks: 37.252.221.0/24 maxlen: 24
2a0b:96c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31118536 (0x1dad4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
Validity
Not Before: Jan 1 04:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2497f874a08083dce15b16368461b86d4270e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4c:ea:55:ec:81:5a:2e:e3:a0:68:2c:40:f8:
d2:27:22:15:94:da:57:a5:b0:93:54:89:9c:15:cf:
34:78:3a:84:65:35:51:6c:fe:df:34:db:54:ae:6a:
5a:ff:d0:b3:32:a0:3f:f0:1c:e8:44:16:54:75:8f:
e8:23:3d:86:28:e1:60:31:a4:b3:ae:ec:ea:12:c0:
d6:0b:56:63:12:2f:7f:8e:67:7f:fc:e5:6f:32:c2:
7b:45:c4:73:df:74:b6:0c:de:24:45:bf:9d:58:15:
6a:35:7d:12:50:99:c4:e3:90:cd:5d:c5:dd:32:4c:
ce:f3:d3:3e:8d:68:52:e1:9b:bb:8c:16:2c:40:97:
11:9a:36:69:7f:36:ae:52:10:61:50:84:05:2a:06:
f8:13:0d:6a:bb:5b:58:e6:6e:68:ca:dc:31:8c:b1:
5a:58:ae:26:6e:5c:11:28:5f:5c:72:98:3b:66:30:
6a:1d:d1:a8:b2:b6:e3:98:4e:e9:22:03:fa:6e:dd:
f3:2d:4d:33:27:0e:4a:93:24:04:f3:31:a0:ca:72:
0b:f9:ec:f3:bd:6d:fc:dd:b6:7d:46:ac:a4:22:8d:
b1:ff:d3:b1:de:31:b9:80:a0:2a:98:11:07:09:c1:
21:2d:f9:45:b3:6d:56:69:85:a7:20:7b:52:78:55:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:7F:87:4A:08:08:3D:CE:15:B1:63:68:46:1B:86:D4:27:0E:7E
X509v3 Authority Key Identifier:
keyid:56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/4kl_h0oICD3OFbFjaEYbhtQnDn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.221.0/24
IPv6:
2a0b:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:42:93:db:95:d8:35:04:bf:33:62:a4:19:ce:f4:f0:a3:c2:
d1:ff:ac:72:e9:f4:40:ed:25:df:a2:93:ae:dd:31:0a:f1:06:
9e:2c:98:e1:c1:38:67:2f:0c:7f:c6:3e:a8:cf:de:e4:43:12:
ad:10:b4:7d:80:45:a6:c4:b8:a1:6c:59:00:39:e6:7f:79:b4:
53:db:29:d0:35:a1:09:1f:2b:fb:f9:c9:60:91:05:df:59:41:
ca:81:5f:fc:4e:0d:d4:18:65:08:2c:92:24:e9:1f:2b:54:88:
05:86:33:c7:c8:c1:41:66:2c:46:1b:55:f2:03:e7:45:61:52:
ef:b7:52:71:c2:9d:f9:c8:b5:24:73:c7:86:78:18:76:e1:08:
57:b2:f4:95:24:e5:fc:a6:09:39:35:5b:38:2b:9d:bd:f2:37:
f1:0c:d4:ca:af:41:df:1f:a6:96:3f:5d:cb:dc:32:d1:fd:c4:
b1:6a:1b:17:f2:b6:02:d9:7c:ad:03:61:22:9a:0a:de:ce:f7:
9d:2c:ae:d9:cd:96:8b:ec:10:f4:91:f6:e2:c0:ed:ce:b7:23:
0a:10:47:04:c1:f4:d3:fc:02:b2:1c:65:ad:77:f9:61:19:34:
3a:8e:51:22:cb:5d:1b:b6:cc:d2:d6:99:73:9d:e9:a7:20:1d:
a4:c8:52:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:51 2025 by rpki-client