Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WcjWOtlVo5ASEqdevl-QPIG9nbc.roa
File: WcjWOtlVo5ASEqdevl-QPIG9nbc.roa (raw, json)
Hash identifier: Te3Shv0WDFtRcIdB22bhxpdazHd4codmbHP40LpC1+U=
Subject key identifier: 59:C8:D6:3A:D9:55:A3:90:12:12:A7:5E:BE:5F:90:3C:81:BD:9D:B7
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01849910F3C4F8C84A8E24B2728745E2C059
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WcjWOtlVo5ASEqdevl-QPIG9nbc.roa
Signing time: Mon 21 Nov 2022 07:22:15 +0000
ROA not before: Mon 21 Nov 2022 07:22:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3177
IP address blocks: 37.32.44.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:10:f3:c4:f8:c8:4a:8e:24:b2:72:87:45:e2:c0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 21 07:22:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59c8d63ad955a3901212a75ebe5f903c81bd9db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:cb:d3:fc:3e:22:0f:ca:b5:01:09:ac:e3:
88:9d:19:52:5c:15:d2:0c:26:42:0e:19:7a:77:20:
4e:1c:20:6b:76:f1:eb:ac:f1:dd:8e:d2:51:a1:cf:
dc:6a:c8:4c:8a:21:ce:a6:e2:65:c3:37:80:cc:cf:
b3:c3:10:e1:4a:2b:95:b5:49:1b:e9:ec:58:72:54:
4d:60:90:f3:c2:72:44:49:31:27:f3:7a:cc:0f:44:
0d:e0:e9:77:85:f5:61:a1:d5:b4:2e:95:a3:65:a8:
1f:76:7b:e8:c0:f0:61:cc:3e:de:60:c0:40:b5:ee:
57:29:8b:d7:51:34:9b:4e:48:6a:2f:ad:8c:56:0e:
25:2d:90:12:cd:50:ad:d3:93:4a:76:42:6f:66:20:
a1:33:40:4a:d4:72:37:38:95:90:c0:3d:c0:91:a3:
88:12:ec:66:fc:3d:10:7e:00:98:15:49:39:64:19:
89:cc:9e:a5:97:75:33:24:9c:ca:3d:71:fb:1d:ed:
6f:61:7a:9f:0f:2e:46:22:59:90:f0:21:43:f2:d4:
cb:18:08:5d:fa:06:45:e9:49:80:1d:89:94:5b:32:
3b:85:03:7e:10:cf:00:bd:6b:a6:db:90:02:77:ad:
e1:f0:d3:43:0c:49:2c:c7:6b:c3:bc:d9:bf:05:f3:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:D6:3A:D9:55:A3:90:12:12:A7:5E:BE:5F:90:3C:81:BD:9D:B7
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WcjWOtlVo5ASEqdevl-QPIG9nbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.44.0/23
37.32.47.0/24
Signature Algorithm: sha256WithRSAEncryption
92:52:a4:83:b7:1a:78:ae:cc:6b:22:0e:96:05:94:6a:e2:39:
83:75:a8:09:b2:e6:07:3c:54:67:b8:5f:86:5d:2a:3a:cd:a1:
e5:e1:73:33:5a:f4:09:a5:de:3f:a0:0b:d1:b1:0b:f8:ba:0c:
11:6b:db:c4:d9:27:05:bd:a5:17:e4:14:17:c4:03:84:e7:a3:
8f:60:fd:2a:05:30:1b:f5:dc:12:6c:eb:d0:db:3f:a1:69:01:
c0:23:e7:e0:e0:ee:08:61:f6:b3:96:4f:7e:90:92:e2:2a:3a:
53:dc:86:1e:a6:20:3e:29:42:55:1e:36:14:b6:61:36:a7:fc:
20:d4:59:27:c5:f3:79:e5:0e:e7:58:91:55:5d:b4:40:17:d0:
37:da:99:35:03:91:ba:27:7b:37:39:61:68:22:07:54:ee:fd:
a4:9e:3f:28:8f:4b:2c:b7:2d:df:3f:e1:d3:57:c1:33:3a:c5:
20:4e:b7:6d:96:03:03:fe:bf:70:76:99:b2:87:1b:01:08:99:
56:a2:e6:7d:66:7d:65:25:92:4b:78:a0:ba:41:62:ca:5b:97:
16:12:fb:e8:e3:a8:ed:7a:53:7f:88:6b:d6:54:41:93:f8:3a:
0b:6b:68:c0:de:06:72:24:41:6f:0e:ed:6f:4a:24:97:53:79:
8c:14:53:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYSZEPPE+MhKjiSycodF4sBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjIxMTIxMDcyMjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWM4ZDYzYWQ5NTVhMzkwMTIxMmE3NWViZTVmOTAzYzgxYmQ5ZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jL0/w+Ig/KtQEJrOOInRlSXBXS
DCZCDhl6dyBOHCBrdvHrrPHdjtJRoc/cashMiiHOpuJlwzeAzM+zwxDhSiuVtUkb
6exYclRNYJDzwnJESTEn83rMD0QN4Ol3hfVhodW0LpWjZagfdnvowPBhzD7eYMBA
te5XKYvXUTSbTkhqL62MVg4lLZASzVCt05NKdkJvZiChM0BK1HI3OJWQwD3AkaOI
Euxm/D0QfgCYFUk5ZBmJzJ6ll3UzJJzKPXH7He1vYXqfDy5GIlmQ8CFD8tTLGAhd
+gZF6UmAHYmUWzI7hQN+EM8AvWum25ACd63h8NNDDEksx2vDvNm/BfMBCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFnI1jrZVaOQEhKnXr5fkDyBvZ23MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvV2NqV090bFZvNUFTRXFkZXZsLVFQSUc5bmJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJSAsAwQA
JSAvMA0GCSqGSIb3DQEBCwUAA4IBAQCSUqSDtxp4rsxrIg6WBZRq4jmDdagJsuYH
PFRnuF+GXSo6zaHl4XMzWvQJpd4/oAvRsQv4ugwRa9vE2ScFvaUX5BQXxAOE56OP
YP0qBTAb9dwSbOvQ2z+haQHAI+fg4O4IYfazlk9+kJLiKjpT3IYepiA+KUJVHjYU
tmE2p/wg1FknxfN55Q7nWJFVXbRAF9A32pk1A5G6J3s3OWFoIgdU7v2knj8oj0ss
ty3fP+HTV8EzOsUgTrdtlgMD/r9wdpmyhxsBCJlWouZ9Zn1lJZJLeKC6QWLKW5cW
Evvo46jtelN/iGvWVEGT+DoLa2jA3gZyJEFvDu1vSiSXU3mMFFON
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:07 2025 by rpki-client