Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jHJ-Q8OGgCsnCJWUI-rS0nc1Fmg.roa
File: jHJ-Q8OGgCsnCJWUI-rS0nc1Fmg.roa (raw, json)
Hash identifier: 2C8DB4aZLe+wsmCXtUkcm5t33gPEMbGPXDIHoy8n1fg=
Subject key identifier: 8C:72:7E:43:C3:86:80:2B:27:08:95:94:23:EA:D2:D2:77:35:16:68
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01856DC19886A31D76FF913ACD8CC0C9AF2A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jHJ-Q8OGgCsnCJWUI-rS0nc1Fmg.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3177
IP address blocks: 37.32.44.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
37.32.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:98:86:a3:1d:76:ff:91:3a:cd:8c:c0:c9:af:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c727e43c386802b2708959423ead2d277351668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:5c:13:b9:75:03:f8:57:9e:f3:29:75:d9:
9f:e3:92:d1:19:7a:a9:18:2b:cd:52:87:d1:ee:18:
05:23:2b:9a:49:2a:3c:54:79:80:2b:d5:fe:04:5d:
de:e3:f8:42:5a:5a:74:61:9e:03:78:43:d0:81:75:
6d:ac:ff:8b:32:cc:72:61:15:b6:c6:a2:83:73:e8:
89:b1:11:a0:3c:0c:61:13:e5:e6:84:60:d6:c5:7e:
cc:3e:50:d2:86:f4:23:c7:aa:b0:ed:bd:cc:a7:af:
92:70:d5:4a:7f:a0:21:05:7f:e5:50:2c:0f:a8:7a:
a6:ca:73:01:af:ec:31:c8:be:56:cb:b9:bc:1d:ee:
8f:3a:1c:d6:fa:8b:bc:e3:db:0f:0b:cd:ad:0e:5c:
b6:b5:b6:2a:5f:06:8b:70:98:bb:7a:f4:5f:1e:db:
ed:61:7e:d6:d5:4c:3b:0b:13:86:0b:9b:31:36:a2:
cb:16:14:2e:cf:85:b9:47:6e:a5:a6:65:33:a0:7a:
9e:4a:b7:d3:40:6e:bc:9e:0d:5a:5d:dd:d5:30:cb:
52:e4:c1:0a:a3:95:56:04:12:95:38:1e:3f:5c:f8:
79:62:59:ea:32:0b:60:c7:72:f6:a7:7d:cc:55:ab:
80:e8:64:76:5d:02:db:92:41:13:0f:11:2f:b7:f9:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:7E:43:C3:86:80:2B:27:08:95:94:23:EA:D2:D2:77:35:16:68
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jHJ-Q8OGgCsnCJWUI-rS0nc1Fmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.44.0/23
37.32.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:90:aa:2b:20:e8:11:b3:e6:ee:c3:99:c4:7f:ea:ef:a9:6b:
b0:f4:98:db:54:89:bc:27:13:a2:5d:54:6d:a6:84:db:b7:e7:
2b:fd:d5:8e:0f:cb:89:bd:ba:6d:4b:6a:0a:e7:c2:ab:b3:4f:
64:cb:09:9c:c6:a3:4a:f5:d2:af:e3:1c:bf:d3:5a:84:43:1a:
a6:74:eb:54:3b:15:8b:76:ce:9c:c2:20:59:f5:80:3b:cb:c4:
2f:0f:fe:15:43:e2:c2:2d:b2:91:ef:21:8c:b4:8f:c7:4f:4b:
b6:7c:45:59:5a:5e:5e:3f:a9:9e:25:91:ca:13:96:aa:43:e8:
df:ad:6c:c8:3d:15:4a:b4:70:d3:ed:ff:9a:da:f8:8d:7d:a4:
97:44:ba:53:1f:a1:27:93:75:44:80:01:a8:9f:8f:79:48:37:
3d:66:c7:ed:1d:a3:dd:07:7d:ad:d4:ca:4a:ef:bd:1e:ad:47:
24:8b:fd:73:d8:0d:c2:36:3d:d3:88:8c:0b:52:07:6c:50:c0:
52:b5:fd:12:86:4c:a3:d5:7d:5b:cf:de:c0:aa:d6:e9:2c:20:
84:02:4f:fc:42:ab:40:78:a0:af:cf:94:32:a4:c4:67:82:d0:
2d:3e:e0:a0:57:80:fa:e3:32:e1:23:9a:11:e1:04:1a:22:95:
73:89:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:10 2025 by rpki-client