Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jlPmpZw-QBVYxgVg3eEfkKuNskw.roa
File: jlPmpZw-QBVYxgVg3eEfkKuNskw.roa (raw, json)
Hash identifier: qHgO9+Ofa+6R5EN8e6p6Hw12q7wZWGTMc2F8+8HP4Qs=
Subject key identifier: 8E:53:E6:A5:9C:3E:40:15:58:C6:05:60:DD:E1:1F:90:AB:8D:B2:4C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0185C8EF88D208AFA1D763F130792C6CB23F
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jlPmpZw-QBVYxgVg3eEfkKuNskw.roa
Signing time: Thu 19 Jan 2023 07:30:19 +0000
ROA not before: Thu 19 Jan 2023 07:30:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 37.32.43.0/24 maxlen: 24
37.32.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:ef:88:d2:08:af:a1:d7:63:f1:30:79:2c:6c:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 19 07:30:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e53e6a59c3e401558c60560dde11f90ab8db24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:40:12:6d:e0:19:de:a7:b6:66:49:0e:40:
1f:19:96:cc:c4:4f:e8:a2:88:ed:b1:20:9a:de:e9:
d2:23:37:7d:04:ca:7d:10:f5:23:aa:a5:35:16:5d:
f4:c8:5f:b6:17:8f:7c:7b:ee:d2:f9:16:98:25:17:
f9:50:ae:21:26:56:5c:7c:55:e1:4f:4c:9c:72:12:
d5:9a:72:1a:ae:67:1d:74:95:b3:80:00:6e:44:e6:
41:8b:97:95:64:9c:82:2a:4b:10:e8:d8:1d:04:ca:
37:1b:7c:62:72:02:25:7f:4f:19:d3:2a:fa:dd:3e:
b9:c0:05:08:3c:20:79:b3:a3:8e:82:65:24:e2:e8:
3d:93:ba:fa:c4:71:2a:6d:de:be:f5:67:45:23:f0:
7d:82:a7:8c:7c:b1:8d:f8:7c:9e:94:75:04:2a:a9:
81:cf:a1:e8:76:b6:1a:c7:40:78:5b:eb:63:cc:70:
32:b0:94:ce:73:52:9a:51:14:d5:4b:92:b6:9c:bc:
3a:3d:40:d8:09:46:ff:54:fa:67:e4:9a:a4:cb:08:
d5:84:47:bc:8d:13:5a:32:5a:b3:9e:7c:09:9e:75:
b8:3f:cb:16:52:5e:11:cb:17:60:4d:25:d8:65:6f:
10:84:9e:8d:27:0e:22:34:ad:b6:5c:7d:f3:e5:80:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:E6:A5:9C:3E:40:15:58:C6:05:60:DD:E1:1F:90:AB:8D:B2:4C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/jlPmpZw-QBVYxgVg3eEfkKuNskw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.43.0/24
37.32.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f4:2e:87:44:3e:3f:0d:49:9b:6e:47:c4:d0:43:06:e9:af:
42:ba:11:34:93:66:bf:5b:c7:5c:22:30:19:1d:a9:76:80:77:
79:de:fb:0c:5d:5d:97:f0:cd:1c:68:09:4c:71:f7:60:f0:46:
64:55:bd:a6:d9:06:67:32:a9:5d:81:39:1b:24:96:17:54:10:
0c:92:9c:62:ef:20:44:c0:ad:61:d8:5a:fa:3a:bc:ce:1c:c1:
02:02:a7:54:85:a7:80:5b:c1:d5:da:61:ce:76:17:1a:0a:1d:
a7:fa:62:d3:38:3c:fa:e6:16:e8:3a:01:6f:45:95:ae:ff:a7:
1e:f3:69:5e:70:67:d2:bb:0f:fa:83:d7:c1:34:f3:b8:c2:6e:
f2:53:62:49:d1:41:f5:a4:43:2b:2d:31:c2:13:9e:5d:0f:54:
51:1f:2d:81:33:5b:27:e4:10:a6:a0:6a:7c:65:ad:0a:88:8b:
e3:3e:c4:3a:72:d9:1a:3e:08:13:09:2d:c5:78:5c:f6:f3:84:
59:24:e2:71:00:31:27:e4:d1:6e:ce:e5:80:e4:9f:6a:22:8c:
3e:d0:48:a0:3b:f2:6f:19:58:01:98:d5:f0:f5:9e:9e:c1:f3:
bb:fc:ae:e4:92:1b:ec:c3:59:4e:18:08:22:c6:8b:6f:28:fa:
25:00:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:28:29 2025 by rpki-client