Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kH3Djmp1HKqH6T0vrAj0vivqVVY.roa
File: kH3Djmp1HKqH6T0vrAj0vivqVVY.roa (raw, json)
Hash identifier: L8elC/mlKbG5WJZMx2hN4WHNhCtwl23ERMuBq+dQGlY=
Subject key identifier: 90:7D:C3:8E:6A:75:1C:AA:87:E9:3D:2F:AC:08:F4:BE:2B:EA:55:56
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018BC3F6DD075DA20FD992C5C26B2E47D670
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kH3Djmp1HKqH6T0vrAj0vivqVVY.roa
Signing time: Sun 12 Nov 2023 14:36:57 +0000
ROA not before: Sun 12 Nov 2023 14:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198154
IP address blocks: 37.32.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c3:f6:dd:07:5d:a2:0f:d9:92:c5:c2:6b:2e:47:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 12 14:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=907dc38e6a751caa87e93d2fac08f4be2bea5556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:fd:bf:47:ab:97:e9:4b:20:96:67:77:9a:
7c:a6:c9:04:7a:ba:b3:d6:11:70:1d:d5:21:2b:c0:
90:b7:84:65:f3:1e:d3:6e:9f:c8:ef:9e:87:f0:47:
ab:6d:32:b0:1c:61:a6:c9:6a:3a:db:46:30:2c:ce:
ff:24:98:81:f1:74:35:2a:25:8f:0f:c3:c8:c2:97:
eb:9e:34:c2:51:2d:d9:20:ca:3a:a6:0a:5b:fb:1c:
48:8c:80:63:2e:36:7c:36:16:0a:cc:0b:c4:20:79:
cc:c1:e0:1b:32:2f:4a:07:41:ca:94:ae:f9:2a:11:
7a:ae:77:63:24:09:07:57:bb:d9:c3:16:5f:e0:17:
dd:81:59:d5:94:f9:3e:74:af:1c:65:35:d0:45:52:
6a:a9:ac:97:c2:b2:3d:04:67:63:e5:6c:4e:51:d4:
61:b6:a8:cc:89:3e:e8:4b:ec:6c:9d:b1:36:43:c4:
db:fe:7f:e0:60:0b:7b:40:a6:8d:46:54:37:e1:fc:
7a:ec:17:12:b8:cc:7f:d4:d0:2d:43:6a:91:76:f6:
f7:8e:5b:46:1c:59:cc:54:13:05:d7:21:5e:d0:7c:
dd:03:4a:25:48:92:ba:43:e4:55:b2:d4:be:a0:96:
4b:91:c2:33:f9:4e:06:7f:d0:19:92:69:d0:d8:9f:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7D:C3:8E:6A:75:1C:AA:87:E9:3D:2F:AC:08:F4:BE:2B:EA:55:56
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/kH3Djmp1HKqH6T0vrAj0vivqVVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fe:ec:7f:78:e9:f5:0a:95:92:79:32:6a:29:6e:86:54:3b:
f1:3f:b2:5c:01:8e:54:7c:cd:93:66:0d:78:15:3b:d3:66:9d:
11:23:b2:fd:85:3a:51:ea:58:4c:74:1f:d3:6c:37:92:1b:69:
3e:8f:50:b6:72:e6:a2:47:a7:11:fb:25:22:2c:8c:7c:2e:89:
34:92:3c:5b:15:bd:e8:b8:0f:a4:c0:c3:36:7a:a1:99:0a:13:
7d:73:35:8a:2f:1b:81:e1:ad:3f:19:ed:23:74:a4:5d:a6:6a:
c8:56:2a:28:10:ec:8d:cb:10:af:2c:84:95:2c:b6:c2:ba:15:
b8:6d:a8:b9:11:1b:c8:2f:d7:6f:5f:bc:48:4e:79:20:ef:4f:
1d:ba:4a:65:c4:ba:73:b3:e7:7e:22:90:d9:b8:1b:41:fb:79:
12:e9:ae:1e:d4:66:e0:b9:2a:2a:8c:84:99:b7:97:38:29:9b:
87:67:1b:a3:71:dc:af:12:ca:f7:b4:b0:7c:76:cb:61:c5:39:
61:ba:8d:a7:b4:14:80:e7:d8:fe:3c:a9:0d:f2:e6:76:67:25:
97:99:c4:bd:82:85:fa:25:1a:ae:f7:9c:f8:04:a8:a9:85:96:
e8:a9:cf:eb:e2:5d:5d:84:94:b9:44:2e:dc:3e:b3:02:13:c3:
a9:49:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:09:43 2025 by rpki-client