Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/AVQrKqSYzQBsm0ph8hVX9Lo0f-Y.roa
File: AVQrKqSYzQBsm0ph8hVX9Lo0f-Y.roa (raw, json)
Hash identifier: AUc427Vemz2+R5abxAz2ZQnxRA/MjoXY/TcFolmCRzE=
Subject key identifier: 01:54:2B:2A:A4:98:CD:00:6C:9B:4A:61:F2:15:57:F4:BA:34:7F:E6
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 01032804
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/AVQrKqSYzQBsm0ph8hVX9Lo0f-Y.roa
Signing time: Wed 06 Apr 2022 08:31:42 +0000
ROA not before: Wed 06 Apr 2022 08:31:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.252.111.0/24 maxlen: 24
185.19.39.0/24 maxlen: 24
37.1.166.0/23 maxlen: 24
185.19.38.0/24 maxlen: 24
185.19.37.0/24 maxlen: 24
185.19.36.0/24 maxlen: 24
185.19.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16984068 (0x1032804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Apr 6 08:31:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01542b2aa498cd006c9b4a61f21557f4ba347fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:e4:43:61:d2:32:ed:aa:5f:70:5c:7e:08:
71:52:1f:5f:01:51:80:0b:ba:39:ca:0b:72:b4:ff:
9f:d0:41:9a:ac:ee:dc:9b:01:93:46:bd:49:36:8e:
6d:19:ce:2d:90:61:20:93:2e:1c:be:c7:91:f5:4b:
cc:b2:46:e9:f6:ed:c7:de:14:0d:9d:16:7b:ce:e3:
03:60:9a:32:9d:b0:e6:82:32:99:52:6d:e7:da:c2:
02:27:80:bc:ef:87:e9:61:9a:02:1d:b5:36:73:ee:
8a:e3:97:89:80:ca:cc:c4:41:d8:f1:6f:75:ca:9e:
88:43:de:ea:2a:99:81:63:35:48:c0:9f:4a:99:04:
ef:7d:2d:0d:5b:20:6b:9b:ad:55:c7:ff:e5:d0:04:
e0:b8:e9:98:9d:3b:b0:30:3b:39:32:53:a4:40:ff:
6a:58:8e:c5:d1:5e:99:1c:5b:63:3b:72:24:8c:af:
ae:a0:5d:60:a3:bd:0e:93:1f:61:c5:8d:26:71:6f:
3a:2b:bd:e3:9e:39:22:20:75:c2:3a:07:f0:94:8a:
d9:f6:74:57:9b:e4:c3:89:c3:89:7c:18:df:1d:62:
71:87:52:bb:94:4b:22:cb:9f:0d:a2:5a:c8:32:47:
ed:1e:a0:8a:d1:3b:19:df:11:1e:60:3d:87:3d:b8:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:54:2B:2A:A4:98:CD:00:6C:9B:4A:61:F2:15:57:F4:BA:34:7F:E6
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/AVQrKqSYzQBsm0ph8hVX9Lo0f-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.166.0/23
37.252.111.0/24
185.19.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:6c:8a:c2:0f:6d:78:cc:a7:9f:ec:05:aa:58:fb:99:07:a1:
58:0f:8f:a6:3a:0b:a7:7b:41:23:bc:c3:78:33:b2:d3:88:e1:
1b:26:39:46:7d:87:db:a2:e3:f7:43:67:5a:29:7e:23:64:dd:
f5:97:5d:83:38:58:a4:62:67:df:cd:38:62:79:3f:20:ef:f4:
eb:00:fa:60:0b:00:6a:49:fa:df:2a:2e:60:fe:96:b0:dd:e3:
8c:5f:c2:e7:7a:bf:af:c6:8d:60:42:6f:e8:fe:b4:8e:61:19:
84:a8:d1:90:ed:00:67:0e:c5:d3:6c:50:47:a9:c2:3c:97:a1:
d3:dd:f7:eb:30:c2:59:27:5d:72:45:92:eb:85:8a:26:fb:6d:
68:9e:11:07:62:72:e1:69:fd:d5:77:ee:a4:75:22:c8:0f:45:
dd:99:52:d5:5d:28:99:21:10:57:82:e1:5c:31:cb:d3:2d:58:
5b:d4:e1:18:ea:6f:b3:fa:fe:bc:f0:51:66:43:67:14:40:0e:
60:d0:c7:7e:e4:9c:2a:64:da:ea:b5:23:01:76:a3:c4:fd:61:
eb:85:e6:79:3f:e5:c3:b0:d5:03:fc:e4:9a:9b:85:71:89:e1:
38:c7:30:97:1f:41:30:7b:3c:0c:3e:ad:91:f2:df:49:31:a3:
82:56:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:50 2025 by rpki-client