Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/05d5KyTEGLDNntPVNyGt1rqiOwY.roa
File: 05d5KyTEGLDNntPVNyGt1rqiOwY.roa (raw, json)
Hash identifier: PsUWjv5f9WqyDJUMt1w9txcg3YwCv9yzF0YGdtLmhk8=
Subject key identifier: D3:97:79:2B:24:C4:18:B0:CD:9E:D3:D5:37:21:AD:D6:BA:A2:3B:06
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 01856F799CC610CA50FFF0F8EF340A1B8EF8
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/05d5KyTEGLDNntPVNyGt1rqiOwY.roa
Signing time: Sun 01 Jan 2023 22:35:19 +0000
ROA not before: Sun 01 Jan 2023 22:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57675
IP address blocks: 37.32.64.0/24 maxlen: 24
37.32.70.0/24 maxlen: 24
37.32.68.0/24 maxlen: 24
37.32.69.0/24 maxlen: 24
37.32.66.0/24 maxlen: 24
37.32.67.0/24 maxlen: 24
37.32.71.0/24 maxlen: 24
37.32.65.0/24 maxlen: 24
37.32.77.0/24 maxlen: 24
37.32.76.0/24 maxlen: 24
37.32.73.0/24 maxlen: 24
2a0f:1300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9c:c6:10:ca:50:ff:f0:f8:ef:34:0a:1b:8e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 1 22:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d397792b24c418b0cd9ed3d53721add6baa23b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:4c:62:a2:ab:dd:20:4c:ea:f4:a6:20:ae:
2e:10:12:7c:b8:16:00:17:b3:1b:c8:27:11:8a:40:
7a:58:95:b9:96:19:3a:7a:97:89:98:1e:ee:18:3a:
f8:05:91:72:92:0b:50:24:c1:3f:d0:ce:7b:2f:c1:
ee:6b:8f:1b:2c:e9:c2:d4:34:bd:25:c6:ae:24:e0:
02:37:a4:27:57:33:4b:1c:44:eb:f1:aa:01:0b:5a:
aa:4b:5e:c4:86:c1:04:c4:1f:7f:65:8c:65:72:ab:
f0:0c:40:1a:03:99:1b:b8:1e:ea:e7:d3:6b:12:80:
29:fc:00:d6:39:d8:86:c0:9e:66:12:a8:50:d1:3c:
f4:16:3f:37:6f:66:3a:86:99:32:99:45:11:07:58:
e8:77:60:4f:ca:b2:7f:f1:e7:e1:b8:fb:bf:b3:46:
d1:37:6e:62:91:a8:27:6d:3b:b8:c8:24:7d:e9:93:
0a:de:2b:16:b3:06:9b:52:7a:d8:24:c1:36:23:7a:
4d:54:a9:96:81:31:27:6b:d1:da:e1:6a:f7:14:34:
4c:01:a5:28:e5:d9:4e:1b:81:37:bf:65:0f:62:d0:
5c:63:6f:de:b2:b3:6c:f9:a6:1f:79:d3:ef:22:a0:
af:3a:13:fb:17:84:44:31:30:9f:1c:10:6d:c1:e9:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:79:2B:24:C4:18:B0:CD:9E:D3:D5:37:21:AD:D6:BA:A2:3B:06
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/05d5KyTEGLDNntPVNyGt1rqiOwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.64.0/21
37.32.73.0/24
37.32.76.0/23
IPv6:
2a0f:1300::/29
Signature Algorithm: sha256WithRSAEncryption
91:77:51:7b:57:6e:69:00:d0:6b:c1:6e:91:a4:9e:e9:83:ae:
45:c4:e1:bf:d5:79:67:07:8f:ec:5c:c7:e6:54:bb:58:68:09:
d1:bb:db:72:c6:2b:45:09:49:ca:f4:1f:1d:4f:e3:93:f4:d3:
bb:28:d5:4b:c6:ab:42:eb:83:33:bf:d0:cb:0a:1f:e8:31:6d:
93:25:04:ae:6a:62:61:57:09:1c:5c:cb:b2:a6:99:ab:d5:48:
8d:76:69:81:16:a0:d0:f7:41:a2:28:7b:8a:cf:82:37:14:c0:
67:65:cf:57:38:9a:d3:f5:4c:61:f5:e0:ea:cc:77:c1:f6:8d:
9c:f9:3c:20:62:a4:a6:cd:73:c3:fb:6e:db:fd:58:f5:d7:95:
49:d7:e2:4b:3d:d5:04:b6:44:96:57:55:56:74:77:21:0f:1d:
af:dd:26:c2:ec:fd:f9:90:f7:91:bc:4b:e0:38:9a:6b:c8:7f:
5c:7c:df:0f:58:b4:39:ab:c2:1d:e8:59:bd:ed:7f:09:71:a1:
2c:e0:a1:fd:a3:69:b8:7e:56:c9:83:a7:ca:cc:3b:c3:ef:d5:
1b:b3:20:0e:c1:6a:9d:d0:93:d8:cf:04:04:a3:f9:20:96:61:
fb:97:e7:22:75:2d:6a:14:89:ab:d4:54:b6:b9:46:66:fb:d1:
eb:24:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:20 2025 by rpki-client