Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/xrOe5MGh-m_RJkRPFJO2calxQDY.roa
File: xrOe5MGh-m_RJkRPFJO2calxQDY.roa (raw, json)
Hash identifier: ceMfnSJpgwiQ3/fZq4z1K06sd7GssNaQo8adrLIe0VM=
Subject key identifier: C6:B3:9E:E4:C1:A1:FA:6F:D1:26:44:4F:14:93:B6:71:A9:71:40:36
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 029B34
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/xrOe5MGh-m_RJkRPFJO2calxQDY.roa
Signing time: Wed 02 Feb 2022 12:46:12 +0000
ROA not before: Wed 02 Feb 2022 12:46:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57675
IP address blocks: 37.32.77.0/24 maxlen: 24
37.32.78.0/24 maxlen: 24
37.32.76.0/24 maxlen: 24
2a0f:1300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170804 (0x29b34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Feb 2 12:46:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6b39ee4c1a1fa6fd126444f1493b671a9714036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:5b:60:a1:da:67:46:5b:16:d1:9d:7c:f0:
f4:5b:3f:82:cf:a7:aa:94:2f:2d:f3:52:9b:84:20:
fc:c7:1f:d4:6f:e8:6b:8e:3a:d3:79:61:6e:ad:e6:
be:c0:bf:a8:09:bf:4b:86:bf:92:aa:53:23:0f:6a:
d4:ef:24:70:cc:9e:9c:8f:70:c9:af:5c:74:05:42:
02:92:f8:a3:f6:1c:d3:60:b4:56:ba:d6:b0:e0:5c:
17:d7:e8:44:de:12:6b:9d:bd:10:5b:4f:1e:30:51:
76:7c:19:03:29:a9:5d:44:d5:95:52:98:58:24:14:
30:8e:b9:3c:1c:1a:f4:03:cc:7b:72:e1:71:57:42:
76:6c:55:f9:1c:4b:7b:ce:05:a0:af:f0:e3:82:fd:
e6:07:83:d5:25:53:35:9f:9d:f4:eb:3f:0d:05:ed:
7a:31:b5:6c:5a:06:7e:65:97:1c:27:01:d8:ab:90:
fc:d8:a4:55:d3:06:a8:ec:70:75:c9:c7:df:1f:22:
af:d6:d0:7c:91:48:26:87:99:dd:16:34:95:4b:22:
91:81:1c:be:28:ca:87:a0:d9:69:51:2e:dc:d7:25:
9d:6f:36:38:63:1b:02:86:a7:1c:c1:46:0c:80:0a:
94:40:f7:ff:9d:4b:4b:22:9f:c8:35:34:17:31:50:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B3:9E:E4:C1:A1:FA:6F:D1:26:44:4F:14:93:B6:71:A9:71:40:36
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/xrOe5MGh-m_RJkRPFJO2calxQDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.76.0-37.32.78.255
IPv6:
2a0f:1300::/29
Signature Algorithm: sha256WithRSAEncryption
7b:de:8e:d9:69:5d:a6:14:77:ad:9e:0e:4f:40:23:57:84:1e:
94:cc:8c:1e:dd:ac:25:b9:58:d5:c4:ec:40:ee:a8:1b:22:4a:
0c:fb:f1:66:29:29:50:0b:9b:39:52:32:09:6d:71:ad:1d:26:
ed:b6:01:d4:c4:dd:52:93:b1:16:77:09:0d:c7:06:0c:13:2d:
c4:f8:64:dd:30:31:a4:b5:83:45:0d:89:76:04:c2:11:18:e0:
df:ab:42:6a:2c:2a:0c:8f:ff:90:38:33:43:9c:2d:30:a6:fa:
f9:87:8a:8d:85:b2:71:c0:f8:c4:28:30:86:33:5d:00:f9:bd:
90:5c:5c:d7:44:d1:18:a3:49:da:1a:71:c9:33:da:96:15:bf:
23:f4:b6:6e:07:da:87:96:c3:86:e2:cc:71:82:41:f8:1c:54:
b0:74:94:cc:2f:8c:fb:06:9f:04:80:cb:59:50:3a:5d:48:48:
5d:94:59:f6:4d:98:1c:e3:45:67:88:70:51:9d:68:e5:3b:b6:
7d:ba:24:c6:dc:9a:d6:50:4e:ac:1d:00:a0:f5:aa:1f:c1:d5:
49:ca:da:c8:23:7a:7e:1f:b0:ad:b4:43:4e:f9:67:52:73:5e:
2b:9b:01:fc:ed:44:56:cf:90:37:f3:84:0b:e0:65:92:d4:36:
b6:8e:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:54 2025 by rpki-client