Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4RTm22nAwbO9DllnlzmbiLgW4kc.roa
File: 4RTm22nAwbO9DllnlzmbiLgW4kc.roa (raw, json)
Hash identifier: zzPFbTc5pkIyCEhsiL/SSP3K3+YWDivU8a34Ef6M/J0=
Subject key identifier: E1:14:E6:DB:69:C0:C1:B3:BD:0E:59:67:97:39:9B:88:B8:16:E2:47
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F4177E7982161D7FE29369BFBC05
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4RTm22nAwbO9DllnlzmbiLgW4kc.roa
Signing time: Sun 01 Jan 2023 19:35:27 +0000
ROA not before: Sun 01 Jan 2023 19:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198728
IP address blocks: 37.16.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f4:17:7e:79:82:16:1d:7f:e2:93:69:bf:bc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e114e6db69c0c1b3bd0e596797399b88b816e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:d5:c7:a7:71:45:c5:21:c6:6c:94:a7:bc:
4b:b9:3c:db:32:54:2e:b4:22:94:d3:4a:fc:70:e0:
7b:78:35:d1:37:6d:35:93:a3:57:b9:5a:71:46:e5:
88:a9:33:c4:71:84:03:65:07:d9:f7:c2:80:6a:a1:
09:b7:8d:27:91:e5:d0:13:74:7f:bc:2b:2c:69:b9:
b9:fd:14:ee:09:2c:d1:be:8a:88:72:78:a5:a6:96:
78:41:e2:78:28:ae:fe:39:42:76:de:e0:9c:d3:5b:
98:e3:93:d8:3c:a0:9f:b3:6e:80:26:31:f1:71:b9:
40:e2:c2:10:89:8f:93:56:f4:91:1c:7b:51:60:49:
43:74:f4:6c:e1:55:37:f6:62:76:25:ee:5f:46:85:
71:c3:58:97:d0:e4:39:85:ac:e4:03:19:81:c5:79:
c4:fa:9c:dd:e4:ee:b1:6a:01:d1:9e:2d:ca:80:73:
96:df:b7:dc:40:fa:a4:6f:b9:51:67:d8:98:f2:d7:
97:70:11:d9:27:12:6c:9f:3a:03:f0:59:67:a4:c7:
45:24:de:b0:f1:36:b4:40:6b:b6:fc:46:90:c3:3e:
85:b8:1a:e2:69:14:77:af:48:57:52:d6:f5:47:6b:
78:39:df:e4:af:43:3c:4d:f7:0e:e4:c3:5a:44:a7:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:E6:DB:69:C0:C1:B3:BD:0E:59:67:97:39:9B:88:B8:16:E2:47
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4RTm22nAwbO9DllnlzmbiLgW4kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0b:7e:df:01:87:d7:4f:fe:e9:65:23:e1:13:bf:d7:70:a8:
27:2b:af:88:cd:c4:a0:b7:28:26:90:df:8c:77:47:78:94:e3:
6a:af:48:ee:ed:ec:8a:35:9c:b8:42:99:08:49:67:09:5a:fa:
e7:38:67:da:16:f3:dc:bb:d6:0a:76:4c:89:9d:07:e6:f7:12:
f4:97:42:44:9b:5b:53:81:4d:e8:6d:3d:3b:ff:3a:0f:ae:65:
4f:b2:05:57:2e:e2:c2:19:5f:99:61:33:81:a6:c8:e9:d0:92:
24:ff:8f:bb:04:f0:a0:1a:1b:cd:7a:9b:f1:c2:2a:87:1d:74:
1b:a5:66:e3:da:2f:bd:e8:5a:64:9a:1b:5c:77:03:d2:b3:c6:
a1:81:3c:5b:49:f4:ba:4d:d4:b4:8b:03:85:fa:b1:bd:f2:fd:
9e:e3:db:c0:34:83:63:3f:de:6c:33:fe:ca:ce:5d:fb:72:7b:
8a:9f:b1:d2:ad:4e:a1:28:f7:6c:fd:3d:98:cf:c0:39:fb:70:
1c:f3:8c:3e:65:8b:5d:62:13:6b:82:f7:51:43:f7:b5:ed:9f:
e0:a3:2f:3a:96:f8:f6:23:d9:64:96:ce:2f:d6:77:ba:b1:03:
36:36:1e:11:ba:5b:b4:d4:ef:97:52:d3:6f:4e:97:62:32:a8:
d1:63:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:56 2025 by rpki-client