Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/PR-eu9sNr_j-pcjU6JkDobjMkI4.roa
File: PR-eu9sNr_j-pcjU6JkDobjMkI4.roa (raw, json)
Hash identifier: RcZlWPV4Qdvx1EBd+YfL8wsWdE2oMq2HU1fG0r9Zpkk=
Subject key identifier: 3D:1F:9E:BB:DB:0D:AF:F8:FE:A5:C8:D4:E8:99:03:A1:B8:CC:90:8E
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 018BA8A1C6FA1764ED6BA6F14AF862733EAB
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/PR-eu9sNr_j-pcjU6JkDobjMkI4.roa
Signing time: Tue 07 Nov 2023 07:14:16 +0000
ROA not before: Tue 07 Nov 2023 07:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.143.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:a1:c6:fa:17:64:ed:6b:a6:f1:4a:f8:62:73:3e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Nov 7 07:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d1f9ebbdb0daff8fea5c8d4e89903a1b8cc908e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:7b:ae:23:97:06:bd:50:93:a6:fe:36:de:
e9:a8:c7:20:89:c3:59:b5:d5:cc:21:97:0b:7c:11:
97:36:d7:a2:cb:c1:c4:4c:9c:3b:71:e4:3d:91:df:
09:27:61:ec:e9:63:47:a4:89:9a:36:92:a6:e2:6e:
ca:a9:cb:9c:8a:42:39:70:b1:92:7a:fd:63:c3:65:
92:4e:bc:0a:dd:d1:4e:bd:ff:09:75:2f:85:00:18:
66:7d:e8:1e:ac:02:f1:5d:77:27:01:74:62:70:31:
ee:21:06:07:82:7f:9d:76:c2:5c:92:a7:38:26:68:
2f:e7:e0:a9:16:a6:34:1b:08:2f:92:08:25:bc:18:
e3:e3:bc:d7:a1:e1:84:24:b0:27:fb:ab:75:08:e6:
b5:55:e6:11:a3:5b:08:50:74:db:c3:01:98:cd:a5:
78:60:c3:9a:74:54:03:cd:60:90:91:90:2d:3b:ee:
4d:83:ce:a9:f5:a6:64:91:bf:d9:be:73:84:57:c4:
5a:62:83:6c:d2:72:9f:e8:02:5d:5a:60:3d:3e:e1:
06:a5:f0:f6:55:e0:92:36:f4:5a:51:68:cf:12:fe:
75:31:a6:65:31:8b:1c:dc:28:06:14:24:25:d8:0e:
3e:79:df:cd:31:1d:b8:54:f9:a2:b3:1f:ac:87:dd:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1F:9E:BB:DB:0D:AF:F8:FE:A5:C8:D4:E8:99:03:A1:B8:CC:90:8E
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/PR-eu9sNr_j-pcjU6JkDobjMkI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.4.0/22
Signature Algorithm: sha256WithRSAEncryption
05:df:34:a4:5a:6c:4f:92:36:8f:2a:d3:21:e5:98:fe:68:67:
e7:87:10:ca:fc:97:4e:5c:57:d3:e2:5c:f8:74:9e:1a:5f:b3:
88:d3:5e:7a:da:56:f1:8d:fe:6e:07:be:c4:55:da:85:2d:f6:
6c:92:9d:d0:cb:d8:92:3d:e3:12:91:bf:e5:53:ec:62:03:b7:
1f:51:3f:ec:b9:0f:f5:26:26:3b:f8:43:1d:36:23:24:34:b8:
94:40:7b:09:2d:f7:4e:e8:4f:27:89:e6:87:3b:ea:38:c8:62:
ac:c4:78:66:c5:23:95:60:d8:d1:96:64:f1:0e:9e:1a:70:68:
a2:5d:21:07:5f:38:be:5a:06:3d:73:04:8e:6d:dc:f2:a9:2a:
ae:19:f9:27:b2:47:24:9e:01:18:01:3a:23:ba:27:d6:7a:fa:
3d:98:e5:fe:b9:b9:20:c8:73:f1:c6:65:1c:d2:fd:9b:0b:0f:
b7:99:9e:f4:28:23:f9:d3:a3:35:aa:59:12:fa:91:2b:1d:80:
ae:c9:62:0d:3d:ae:dc:5f:89:bf:4e:c6:67:15:d2:d5:00:a9:
86:ed:37:52:ce:91:58:61:6e:10:6a:ae:2c:49:0b:2c:f2:5c:
bb:60:35:bb:3f:4d:03:f9:22:6b:95:e3:ba:91:8a:92:0a:5a:
e7:97:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:00 2025 by rpki-client