Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/rbH9xhVjUCc8W0EAHebc-qAKWBY.roa
File: rbH9xhVjUCc8W0EAHebc-qAKWBY.roa (raw, json)
Hash identifier: JZMXTVrgrQEoZROQ5dLX8qjBMWQBc2KRuigqeN59LXY=
Subject key identifier: AD:B1:FD:C6:15:63:50:27:3C:5B:41:00:1D:E6:DC:FA:A0:0A:58:16
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 01888CE7A6A0514A1B5403C7B04AA2DCCE88
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/rbH9xhVjUCc8W0EAHebc-qAKWBY.roa
Signing time: Mon 05 Jun 2023 18:52:51 +0000
ROA not before: Mon 05 Jun 2023 18:52:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 37.143.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:e7:a6:a0:51:4a:1b:54:03:c7:b0:4a:a2:dc:ce:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jun 5 18:52:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adb1fdc6156350273c5b41001de6dcfaa00a5816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:67:5e:3d:06:b6:d3:a8:be:11:eb:c7:24:
49:e9:fc:51:2c:a9:1b:20:62:41:19:22:68:2c:f6:
3c:dd:99:89:5b:d9:bb:74:e2:44:18:88:c6:f0:8e:
e0:e2:d8:e6:4b:bc:27:71:67:40:7c:6a:15:34:e1:
16:9b:1d:94:41:b5:cb:a4:39:a6:ec:96:6f:63:76:
30:42:37:1b:4f:1b:36:06:6e:e9:46:41:5d:8b:95:
b8:54:2a:aa:0e:bc:84:2d:4b:19:6e:94:28:c0:8a:
39:56:50:dc:b4:e3:c4:06:be:24:39:0a:1e:cb:e6:
7e:84:57:de:be:ce:fb:e2:fd:ff:1c:f0:a9:1e:eb:
c6:2a:99:0b:4a:97:c1:22:d6:53:e6:5a:99:4a:21:
ae:98:14:47:3d:c2:1e:06:93:18:dc:a5:8e:2f:be:
47:fd:28:25:a9:96:23:bc:bb:e1:c5:54:9c:d6:81:
76:9b:e3:d1:f1:8e:bc:47:63:a4:aa:64:42:c5:a1:
d3:56:a9:fb:69:a8:70:2e:54:e9:bf:6d:21:d8:a6:
da:c8:e1:b6:8b:be:30:4f:eb:af:c7:61:e3:3c:0b:
7c:87:fd:80:7a:75:50:96:9f:fe:8c:3b:2d:82:c8:
02:e5:37:11:e3:68:21:d2:69:6f:23:5e:7b:2e:23:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:FD:C6:15:63:50:27:3C:5B:41:00:1D:E6:DC:FA:A0:0A:58:16
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/rbH9xhVjUCc8W0EAHebc-qAKWBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
79:8a:c5:88:1b:ed:7b:ae:a4:f2:2b:94:70:6e:9c:da:19:c4:
1a:da:3d:56:4d:ff:74:b0:5b:b4:eb:3f:ff:95:ba:08:48:41:
f3:23:a1:a8:fd:01:b0:ec:71:c3:c4:3c:aa:ab:34:0a:58:d6:
e3:dd:b0:8d:66:f2:14:1b:c6:66:36:89:02:ea:e0:69:27:76:
7b:46:fa:ed:6f:93:de:75:75:31:07:4c:b7:44:7b:c8:fd:b5:
8d:1d:b0:4e:b5:cc:7e:b2:f4:54:15:93:a9:f6:8b:cf:a3:a5:
61:8e:35:8b:f2:08:b6:94:4d:ce:d2:61:b7:6d:2b:f3:db:61:
d7:88:99:83:20:a4:b6:2e:b5:53:5e:b3:21:b2:ad:df:a0:89:
27:41:05:04:d0:e9:54:07:cf:a1:d3:29:c4:e1:cc:79:ee:5d:
93:8b:54:39:f2:64:39:ae:72:2c:34:e2:75:d0:c0:e3:54:1b:
2b:3c:d4:0e:5b:2e:75:80:ba:50:ee:de:17:d3:2f:a9:08:f4:
ef:02:6f:80:1d:cd:9a:47:91:59:7a:16:42:2c:cb:99:79:ae:
3d:71:3f:8b:70:c2:ef:52:73:23:e7:f5:b1:70:c8:d7:dd:dd:
0c:55:3e:13:00:c9:9a:66:2f:8d:1e:fe:13:ce:ff:a2:ad:e7:
9c:e9:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:11 2025 by rpki-client