Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/O5E8Ibitg49ZpdiKLT83t-LdHYM.roa
File: O5E8Ibitg49ZpdiKLT83t-LdHYM.roa (raw, json)
Hash identifier: Ub/6lvkKDEsxbsPah6gcqCy3VxQ8JpQLb/5mnGyWi0U=
Subject key identifier: 3B:91:3C:21:B8:AD:83:8F:59:A5:D8:8A:2D:3F:37:B7:E2:DD:1D:83
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 018573CCFB220364428A563BE2E849E3E6A4
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/O5E8Ibitg49ZpdiKLT83t-LdHYM.roa
Signing time: Mon 02 Jan 2023 18:44:51 +0000
ROA not before: Mon 02 Jan 2023 18:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47292
IP address blocks: 37.157.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cc:fb:22:03:64:42:8a:56:3b:e2:e8:49:e3:e6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jan 2 18:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b913c21b8ad838f59a5d88a2d3f37b7e2dd1d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:59:ca:8e:a8:e1:3a:a2:30:33:cd:b0:f1:
f6:19:bb:5b:af:68:96:ed:84:e9:e9:3c:94:7d:f2:
f0:51:d3:af:8f:8e:32:a9:9b:e0:ba:90:0f:2d:cf:
8a:e4:26:57:d8:52:4a:6b:81:76:77:aa:e8:05:c9:
c4:71:65:26:d7:2b:01:d0:37:ec:3f:bb:0f:e3:36:
df:14:63:4f:6a:15:bc:c7:7b:51:de:1d:8a:3b:23:
17:b3:55:48:25:ec:bd:d0:c1:43:a4:fc:d8:04:86:
b3:f1:35:e2:20:40:89:a4:30:a9:6a:90:84:2c:3e:
87:83:71:07:79:5c:48:c1:f5:78:66:fa:3f:d7:eb:
e5:6e:9f:b3:95:8f:e0:82:62:c7:3c:4e:43:a1:f9:
e6:6a:49:cb:eb:12:dc:8f:62:c6:0f:97:8d:11:48:
4a:bc:3e:0b:66:c0:6b:e7:4e:db:e2:cb:36:e4:f8:
a8:37:5c:f5:f3:15:ff:d6:dc:87:35:8c:c8:02:8c:
18:16:35:21:8e:4b:35:db:50:36:d1:e9:d4:84:6b:
5a:49:60:88:ad:33:a2:26:2e:35:b6:26:52:e9:f3:
40:57:47:89:48:35:53:65:70:9c:29:1d:72:2c:10:
c8:2d:87:7b:53:e3:cb:b6:56:43:a7:80:9a:44:06:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:3C:21:B8:AD:83:8F:59:A5:D8:8A:2D:3F:37:B7:E2:DD:1D:83
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/O5E8Ibitg49ZpdiKLT83t-LdHYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7a:7e:5c:ac:62:fe:06:eb:40:9f:06:0f:8f:4c:96:cf:cf:
58:52:cd:84:6b:ad:66:47:db:8d:99:79:b3:e0:d0:64:7c:a4:
cd:b7:3c:71:02:ca:a2:71:fc:ba:3c:3f:2f:c8:d0:24:3b:8a:
5f:fa:fd:6d:1d:da:cf:0b:00:1c:dc:36:3e:ad:e2:57:79:85:
e1:1f:1b:98:42:b6:20:4c:e3:8e:a5:7d:99:48:7f:ae:d1:e8:
19:e0:32:51:0e:40:b4:cb:57:99:24:ff:3f:14:0b:af:7d:c6:
31:1b:f0:37:0d:77:0d:2b:e3:9b:66:82:3f:d6:2a:63:1e:33:
7d:75:69:74:61:de:d9:0e:79:0a:bd:e0:fe:d5:4c:03:7d:c1:
0b:db:53:97:14:49:ea:f7:b8:d8:67:70:0e:0c:3c:95:75:52:
05:1c:ad:17:64:b3:28:49:7c:bc:11:ab:ee:7c:09:f3:d7:6e:
3f:b7:b6:7f:01:f7:c5:1a:54:82:48:e1:b3:72:ae:73:0b:6b:
c4:4b:6b:8b:0b:9a:16:b2:c6:88:b3:60:8b:a8:c6:3e:d7:ff:
7b:c5:94:09:f4:20:f2:74:24:5e:23:6c:21:75:22:bd:68:0d:
dd:57:10:db:52:2c:4f:21:e2:bc:bc:11:9e:95:fb:41:fe:b7:
59:8d:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:52 2025 by rpki-client