Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/R6FgHy_qme54l6OciIzT9b5i3oY.roa
File: R6FgHy_qme54l6OciIzT9b5i3oY.roa (raw, json)
Hash identifier: ZMqnceqKC3lim6o8dvpsB+sVab60WjW708sGsgX4aGM=
Subject key identifier: 47:A1:60:1F:2F:EA:99:EE:78:97:A3:9C:88:8C:D3:F5:BE:62:DE:86
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 01836A0EA99379750FC2012484F891D03E89
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/R6FgHy_qme54l6OciIzT9b5i3oY.roa
Signing time: Fri 23 Sep 2022 11:14:49 +0000
ROA not before: Fri 23 Sep 2022 11:14:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47292
IP address blocks: 37.157.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:0e:a9:93:79:75:0f:c2:01:24:84:f8:91:d0:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Sep 23 11:14:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47a1601f2fea99ee7897a39c888cd3f5be62de86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:a3:81:12:24:08:cf:9c:a0:be:ef:da:3d:
8d:4c:cb:e3:85:18:41:46:d4:a2:5c:b4:50:b8:3d:
78:bf:6d:82:c7:8b:45:b7:db:88:e8:80:68:1c:24:
62:a6:4f:b2:48:5e:69:d1:fd:d5:ce:b1:fa:2d:6a:
dd:c0:3e:fa:7b:68:dd:d3:65:00:87:fa:36:9c:68:
e6:35:50:ad:bd:2a:c0:7e:8c:86:d8:1a:48:31:ee:
26:e6:8a:5d:b8:39:b0:4e:62:81:c2:0e:c6:17:4b:
4b:af:eb:7d:1b:da:3d:15:d7:21:8e:1c:a2:21:15:
24:40:4e:48:05:91:b6:21:e4:22:7e:2c:e0:b8:8d:
47:03:5a:59:46:a3:ef:81:42:d7:5a:7f:12:b9:17:
70:51:ab:a6:10:e2:d6:64:1b:4a:46:6f:ce:e9:82:
14:46:af:e9:35:7e:85:11:27:c0:b3:7f:67:6a:30:
81:5a:14:21:64:65:d4:cd:ce:b3:d6:11:c2:79:da:
75:00:cd:b8:c8:44:f5:d4:09:a8:ec:3b:d7:45:c1:
f4:3a:57:ee:f8:cd:36:08:f3:99:da:39:14:2b:8f:
cc:df:bd:1e:43:77:53:06:51:79:06:20:73:7d:4a:
be:97:b0:aa:02:52:a0:99:ae:bb:76:ca:3a:16:78:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A1:60:1F:2F:EA:99:EE:78:97:A3:9C:88:8C:D3:F5:BE:62:DE:86
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/R6FgHy_qme54l6OciIzT9b5i3oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7f:6c:3c:41:bc:95:df:0b:73:36:96:6a:7d:57:fd:2c:0f:
25:33:a1:5b:30:83:03:5f:8a:63:fc:2b:50:c5:d0:c8:e8:c8:
8a:28:a5:ab:d7:48:63:03:b1:f4:2a:5a:15:fb:b8:51:77:12:
df:ac:6c:57:bf:e9:e5:fe:da:de:8b:30:a7:c3:86:01:fd:27:
89:46:20:04:81:f9:e4:53:88:26:d7:4c:7d:b9:bc:69:02:77:
38:6d:68:4a:f4:0b:ae:42:f2:52:85:7f:df:aa:86:98:78:53:
e4:d0:43:8f:31:0c:a5:1e:c5:32:fb:a2:19:51:09:f4:4c:0f:
1c:b7:31:52:c2:c0:a8:3e:52:ac:6d:22:41:ac:ef:ac:cc:9c:
25:69:2c:3e:60:a2:15:c7:f0:3b:cc:30:30:b2:50:6e:01:12:
73:9c:25:a8:a3:91:0c:a5:a7:c1:30:6e:c2:69:a5:88:0d:45:
1c:e8:e6:54:61:a9:a6:de:ac:0d:98:6f:3a:40:b2:a4:fe:0e:
80:b4:e0:2f:0f:6d:82:5c:52:bc:92:49:73:ef:73:df:12:c6:
e2:e3:a9:07:3e:f3:99:11:f9:33:7e:2a:0e:e1:34:4e:a5:7c:
07:47:73:e2:b5:07:7e:8f:46:17:a4:f5:ac:60:6e:22:98:02:
69:5e:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:02 2025 by rpki-client