Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/X1LD6UEX7G61T2l1nTOyAXj5gt4.roa
File: X1LD6UEX7G61T2l1nTOyAXj5gt4.roa (raw, json)
Hash identifier: SaSfeQCCgjY6zDTAyf8Z1OJZL4vJ7lh3mhdGs+hnIss=
Subject key identifier: 5F:52:C3:E9:41:17:EC:6E:B5:4F:69:75:9D:33:B2:01:78:F9:82:DE
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01876F29C90037223933FCE0732CC5892F4E
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/X1LD6UEX7G61T2l1nTOyAXj5gt4.roa
Signing time: Tue 11 Apr 2023 07:13:42 +0000
ROA not before: Tue 11 Apr 2023 07:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 37.224.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:29:c9:00:37:22:39:33:fc:e0:73:2c:c5:89:2f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Apr 11 07:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f52c3e94117ec6eb54f69759d33b20178f982de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:a2:13:d1:05:7b:cb:1d:e3:cf:de:89:4e:
c0:ba:10:88:32:ee:b7:2e:ff:b7:50:8c:92:3c:d1:
31:a3:03:5a:a2:0a:d6:7f:a4:05:95:38:1c:3d:31:
09:19:73:fc:b8:1a:b2:39:bc:fe:4a:60:c2:6e:fe:
05:0d:57:1c:ee:c9:03:82:f6:ae:e1:96:be:69:6e:
21:5e:f8:81:0d:06:48:9d:0d:d3:87:33:23:03:5f:
0f:60:cb:09:b4:82:b2:2e:63:25:4b:b6:8c:9c:ea:
fc:3c:b1:ed:9c:d3:46:3a:c5:84:d1:63:1a:24:ed:
72:04:47:4b:84:45:47:79:dc:a3:42:5c:5d:85:84:
40:aa:b8:7a:cf:c5:61:98:e7:6f:fd:f7:75:82:74:
bd:d2:65:5b:f8:1b:a7:be:9f:c8:74:05:55:f9:50:
d2:2c:0a:98:02:19:ff:80:63:40:65:6c:49:38:44:
74:01:4d:82:0a:35:5f:81:b1:b9:43:f5:7a:23:6d:
97:45:6e:b4:98:50:2c:c7:a1:9a:7f:44:41:fa:57:
e0:03:3c:be:0b:55:c2:44:92:fb:c0:03:2b:ce:9e:
ae:2a:d4:0b:bb:37:97:27:07:cd:de:e4:b7:34:de:
73:7b:3a:2f:a3:e9:22:84:57:a2:cf:5c:5e:a6:45:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:52:C3:E9:41:17:EC:6E:B5:4F:69:75:9D:33:B2:01:78:F9:82:DE
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/X1LD6UEX7G61T2l1nTOyAXj5gt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.77.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b3:fd:b9:1f:ec:b9:a0:a7:f8:0c:68:85:d1:47:6d:71:ec:
51:59:0b:74:91:c7:97:7e:e1:02:3e:d9:7b:1a:1b:6d:97:38:
bb:4d:bf:d1:e4:52:66:38:42:2f:94:43:69:1b:00:a9:5d:61:
53:d6:d3:35:c8:cf:8c:77:0e:25:09:cc:fd:ec:43:61:ca:cb:
08:49:1e:97:cc:a4:79:aa:92:2c:04:b4:12:52:d1:2c:1c:38:
6e:93:bb:eb:0c:eb:a4:7c:18:32:08:d9:46:1c:a3:87:aa:72:
47:fc:d0:70:a9:6f:a5:57:c9:07:d5:0b:98:8d:ac:49:c1:c9:
2e:6c:b6:b2:21:61:ea:f8:e9:7e:6a:a1:05:cd:c6:be:7c:09:
b5:32:00:9c:a7:96:bb:e5:2d:d1:1c:64:5f:da:da:e5:95:25:
e5:e8:df:45:e4:84:8b:62:80:66:3f:b5:1e:8b:5a:6e:89:31:
79:0a:ac:ad:6e:53:84:36:9a:90:76:87:55:81:ce:78:f8:c2:
d1:c7:40:be:58:9e:36:a7:9d:b6:9b:44:f3:47:10:cf:02:21:
21:a8:1a:4b:a2:82:3e:df:bc:54:65:8e:e5:a6:f6:19:9f:ca:
ca:cd:e6:a7:9f:5a:f7:ec:ee:83:a2:6c:c2:35:c9:46:a5:13:
fd:b0:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:48 2025 by rpki-client