Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZukJ3tPdjQFR0IVcT2w2c-xyDOQ.roa
File: ZukJ3tPdjQFR0IVcT2w2c-xyDOQ.roa (raw, json)
Hash identifier: WSddpqlMSKU/OTTe2uuA4T5uaHyVoTmpCIKWT4ymOxo=
Subject key identifier: 66:E9:09:DE:D3:DD:8D:01:51:D0:85:5C:4F:6C:36:73:EC:72:0C:E4
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0181D71ECB846C3115902E7FBDC0D78C4B1C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZukJ3tPdjQFR0IVcT2w2c-xyDOQ.roa
Signing time: Thu 07 Jul 2022 05:25:28 +0000
ROA not before: Thu 07 Jul 2022 05:25:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15723
IP address blocks: 37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.200.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:1e:cb:84:6c:31:15:90:2e:7f:bd:c0:d7:8c:4b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jul 7 05:25:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66e909ded3dd8d0151d0855c4f6c3673ec720ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:74:ba:08:ce:c6:a4:f1:12:2b:0a:14:d9:
fd:62:a8:ac:72:47:07:fb:c8:9d:7f:d9:b4:ab:f8:
e3:97:d6:09:4c:4b:f4:16:54:be:eb:81:51:54:91:
4e:f8:3b:24:78:a2:8d:c8:d8:84:40:cb:ad:d4:54:
b2:59:9d:85:28:f4:ad:8c:64:30:d4:73:da:5c:72:
ef:ac:af:bc:39:d4:fb:be:bc:03:44:47:55:5c:29:
f8:1b:74:3e:4b:d2:67:83:c4:83:aa:99:69:ef:23:
e7:57:e0:51:dc:81:f6:6b:98:b3:60:81:30:67:0f:
0a:65:61:67:bc:06:db:e1:fb:51:2b:08:29:2f:ea:
e8:35:54:9e:4d:14:af:05:e2:ec:9a:1e:3e:56:3d:
58:e7:4b:6d:27:37:3c:0c:9e:17:aa:ec:f1:1c:74:
e2:d8:0a:f9:4d:59:52:34:e4:dc:14:69:13:bd:c7:
a6:dc:a5:79:f9:db:25:08:43:b0:85:4e:2c:02:f5:
cb:76:86:ba:d7:20:3a:b8:43:27:27:4e:7e:4c:ca:
b4:1a:51:3d:2c:85:d1:48:2b:9b:e4:d7:e2:38:e7:
96:e8:61:82:13:b0:cc:e9:d2:e0:4c:b3:5d:21:8e:
31:47:d0:60:c7:bf:2a:a8:9b:4e:2d:5d:61:1c:63:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:09:DE:D3:DD:8D:01:51:D0:85:5C:4F:6C:36:73:EC:72:0C:E4
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZukJ3tPdjQFR0IVcT2w2c-xyDOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:57:82:28:78:97:61:23:2c:e9:c8:60:b5:3f:33:43:3d:54:
b9:ba:5a:d4:08:a8:95:f7:08:07:de:b2:c1:d6:20:ab:5d:5f:
9a:3d:b8:18:10:20:69:f1:04:29:5d:50:d1:7e:1a:4a:83:ca:
a6:67:88:ee:84:c4:02:0d:69:78:36:ef:61:35:c1:a3:b5:6e:
b7:0f:e4:1a:fc:c0:28:af:58:7b:f0:e5:7f:ac:0c:09:47:d2:
65:c5:83:b3:e7:0a:51:0d:a2:5b:60:d6:9f:88:b6:07:76:ee:
4a:8e:96:34:20:26:91:98:7e:36:03:bf:11:f3:e6:5b:4f:40:
5b:f7:63:5c:ab:ba:c9:91:78:b1:ee:d8:97:ba:5b:1a:66:2e:
cc:44:2a:b5:ba:e2:a8:25:23:b3:c9:50:b8:30:55:07:5e:42:
09:e1:0e:b1:6d:56:f7:a0:2c:30:3f:56:aa:bd:54:d7:5a:3e:
dd:e6:b1:b2:9e:47:53:c7:b7:93:b1:90:9c:f1:40:c4:de:3e:
24:50:d8:07:d2:f9:31:bf:f6:b6:47:18:36:ff:78:e8:a1:f9:
6d:aa:7b:36:e5:33:44:f6:35:26:8a:a4:4c:18:d9:6f:b5:81:
8a:01:56:90:54:35:39:c6:87:ed:5d:33:a4:92:7f:d5:f9:e8:
8b:49:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:50 2025 by rpki-client