Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/XIeJRbb7caCu5GkPhH6AK-OLqbM.roa
File: XIeJRbb7caCu5GkPhH6AK-OLqbM.roa (raw, json)
Hash identifier: 6UGndlny14f/iZexHt3UCDc8T/SgQWRFoMRboyvzWms=
Subject key identifier: 5C:87:89:45:B6:FB:71:A0:AE:E4:69:0F:84:7E:80:2B:E3:8B:A9:B3
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 0A487434
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/XIeJRbb7caCu5GkPhH6AK-OLqbM.roa
Signing time: Sat 01 Jan 2022 06:04:49 +0000
ROA not before: Sat 01 Jan 2022 06:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62187
IP address blocks: 37.235.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172520500 (0xa487434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 06:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c878945b6fb71a0aee4690f847e802be38ba9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:a9:bc:af:57:26:2b:5d:53:33:15:de:3e:
06:53:76:1f:90:b4:b8:0d:ac:f3:9d:d7:a5:37:52:
ce:27:13:12:6a:83:a7:eb:d8:82:a1:a1:cd:74:6b:
bc:48:f7:ab:6f:09:cf:d4:28:04:a1:28:5d:a1:3c:
01:6c:d5:2e:13:ea:94:d2:ba:bd:d3:db:41:82:ed:
74:80:4a:ab:d4:d7:d3:a1:63:5a:ef:96:cb:4e:41:
fc:67:66:91:94:09:9b:17:bd:08:d0:f6:e2:39:16:
8d:09:c0:62:9a:89:45:8e:05:00:ab:aa:70:e1:cc:
ff:f4:30:69:e7:89:b3:6d:64:a5:10:6c:3f:4c:f3:
17:d0:b3:02:ff:3e:10:4e:64:f6:18:48:b7:56:95:
7f:2d:a6:0a:7e:0f:92:96:a8:81:8f:27:5c:6c:4e:
66:c4:02:59:22:e1:6f:73:be:69:9e:5f:ac:3c:e5:
6f:18:c2:ca:4b:73:92:18:44:19:cf:32:22:12:e0:
69:8f:62:e3:9a:fa:26:b4:14:48:4e:5c:10:7e:be:
5b:ed:d6:01:ad:ff:8e:e6:3f:e9:b5:5b:20:be:24:
2f:d0:85:8f:9b:80:ed:60:47:0c:63:b4:f2:b9:aa:
9a:7d:d3:ec:53:f7:c2:85:4a:51:39:0c:22:b6:8a:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:89:45:B6:FB:71:A0:AE:E4:69:0F:84:7E:80:2B:E3:8B:A9:B3
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/XIeJRbb7caCu5GkPhH6AK-OLqbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:44:69:31:60:c9:24:47:5a:ba:e7:83:f9:30:33:e7:af:2f:
af:82:e8:a1:b2:be:4c:5d:db:db:50:d5:36:55:03:7c:b2:60:
d2:73:4f:bd:4b:31:45:9c:f2:3c:08:fb:bd:57:0c:b2:58:3f:
be:1c:19:01:40:65:17:d4:fd:e0:3a:4a:e4:c8:60:81:f3:32:
e0:bf:42:aa:f6:ca:fa:6e:a4:b6:7d:af:5a:62:91:04:fc:7e:
63:eb:27:c6:04:aa:b7:29:75:da:d0:b4:20:b0:c1:cd:b2:b1:
ad:53:1e:1b:fa:b4:5f:a8:09:92:bb:7a:fe:c6:9e:97:06:d4:
42:01:57:bd:cd:4b:15:24:20:cb:9b:d5:bb:ce:1d:61:88:da:
d6:86:c1:01:bc:92:ec:fe:f0:93:c0:91:2b:3c:88:0b:9e:15:
4b:59:b5:d1:f4:d3:90:96:31:ad:63:fa:10:29:ce:ff:8f:f9:
e9:e3:8e:1d:96:a1:69:43:ce:9a:7b:d7:ab:f1:c3:a2:26:e3:
8d:bc:87:28:e6:70:e6:e0:e4:ae:e5:0e:c2:30:19:74:b7:da:
5c:6b:12:6b:64:bd:9c:f5:69:d3:d5:19:eb:8a:cb:50:6c:8b:
cc:89:67:f5:fa:d8:8c:de:53:f1:20:85:b1:f9:94:df:02:7f:
48:36:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:17 2025 by rpki-client