Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/ECbuJutxN2EKSpLEG76ZRP3P2go.roa
File: ECbuJutxN2EKSpLEG76ZRP3P2go.roa (raw, json)
Hash identifier: mVyySLBevw4twH+kEjQ5XGm/6Oe5b9YMkAXSkrfIgB0=
Subject key identifier: 10:26:EE:26:EB:71:37:61:0A:4A:92:C4:1B:BE:99:44:FD:CF:DA:0A
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 0D843435
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/ECbuJutxN2EKSpLEG76ZRP3P2go.roa
Signing time: Sat 01 Jan 2022 15:03:58 +0000
ROA not before: Sat 01 Jan 2022 15:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200083
IP address blocks: 62.182.16.0/21 maxlen: 21
185.41.8.0/22 maxlen: 22
2a04:84c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226767925 (0xd843435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jan 1 15:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1026ee26eb7137610a4a92c41bbe9944fdcfda0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:90:26:17:68:d3:7c:e7:b8:1e:5a:e4:c4:
d9:4c:ef:bf:3c:02:29:a0:69:3a:93:1a:2c:a0:48:
9e:49:85:7f:3b:2e:9d:c0:b0:bf:40:6e:89:41:cb:
23:37:61:e6:bf:e5:52:36:39:b0:fe:db:c3:76:2a:
72:61:14:4e:ac:9c:e1:8c:11:ca:d8:e8:81:83:c4:
1a:22:e8:58:c6:4f:98:48:04:94:52:d2:84:17:1d:
75:8f:d3:db:87:e3:ef:a4:46:5c:78:9f:d4:4e:36:
59:da:96:70:e5:40:dc:2f:f6:9d:15:5d:fd:8b:d8:
8c:54:f8:f0:6b:01:5a:f8:63:6f:0c:94:2d:58:7a:
88:77:c3:8a:6d:d1:91:a9:2f:46:3c:31:aa:51:2a:
86:9b:ef:67:25:61:e7:cc:88:bf:34:89:ed:dc:0b:
c7:51:e9:ad:6b:56:49:da:48:24:2d:88:22:d7:bd:
4d:e4:73:19:15:07:35:e5:ae:c4:e1:d9:b0:1b:84:
63:2d:a8:c9:2d:b5:39:56:fa:30:c1:cc:bd:45:c5:
fc:bb:88:2b:ec:32:85:6f:4b:54:ba:fd:65:13:6b:
14:99:15:94:26:f4:22:ab:9a:71:80:2e:af:69:ab:
52:8a:73:b7:d8:6d:85:07:bb:b0:e0:20:fc:05:b0:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:EE:26:EB:71:37:61:0A:4A:92:C4:1B:BE:99:44:FD:CF:DA:0A
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/ECbuJutxN2EKSpLEG76ZRP3P2go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.16.0/21
185.41.8.0/22
IPv6:
2a04:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:29:b8:f4:df:c7:8a:1c:ce:5b:c8:d6:fe:20:e3:c3:74:71:
60:14:a9:7f:41:0d:b7:bb:33:53:48:6a:f6:d7:28:75:2c:dd:
76:9b:c6:fc:6f:5c:3e:40:6a:8f:fa:d9:38:7d:ca:cc:5a:c9:
69:be:cb:b4:78:09:4c:77:30:0d:47:43:20:46:22:33:4c:5c:
f5:0e:20:0f:32:49:41:4f:69:1b:14:e1:30:c3:de:9c:25:65:
65:ad:40:0e:1e:dc:ca:a3:32:b5:15:9d:20:e5:b9:fc:49:77:
33:dd:2d:c4:33:bb:c8:17:58:78:48:66:25:a2:0d:b2:41:c9:
6b:00:f8:4a:f7:31:e5:5c:2a:71:35:5a:e7:a9:95:f6:62:f8:
9f:d1:ab:ba:0a:ae:69:2b:2a:d5:00:51:82:c7:7f:97:49:09:
8e:7c:7c:55:0d:76:44:df:ee:c0:20:04:32:d9:89:18:e2:4b:
dd:41:c5:12:f4:02:2e:ee:cf:c4:26:f5:9c:11:34:1b:c1:ce:
46:d6:57:3c:55:ec:ad:a2:94:2a:94:7f:1a:72:a6:f6:7b:d6:
cc:77:43:c9:33:3d:2c:0c:d9:37:bb:ae:aa:32:c5:ab:7d:70:
df:87:25:7a:e5:b8:58:38:13:d3:b6:f8:c9:a6:2c:5a:9b:7f:
59:ca:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:40 2025 by rpki-client