Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9EycjGQBnoes4c0XB-_unBES1Mo.roa
File: 9EycjGQBnoes4c0XB-_unBES1Mo.roa (raw, json)
Hash identifier: pCYRdA0apYD15beUnIsO5desb3EdprHF6P1UN0Qbinc=
Subject key identifier: F4:4C:9C:8C:64:01:9E:87:AC:E1:CD:17:07:EF:EE:9C:11:12:D4:CA
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018274DD7CF14746295654041FAF645E0388
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9EycjGQBnoes4c0XB-_unBES1Mo.roa
Signing time: Sat 06 Aug 2022 20:34:08 +0000
ROA not before: Sat 06 Aug 2022 20:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48090
IP address blocks: 2.57.122.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:74:dd:7c:f1:47:46:29:56:54:04:1f:af:64:5e:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Aug 6 20:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f44c9c8c64019e87ace1cd1707efee9c1112d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:d3:f5:48:af:d3:93:d2:ff:48:ac:d7:e9:
34:f1:ba:45:e3:61:64:7c:19:0d:ef:69:15:e8:29:
06:64:8a:40:17:19:cf:2e:dc:b6:6a:07:28:e4:00:
68:b4:97:d7:c5:4c:10:8d:0c:36:5e:cb:6c:98:06:
c4:3f:f4:b3:62:7c:ec:91:88:10:be:58:ce:65:0e:
eb:fd:68:f8:05:94:d0:3f:96:a0:72:4a:4e:7e:7e:
ad:77:e5:87:2b:71:ad:be:73:97:e6:81:7d:0c:aa:
d4:9f:3d:5b:34:bd:5a:ff:b5:45:96:70:13:15:39:
b3:62:2a:fe:cc:e1:b5:d4:de:16:92:3e:19:d2:4d:
fa:c3:7f:6a:6f:cb:6a:d4:83:d1:a4:04:bf:79:86:
72:bb:9e:34:3e:1c:56:f8:21:82:d0:ad:61:52:6c:
b6:4f:c0:b9:78:d4:4e:e9:e2:e5:3e:30:02:01:7f:
5e:65:93:8c:ca:cf:a6:4c:cd:71:e3:f8:69:87:30:
c3:95:02:9f:8b:46:9a:3c:ff:0e:5b:9f:84:3f:32:
73:51:93:34:27:3a:47:83:40:81:a2:62:45:23:a4:
91:ac:b6:ed:b8:13:d3:ff:b9:29:15:48:b2:d5:e4:
53:c1:80:29:20:e1:c2:1a:c2:83:86:8d:10:61:17:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:9C:8C:64:01:9E:87:AC:E1:CD:17:07:EF:EE:9C:11:12:D4:CA
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9EycjGQBnoes4c0XB-_unBES1Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
80.94.92.0/24
92.118.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:38:6a:c4:00:24:73:5f:90:ed:f2:8d:c8:c1:b7:8f:66:20:
9f:d4:64:ef:6f:ff:c1:7c:bd:cc:fc:ff:10:67:1f:62:9f:f7:
4e:38:9d:a7:22:e0:cb:a9:4f:cd:b1:28:42:48:ca:45:e9:f5:
32:43:21:ed:e1:74:e4:03:cb:7a:42:81:9c:e9:3a:40:3e:80:
3e:97:52:80:bf:1e:6f:92:c3:c3:51:bf:c6:62:12:97:ce:4a:
6d:50:81:48:9f:8e:3e:a1:a9:02:05:d6:57:fe:37:ae:f3:c7:
ea:e4:0d:22:22:a9:08:0c:f5:bf:71:b4:3e:58:76:6b:21:19:
ba:a7:5e:89:14:80:7f:4b:74:40:06:44:af:f7:f7:c7:08:37:
99:9d:83:ed:cd:e5:6e:5a:b8:75:42:a6:40:a5:c8:d7:bc:36:
80:d1:52:2d:0f:86:87:9d:df:79:8b:40:7a:b3:bb:7f:c6:3e:
54:2e:c0:27:0c:10:9f:aa:a7:da:01:43:d8:44:23:f1:72:f5:
70:a2:2c:19:0f:8c:57:71:64:ee:6c:1e:14:f3:c3:56:ec:82:
35:19:90:cb:5d:6b:80:4f:fa:e3:8c:0d:a9:99:92:73:33:c0:
17:a2:c3:27:6a:65:c6:a9:fc:77:fa:7d:f5:12:bb:db:2f:5b:
99:a2:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:51 2025 by rpki-client