Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/EaqNMQSrJa97x2wRw_cqM2EaaOs.roa
File: EaqNMQSrJa97x2wRw_cqM2EaaOs.roa (raw, json)
Hash identifier: Z/FY6ZddM6+pW8PPk2yxmOqKQ6ATpPVvCFEjzB5sQJU=
Subject key identifier: 11:AA:8D:31:04:AB:25:AF:7B:C7:6C:11:C3:F7:2A:33:61:1A:68:EB
Certificate issuer: /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial: 02E1C3F7
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/EaqNMQSrJa97x2wRw_cqM2EaaOs.roa
Signing time: Sat 01 Jan 2022 02:58:00 +0000
ROA not before: Sat 01 Jan 2022 02:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203299
IP address blocks: 185.135.20.0/24 maxlen: 24
2a06:f080::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48350199 (0x2e1c3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Validity
Not Before: Jan 1 02:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11aa8d3104ab25af7bc76c11c3f72a33611a68eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:52:1b:0c:95:fc:9a:71:1d:b8:fd:65:59:
77:85:e1:31:11:5d:6a:c9:c3:17:93:ef:db:b7:f9:
da:d2:2c:e2:d2:17:8a:92:ed:2a:2e:39:4b:32:bc:
53:41:cf:b2:8e:9c:ef:93:e9:e5:3d:dd:e5:bb:03:
c8:fa:35:92:1d:9b:15:f9:aa:ca:bd:c8:d2:c2:f3:
ed:e4:7e:c6:80:f6:4a:9b:56:0f:3b:dc:77:37:72:
63:fd:a2:f7:47:19:d2:b3:0a:e9:71:a2:4c:7e:d4:
ed:78:04:0b:e0:7c:69:d0:78:fa:3e:c7:8f:cc:b3:
6c:49:a5:b0:9b:e1:db:76:bd:5d:f3:16:58:b1:19:
46:e2:ba:e0:46:45:df:df:14:12:cc:bc:fa:99:8f:
98:ad:5a:74:1c:f3:75:39:9a:8e:f4:62:49:18:c9:
5f:cf:7c:7d:96:1a:48:31:0f:24:13:5c:66:85:ea:
35:bc:f9:c5:76:24:f5:46:90:93:22:37:55:33:f0:
05:18:8f:23:ba:30:65:e4:66:d0:54:1a:a0:3c:e5:
fb:0e:9d:c1:eb:4d:61:29:dc:08:b7:61:32:0e:ff:
62:c2:12:8e:dd:a3:f2:d4:62:26:5b:e9:4f:3d:b5:
34:b2:c9:93:e8:bf:a2:44:52:2f:bb:29:1c:6e:ce:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AA:8D:31:04:AB:25:AF:7B:C7:6C:11:C3:F7:2A:33:61:1A:68:EB
X509v3 Authority Key Identifier:
keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/EaqNMQSrJa97x2wRw_cqM2EaaOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.20.0/24
IPv6:
2a06:f080::/32
Signature Algorithm: sha256WithRSAEncryption
72:af:5e:95:53:92:fa:35:37:33:42:ee:57:bf:0c:f0:c3:6f:
6a:53:1e:ce:e2:09:c1:2d:a9:be:65:75:03:2e:a1:0c:3e:7b:
ea:90:de:22:98:df:28:76:88:61:6f:1c:ff:47:87:67:1d:8c:
83:d6:e7:5d:50:83:e7:59:fc:d3:ea:78:d8:54:eb:f0:54:6f:
d4:c5:8c:50:4d:d8:80:1f:f7:d0:54:c3:f9:2f:09:ab:0a:fe:
f6:f9:50:9d:86:75:f6:82:01:60:b0:cc:b9:c5:0c:9d:37:a3:
67:f1:96:48:8e:78:2f:6f:80:cf:8a:e1:0a:4c:32:dc:51:3f:
22:e8:7f:eb:38:62:19:84:58:b3:25:a3:8f:bc:df:d1:56:b6:
29:32:bf:3c:33:24:84:7d:bd:9b:c9:97:34:8e:09:ee:28:ea:
5f:72:6f:88:e7:6f:d5:b3:1d:ca:cd:c9:27:2e:79:e5:9c:f4:
2d:59:c3:bb:ed:4e:d5:75:65:af:68:4a:a3:ff:5d:a1:52:da:
39:2c:dc:2f:3f:83:b4:3a:8f:03:8c:0f:ab:b2:a1:ad:3d:3a:
e4:64:c6:66:29:e8:48:e6:63:74:3d:e7:e7:c6:20:e8:bf:ac:
d6:69:a6:91:7a:77:5c:8f:47:ac:55:3a:f5:6d:4e:42:d1:2c:
0c:33:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:36 2025 by rpki-client