Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/7P3u4-WIv6lZks6W4cyhqlFINHU.roa
File: 7P3u4-WIv6lZks6W4cyhqlFINHU.roa (raw, json)
Hash identifier: 0liM/M8GjXxPLhnGUH9/jw1dvBHMAqwmfKNtq+TiEzk=
Subject key identifier: EC:FD:EE:E3:E5:88:BF:A9:59:92:CE:96:E1:CC:A1:AA:51:48:34:75
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 0ECBA5DC
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/7P3u4-WIv6lZks6W4cyhqlFINHU.roa
Signing time: Mon 30 May 2022 09:33:15 +0000
ROA not before: Mon 30 May 2022 09:33:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42184
IP address blocks: 185.64.168.0/22 maxlen: 22
45.82.124.0/22 maxlen: 22
185.143.168.0/22 maxlen: 22
178.251.8.0/21 maxlen: 24
188.64.248.0/21 maxlen: 21
91.190.224.0/21 maxlen: 21
2a02:f08::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248227292 (0xecba5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: May 30 09:33:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecfdeee3e588bfa95992ce96e1cca1aa51483475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:54:fc:c7:70:d6:f2:6b:43:4a:ad:6b:78:
7d:48:49:fe:73:b8:01:67:1a:54:ce:53:b3:df:2c:
f9:ac:41:d2:e8:bc:51:02:9f:57:0c:f8:6c:e7:3f:
fc:90:fc:19:62:ec:22:f0:33:0e:b3:89:e4:26:87:
d0:f1:0d:64:28:3f:32:fb:3a:f3:91:1f:10:57:f0:
86:0e:3f:81:7c:8a:7c:6a:09:f0:98:dc:2b:d8:b5:
00:aa:68:a3:a5:d8:60:75:ef:4c:ee:c7:13:68:50:
d7:f5:9d:1d:4b:93:72:e8:6e:02:eb:e6:e9:93:13:
fa:89:dd:e1:c6:2b:2e:d2:6c:6b:1d:d0:2f:1a:2e:
c9:f5:8b:9f:8f:54:7c:01:f4:6b:87:6d:fb:0f:ad:
b6:9d:c1:18:2b:60:5a:52:72:ea:de:6f:fa:67:20:
a0:ab:28:17:b2:28:6b:39:bc:f6:16:27:ba:4d:b1:
69:ee:a7:72:84:13:14:a1:e2:a5:4a:5f:e5:c5:0a:
71:9f:2c:c7:9f:d5:e9:bf:8e:5d:b2:cd:f3:ce:5d:
75:ff:1e:7c:ee:b0:a7:4d:e7:b2:1a:25:02:e3:5f:
af:23:3e:3d:c1:df:09:07:d3:cc:3d:f3:5f:49:24:
09:b8:62:8c:a4:ca:4e:b8:8b:a0:d3:f2:c8:d3:4e:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:EE:E3:E5:88:BF:A9:59:92:CE:96:E1:CC:A1:AA:51:48:34:75
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/7P3u4-WIv6lZks6W4cyhqlFINHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.124.0/22
91.190.224.0/21
178.251.8.0/21
185.64.168.0/22
185.143.168.0/22
188.64.248.0/21
IPv6:
2a02:f08::/32
Signature Algorithm: sha256WithRSAEncryption
01:76:9e:41:6d:34:80:ae:45:d5:f4:e5:42:3c:a0:7b:ff:e2:
b4:5a:c7:c1:b2:c3:43:20:bf:29:ba:72:08:61:b4:05:42:4e:
2e:17:24:d3:e8:c3:08:19:21:6d:ed:df:cd:c7:9d:8c:67:bd:
4b:4d:50:67:49:c2:02:95:11:91:c5:98:e9:b2:39:41:64:b3:
fc:8a:7d:c0:a8:43:3a:bf:4a:ae:93:f7:41:43:82:6c:b3:fb:
73:62:62:fa:87:b7:9d:3f:39:2b:d9:20:f5:aa:d6:60:7c:72:
29:82:6f:8a:fd:fd:40:29:40:08:c7:d6:67:aa:90:dc:32:06:
43:a8:d8:19:ea:dd:db:5c:3d:24:4e:7c:e9:b9:61:dc:46:1a:
c6:b9:34:9b:b3:d4:3e:c7:a8:2d:90:70:d0:3c:7a:28:e9:9b:
a8:76:b6:84:05:f9:d2:83:9d:ec:20:49:1d:6a:c1:f0:f3:0c:
78:33:d7:f7:1d:f7:0a:5a:0a:97:bb:58:2f:79:dc:9e:c7:a2:
20:db:bf:bf:f2:8f:42:71:fa:d6:77:c1:47:84:67:4b:ee:1b:
8d:27:e0:6e:ba:da:45:0b:bb:98:34:a7:d7:21:da:41:a5:7a:
7f:13:39:34:b2:aa:ce:f9:53:ee:87:46:54:d8:b9:68:ca:b9:
af:00:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:52 2025 by rpki-client