Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa
File: EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa (raw, json)
Hash identifier: rKm/Z/xE0zNlTkRKHQIVph5Q7XnfxiE63E12t0/YT8o=
Subject key identifier: 10:CA:22:D9:1D:8D:13:FE:27:3F:11:BC:A5:2E:59:E6:AA:76:AA:34
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 16ABAABB
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa
Signing time: Sat 01 Jan 2022 15:56:33 +0000
ROA not before: Sat 01 Jan 2022 15:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42874
IP address blocks: 185.81.73.0/24 maxlen: 24
185.81.74.0/24 maxlen: 24
185.81.75.0/24 maxlen: 24
185.81.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380349115 (0x16abaabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Jan 1 15:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ca22d91d8d13fe273f11bca52e59e6aa76aa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:c4:f4:e4:c9:68:05:89:b3:f0:f8:a3:da:
bd:48:9a:b7:bd:98:50:91:7a:c8:fe:34:f4:50:30:
80:84:95:51:21:c8:0a:e4:76:4c:b8:62:1b:03:5e:
1b:65:9e:0c:1b:ac:2f:61:e0:c1:be:89:d6:5e:3f:
d1:c8:89:0c:00:c6:74:b9:4f:78:aa:e1:d8:8c:b6:
02:87:5e:4f:4d:d6:8f:2c:44:f0:51:44:ae:49:2d:
e1:ff:32:3b:9d:e5:00:48:ba:93:f2:75:1d:31:ff:
06:62:9e:c8:cd:80:25:8e:c5:1e:df:af:df:13:ac:
48:55:d1:c7:94:07:0b:5a:77:32:22:f5:7d:58:12:
56:a9:ca:38:a5:e8:46:d4:b2:b7:9e:4b:b3:b9:94:
9b:33:d1:73:9e:b9:0b:47:d5:e8:a3:03:dc:6c:68:
e5:2b:9a:56:b3:ec:0e:da:e1:68:8e:e9:1e:7b:73:
c6:ed:9a:8f:9e:dd:e6:07:52:60:7f:bd:ee:cc:e1:
c8:b9:84:95:dd:20:92:be:15:e6:88:22:1c:41:e7:
1f:49:6c:e6:81:e8:b3:f1:10:d3:68:35:7a:56:5c:
2a:08:ca:3d:a0:ef:d9:4e:7e:dc:9f:72:9d:23:fa:
85:27:74:d9:c6:47:a1:d8:4d:c7:e1:f6:57:2d:35:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:22:D9:1D:8D:13:FE:27:3F:11:BC:A5:2E:59:E6:AA:76:AA:34
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/EMoi2R2NE_4nPxG8pS5Z5qp2qjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.72.0/22
Signature Algorithm: sha256WithRSAEncryption
80:7a:d9:90:3f:34:6e:41:03:1a:85:36:40:65:ba:1f:3f:55:
8f:91:30:e4:09:0d:f7:6b:20:a9:59:e7:1e:f4:f7:e8:b8:42:
f7:06:cc:85:e1:f8:a6:04:5f:d7:62:92:d4:06:67:ba:b1:06:
cf:11:ca:8f:31:17:22:49:be:61:fd:aa:bb:40:be:e0:69:44:
c6:af:fb:05:f1:66:1d:cf:bd:43:c1:5b:96:42:6c:7b:0d:ce:
02:f2:8b:67:5c:14:cf:b0:57:03:69:55:d1:fd:5f:8d:f4:4c:
d4:e9:5e:25:e5:d7:d4:b2:72:b1:f1:59:15:29:16:4b:c0:53:
a3:12:42:96:ec:33:e3:e4:68:2d:1b:6a:be:17:ba:ad:47:db:
80:2d:ec:3a:94:44:2e:4c:fc:05:84:60:47:11:59:0a:27:3e:
4e:6d:f0:39:62:ba:ce:48:1a:02:64:98:3b:7d:50:6b:ef:97:
ae:41:4f:6e:60:fe:01:0a:12:e3:c8:b8:34:a0:95:72:bf:ff:
23:a1:12:c7:00:1a:f6:d8:e1:e7:c8:ba:9c:9e:d1:d5:9a:21:
7d:ee:d4:6b:43:76:13:6b:a2:31:82:06:10:25:c5:7f:8c:96:
a6:de:52:fd:ad:7f:bd:a7:68:40:b5:76:7c:80:16:78:07:ac:
2e:a4:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:06 2025 by rpki-client