Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/7qwsEtJvsm-mDXlUKiU-dNGjuxQ.roa
File: 7qwsEtJvsm-mDXlUKiU-dNGjuxQ.roa (raw, json)
Hash identifier: Q6Idq9I66ej2/5keNZKybUbE+AKElLULHVL6csraC/E=
Subject key identifier: EE:AC:2C:12:D2:6F:B2:6F:A6:0D:79:54:2A:25:3E:74:D1:A3:BB:14
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 01856F8BA06CE30B6386D3F014454B7E3ED1
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/7qwsEtJvsm-mDXlUKiU-dNGjuxQ.roa
Signing time: Sun 01 Jan 2023 22:54:59 +0000
ROA not before: Sun 01 Jan 2023 22:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41354
IP address blocks: 185.208.88.0/22 maxlen: 24
2a0b:32c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:a0:6c:e3:0b:63:86:d3:f0:14:45:4b:7e:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Jan 1 22:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeac2c12d26fb26fa60d79542a253e74d1a3bb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:3e:e8:b9:b6:b7:97:15:6f:cf:53:50:5e:
c3:41:b0:92:b3:16:b2:3f:3a:b9:83:fe:bd:05:95:
85:56:29:fb:24:4b:9a:24:ab:64:93:7d:f8:e8:76:
ef:6d:ce:f0:26:03:80:10:1d:a1:b5:e0:a3:41:bd:
20:45:5f:22:fc:15:7a:38:81:fb:e0:c8:5c:b8:d7:
06:dc:76:e7:ac:fd:4e:67:7e:32:93:91:f1:82:fa:
e0:2b:78:76:2a:31:a2:0c:7a:4a:98:61:5c:bc:71:
76:50:ce:1c:f5:ab:46:02:dd:d3:d0:15:a5:48:76:
3f:a4:b3:cb:d1:be:4e:4f:26:60:50:3c:32:30:b1:
85:25:20:df:85:d4:e6:10:56:56:87:72:ed:ef:f1:
07:2b:a3:de:af:5c:b7:6f:49:03:24:4a:df:8f:dc:
4e:fd:23:b6:fb:15:58:6b:58:bf:16:dc:99:c2:71:
cb:7e:a8:f5:d6:0e:1c:87:22:2d:d5:13:51:85:b1:
40:7a:88:86:f4:84:ae:bb:71:33:9e:c8:dc:82:c5:
37:ae:65:06:07:59:0d:f0:bb:80:bc:5f:98:86:e3:
dc:4a:09:6f:5b:f1:94:21:66:ce:48:49:3c:ee:7a:
70:fe:fe:56:87:20:2a:6e:ef:57:5a:2c:22:01:a7:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:2C:12:D2:6F:B2:6F:A6:0D:79:54:2A:25:3E:74:D1:A3:BB:14
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/7qwsEtJvsm-mDXlUKiU-dNGjuxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.88.0/22
IPv6:
2a0b:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:da:f2:b7:bb:b9:e0:51:89:ae:4e:1e:b4:1c:79:68:e1:e2:
d3:01:b5:bb:00:7c:b7:3d:34:bf:f9:b7:ba:e0:64:bd:bb:4a:
42:53:26:6f:c2:e2:8d:d7:65:fe:91:67:d7:c0:da:2b:c7:5a:
3e:33:d1:96:8a:19:f9:e3:a1:de:00:92:c9:3c:ed:54:8c:98:
d7:4e:eb:c4:b8:d0:d5:b1:d8:5b:b5:14:f4:d3:ef:a3:a1:f8:
dd:c5:4d:8e:34:13:11:ea:c5:0b:3d:38:ae:11:66:d8:27:35:
ca:f7:88:88:8e:93:b0:0e:26:21:60:85:50:10:0f:42:12:ef:
1f:e4:68:67:5f:ae:fe:40:7a:0b:01:4e:7e:40:fb:f6:5d:e8:
ba:c8:1b:4e:89:d9:82:9f:b0:05:b5:59:d2:1d:fb:9f:b7:98:
55:19:2e:d0:11:47:89:bf:8f:20:36:a3:61:3a:cc:cf:23:4c:
77:3f:6d:f7:17:99:3a:cc:7e:cc:78:92:79:b6:8b:21:cc:18:
4b:46:22:ab:d2:ac:c7:2b:0b:84:f9:8b:48:70:b8:2d:bc:ac:
4b:e1:a7:b7:c8:7c:54:18:95:96:ca:67:72:63:a2:15:81:dd:
38:f7:af:5e:ce:14:dc:97:32:64:ef:84:14:cc:f1:5d:83:3a:
bb:36:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:56 2025 by rpki-client