Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/8-ecj9m_V-Unxor8QuSW5w1z0uM.roa
File: 8-ecj9m_V-Unxor8QuSW5w1z0uM.roa (raw, json)
Hash identifier: YGz6Ft7aXzy0Rs285wFzSXVWbHeNnGD1xvADIxQxlII=
Subject key identifier: F3:E7:9C:8F:D9:BF:57:E5:27:C6:8A:FC:42:E4:96:E7:0D:73:D2:E3
Certificate issuer: /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Certificate serial: 01856F26C037A683EA0808CD8354C8CD76F8
Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/8-ecj9m_V-Unxor8QuSW5w1z0uM.roa
Signing time: Sun 01 Jan 2023 21:04:48 +0000
ROA not before: Sun 01 Jan 2023 21:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41268
IP address blocks: 93.186.96.0/20 maxlen: 32
193.203.60.0/22 maxlen: 32
185.140.160.0/22 maxlen: 32
37.235.128.0/17 maxlen: 32
2a03:2c00::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c0:37:a6:83:ea:08:08:cd:83:54:c8:cd:76:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Validity
Not Before: Jan 1 21:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3e79c8fd9bf57e527c68afc42e496e70d73d2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:e8:72:2b:dd:dc:1e:8b:6f:42:30:df:6d:
a4:2c:20:9d:05:ba:95:df:0a:c9:94:b2:b0:95:29:
e7:9e:d2:45:17:a7:ba:16:db:22:09:57:71:f1:21:
89:7e:3f:57:3b:45:3f:8e:92:3f:2b:4b:8a:f1:72:
3a:77:ef:e9:30:79:25:6e:76:89:ef:aa:b8:1f:47:
f7:cc:aa:9b:d7:02:58:98:8b:45:1e:17:fa:26:38:
c4:ce:af:b2:cf:78:c5:58:ba:05:67:ab:42:e1:7a:
2e:5c:82:e4:80:0e:e5:c0:c4:d6:ab:a0:50:0c:a0:
aa:7f:9b:5b:12:0e:2a:d1:48:33:89:7a:8f:9f:1f:
70:95:69:b2:85:a7:03:df:d4:ac:d5:ab:11:14:e4:
a6:fd:32:1e:e2:6c:7f:e3:00:d6:57:53:83:d3:d1:
a6:70:c0:e3:15:4c:8c:6a:69:9b:ef:14:af:91:b2:
0e:5f:fb:70:8e:3e:e7:b0:a4:1c:53:f4:7a:5a:0a:
59:d0:dd:ba:8c:cc:21:1a:44:45:e2:8b:bf:6d:44:
c8:c3:6d:d2:04:07:33:fc:bd:b8:1f:0d:68:7c:64:
bc:5a:cb:3d:23:a2:14:12:5e:b4:38:57:86:f8:07:
2f:c5:a6:0a:c5:66:62:cf:eb:2a:3b:ba:d0:b6:80:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:9C:8F:D9:BF:57:E5:27:C6:8A:FC:42:E4:96:E7:0D:73:D2:E3
X509v3 Authority Key Identifier:
keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/8-ecj9m_V-Unxor8QuSW5w1z0uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.128.0/17
93.186.96.0/20
185.140.160.0/22
193.203.60.0/22
IPv6:
2a03:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
77:ca:18:71:cc:a4:a5:ec:d9:2c:77:bc:22:78:e4:ea:c7:52:
bf:94:5f:11:96:99:bf:f2:45:ba:0d:6a:fd:8b:cb:01:bc:eb:
f3:33:e8:d9:02:c5:bb:70:0c:2c:98:1f:36:f5:cd:9f:4a:2d:
9c:ce:da:ea:b4:68:cd:78:52:b3:25:9a:7d:b6:ff:ee:14:73:
c6:66:ac:d2:24:9a:4a:dd:64:f5:dd:9b:16:56:f8:ac:4d:a4:
c2:00:da:26:03:f0:17:25:04:cb:e7:40:6e:e0:07:2b:8d:f4:
fc:c4:ae:fb:9f:47:1f:2d:06:bd:fa:83:da:06:00:69:45:e6:
77:28:63:93:9c:0e:8f:c7:09:fb:16:6c:6e:69:8c:3c:df:37:
64:99:d0:1e:a2:81:25:e1:05:96:d7:80:42:75:6c:dc:77:78:
ce:ea:0d:c3:c4:6c:61:36:7f:62:cd:70:68:a6:16:aa:6d:06:
8f:1c:88:d9:f8:d7:52:0d:7f:a4:81:84:58:79:1f:37:39:ae:
c1:77:fb:e2:37:dd:f6:4a:37:41:60:8e:a5:98:98:5b:46:16:
55:fa:ec:90:87:e8:16:a7:76:ed:84:52:7f:7e:0f:74:f0:b2:
c8:3e:b4:5e:e6:66:44:62:cc:cf:b1:41:02:97:7a:a6:42:ac:
4b:46:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:43 2025 by rpki-client