Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/efIbOGzUW0S1PN-5CQ45f5K1vWQ.roa
File: efIbOGzUW0S1PN-5CQ45f5K1vWQ.roa (raw, json)
Hash identifier: tTQFTRxcefVzPQm8S+zIQ7ZkKDwY1Ay3vOVJtkWHB/w=
Subject key identifier: 79:F2:1B:38:6C:D4:5B:44:B5:3C:DF:B9:09:0E:39:7F:92:B5:BD:64
Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial: 022ACE8E
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/efIbOGzUW0S1PN-5CQ45f5K1vWQ.roa
Signing time: Sat 01 Jan 2022 09:03:46 +0000
ROA not before: Sat 01 Jan 2022 09:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62537
IP address blocks: 185.94.26.0/23 maxlen: 23
185.94.24.0/23 maxlen: 23
185.94.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36359822 (0x22ace8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Validity
Not Before: Jan 1 09:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79f21b386cd45b44b53cdfb9090e397f92b5bd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:e0:e6:2c:88:46:a4:db:b4:72:04:4e:7e:
dd:e7:b2:ea:7a:de:c5:ec:e8:cf:6d:29:cb:f0:9e:
23:87:d3:b1:db:1a:3d:9f:7b:85:5f:cd:0a:bc:40:
62:82:46:b5:3f:bd:7b:27:54:9c:09:ee:3f:9a:c3:
0a:ef:1c:65:07:39:0c:09:18:af:ef:31:0e:82:ec:
54:c0:af:fb:f2:11:5a:61:74:ef:de:80:ac:57:5f:
3f:20:79:32:0d:8b:41:3b:ed:b2:e8:db:dd:4b:a2:
66:5b:e3:dc:56:94:56:c9:f2:72:24:6e:01:5a:b3:
34:bd:70:09:94:85:3f:76:37:26:06:9e:8d:73:b6:
6d:6f:3d:2e:87:a1:c2:a8:3e:b7:7e:53:64:f6:ad:
d5:ec:c0:e9:e0:2f:95:c3:25:fd:0f:99:33:bc:3e:
63:3d:2c:13:2f:c2:22:6b:ad:1e:65:83:14:c6:3c:
a6:98:86:12:13:20:4f:c1:80:fc:a0:78:a7:16:45:
8a:4c:4d:e7:bf:7c:14:73:47:a8:bd:00:7b:ad:2c:
ec:41:53:d5:d0:e2:4a:cc:77:ae:84:1b:d5:cb:b8:
ea:c5:e2:eb:70:88:d6:ec:f0:ad:b7:91:4b:41:b6:
c3:d2:54:44:f1:3c:f9:0a:a0:a1:24:36:65:b1:ca:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:1B:38:6C:D4:5B:44:B5:3C:DF:B9:09:0E:39:7F:92:B5:BD:64
X509v3 Authority Key Identifier:
keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/efIbOGzUW0S1PN-5CQ45f5K1vWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:a8:71:5e:a0:bb:3a:35:a9:09:71:c8:d4:79:f6:28:92:f3:
07:33:b1:4d:bd:22:1e:b0:8a:99:85:fc:2b:0a:76:ab:41:98:
65:f0:ba:1e:af:b5:8f:0c:57:ef:6f:3b:7b:98:96:1c:e8:24:
6f:63:03:97:c8:09:fc:a8:59:92:9b:cc:5b:98:92:8f:da:1a:
5e:02:f7:f0:65:19:0b:11:7f:4a:a8:53:c1:7e:b2:cc:35:94:
31:af:7c:2c:c7:db:2c:81:10:c5:62:92:43:d6:08:8e:e1:3a:
f6:3b:2a:2a:9e:b1:2f:f0:62:3b:8a:65:0e:7a:2b:2e:f7:95:
16:c5:9d:34:8c:23:b0:38:c4:2b:de:b9:f3:53:e1:da:74:f2:
0d:00:41:47:86:78:e1:7e:88:2b:4c:c4:ea:06:c5:91:18:f4:
c7:a9:f9:24:ce:6b:97:57:69:fc:6c:dd:c1:3a:0f:f1:e4:4d:
02:39:4a:cc:eb:29:26:82:28:62:cb:5c:fa:05:19:77:f0:3c:
4f:ea:71:a8:39:9c:f7:98:27:f4:ed:a1:00:81:34:38:d0:2f:
0f:03:cb:7a:0e:37:19:4e:5b:4e:01:cb:27:50:4b:62:4e:43:
d5:63:e9:c8:3c:4d:e5:b6:d5:6d:42:57:59:6f:d4:b0:67:b1:
ff:88:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:50 2025 by rpki-client