Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/7d_7n2mexOKgoFwzNaHQF4duDIo.roa
File: 7d_7n2mexOKgoFwzNaHQF4duDIo.roa (raw, json)
Hash identifier: vL5mHbLhFJ7bYU9B6PjW+QWdsJfmlWQnqbdnAZkgTOg=
Subject key identifier: ED:DF:FB:9F:69:9E:C4:E2:A0:A0:5C:33:35:A1:D0:17:87:6E:0C:8A
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 38325103
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/7d_7n2mexOKgoFwzNaHQF4duDIo.roa
Signing time: Sat 01 Jan 2022 14:04:52 +0000
ROA not before: Sat 01 Jan 2022 14:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39029
IP address blocks: 87.238.32.0/19 maxlen: 19
185.47.40.0/22 maxlen: 22
194.31.39.0/24 maxlen: 24
2a02:c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942821635 (0x38325103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jan 1 14:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eddffb9f699ec4e2a0a05c3335a1d017876e0c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:70:3d:aa:1d:7d:a8:89:53:a6:d6:20:8e:
30:fa:71:f7:4f:4f:7e:9c:e9:f1:ab:5f:ca:b8:e0:
82:f6:51:94:42:d4:20:ad:42:55:c9:57:31:dd:ca:
49:e7:2b:a0:dd:f1:a9:6c:c4:a4:95:83:7b:80:2a:
e5:76:c7:9d:ee:c8:7d:c4:ea:d1:46:62:23:ad:82:
11:e7:a9:de:3b:83:e7:ac:0c:79:df:7f:be:e7:06:
00:ac:b2:52:be:5b:b0:bc:12:14:9d:22:b3:d1:28:
7a:39:64:af:2e:96:90:73:d2:ac:e3:44:6e:c6:ef:
94:e3:e4:ec:a1:10:67:18:ec:4d:81:7e:68:34:7b:
58:1b:a9:75:f9:c9:19:f5:b4:78:12:9f:d5:b3:79:
f6:4c:2b:2c:8f:f7:f6:8d:71:aa:be:ab:6b:6d:6b:
70:d3:05:20:13:c2:96:a8:52:30:00:27:e2:18:73:
43:3b:4c:45:03:1a:c3:7a:a8:aa:e1:60:61:73:6d:
ef:45:19:21:ce:49:9a:53:aa:55:3a:83:a8:0f:9d:
5a:71:59:15:68:c9:f2:e4:e6:73:4a:98:7f:2b:0b:
53:54:1a:f9:2a:c4:19:4b:65:59:16:2d:ef:b3:9f:
ad:79:00:68:2f:aa:c4:0e:93:29:ea:c4:6a:c5:3a:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:FB:9F:69:9E:C4:E2:A0:A0:5C:33:35:A1:D0:17:87:6E:0C:8A
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/7d_7n2mexOKgoFwzNaHQF4duDIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.32.0/19
185.47.40.0/22
194.31.39.0/24
IPv6:
2a02:c0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ce:1a:20:01:5f:b6:34:58:da:09:cf:68:9d:75:c3:3d:08:
65:32:ff:af:c4:05:f3:b2:9d:73:18:f2:16:be:cf:ae:40:b7:
60:97:f4:a3:dc:ad:a4:ee:6b:4a:fd:4e:e3:6d:aa:44:85:b7:
f7:d2:76:2f:11:37:fb:da:4e:66:ff:9c:17:b4:6b:ff:bc:da:
84:c5:3d:cf:d8:45:54:92:32:33:6f:e5:61:88:68:d1:b4:2f:
d2:68:22:48:46:00:1e:0a:f3:62:fa:07:81:5b:c3:45:cf:bc:
cd:56:99:89:9b:03:cf:3a:3c:27:80:b8:f6:32:7c:19:30:cf:
9f:e2:6f:0f:da:e6:a5:b5:2e:6b:95:fe:7e:42:29:de:06:2a:
3c:74:11:73:d1:d8:a6:46:82:a9:11:a2:05:a3:e6:5b:2b:74:
dd:e8:61:d1:3b:71:98:20:f6:0d:5a:51:0b:bf:01:31:19:46:
7e:af:b9:b7:e8:4e:8a:3a:03:66:5d:c4:22:b8:3b:d3:19:03:
4f:84:c8:b5:06:91:54:dd:5a:a1:f4:85:f6:5d:6b:b6:46:0f:
3a:e4:81:d4:bc:0d:ed:08:d2:6e:3b:94:0c:98:75:14:b1:6d:
a0:be:8a:fc:3b:68:9b:19:fb:93:0e:d9:75:7c:c2:8e:dd:5e:
fd:ea:b6:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:08 2025 by rpki-client