Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/EbGZywU-b1ZQ2f8AgG7-Zlnxfcc.roa
File: EbGZywU-b1ZQ2f8AgG7-Zlnxfcc.roa (raw, json)
Hash identifier: 3KGhqgHz3NvZOE9ernnQ/N0RBzSxV4/0OR4fMnizLO0=
Subject key identifier: 11:B1:99:CB:05:3E:6F:56:50:D9:FF:00:80:6E:FE:66:59:F1:7D:C7
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 01856CB84B75AE79E4E07A49825685E37752
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/EbGZywU-b1ZQ2f8AgG7-Zlnxfcc.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204813
IP address blocks: 185.105.120.0/22 maxlen: 22
185.225.180.0/22 maxlen: 22
185.107.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4b:75:ae:79:e4:e0:7a:49:82:56:85:e3:77:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b199cb053e6f5650d9ff00806efe6659f17dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:9c:9d:9d:b7:fc:d0:45:6b:9f:ac:71:0e:
a4:ac:cb:7e:44:cc:94:84:91:3a:a2:72:0a:ae:28:
1a:b4:ff:82:28:40:22:35:32:bd:d1:84:89:aa:08:
42:59:8c:af:26:64:2d:4a:ff:d8:82:b6:ed:e8:05:
83:73:70:1c:3b:78:f1:d1:db:23:68:34:73:7a:6e:
d5:c2:3f:b8:3a:ef:1f:6b:25:4b:dd:87:fa:a0:fb:
64:8e:ea:b4:58:2c:40:27:55:aa:67:ba:37:10:69:
37:e3:d0:28:83:a4:83:d1:81:13:66:ad:6c:6f:77:
5c:9d:c1:e9:29:63:c4:9a:9e:02:e0:f1:31:f0:31:
26:2b:31:70:57:4b:fd:80:85:c9:f7:f4:ae:13:f6:
7b:98:54:b0:b7:d9:95:cb:89:a6:51:1c:aa:f3:bb:
72:0e:60:1b:68:16:3d:62:f1:ea:95:c5:2e:c7:11:
87:4e:fb:4e:63:ad:d1:ba:96:c2:53:13:9e:1e:29:
eb:3e:b7:b7:5c:84:70:dc:5d:93:4c:2b:60:0f:4b:
d1:1a:c3:ec:84:0d:b0:33:bf:c6:08:0e:0f:9e:89:
a8:f5:6d:5c:df:29:cb:a9:60:77:61:a4:bc:7f:c5:
d0:c6:4c:df:e1:bf:f5:96:5b:be:53:0f:b7:cb:da:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:99:CB:05:3E:6F:56:50:D9:FF:00:80:6E:FE:66:59:F1:7D:C7
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/EbGZywU-b1ZQ2f8AgG7-Zlnxfcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.120.0/22
185.107.248.0/22
185.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
76:99:53:29:bf:39:bd:09:24:83:c5:1e:78:47:a8:8b:6b:d8:
d5:c1:f7:6a:d5:98:61:86:4c:b2:fa:81:35:85:96:27:3d:f4:
17:bd:4f:07:bf:17:2a:47:0e:b7:9a:c8:8f:56:c5:a7:93:ad:
7e:83:f8:94:d6:2b:3b:8c:2d:4b:05:32:70:44:24:9e:71:b7:
47:68:dc:6d:2e:f4:dd:cc:29:05:c2:22:1e:a4:c9:84:41:f5:
0d:2f:ce:f1:ef:8a:f3:35:39:ba:6c:bf:79:18:a0:f9:62:8f:
3d:15:99:a9:f8:fd:e3:f2:d5:79:c3:33:b7:05:00:4e:11:f4:
42:a2:32:fe:d1:8f:eb:d3:2b:5a:de:ec:6a:48:24:64:a1:2a:
78:7b:7c:59:04:2a:88:df:fc:59:3a:3a:2b:a7:1f:32:6c:ff:
c7:3f:cb:d7:51:43:c1:04:a8:e8:f4:f1:98:c2:9d:1d:2b:88:
33:10:16:52:e2:45:bd:ef:d3:76:6c:77:3c:c5:31:26:79:24:
0d:ed:62:52:40:b3:c5:d9:dd:d8:75:c9:7c:d1:98:b6:f1:35:
90:44:c8:09:f2:d5:38:9b:65:3e:75:60:cb:8a:a4:c6:e6:b8:
b1:1b:88:30:31:61:dc:7e:84:55:0a:26:84:c3:61:47:df:b4:
c7:51:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:32 2025 by rpki-client