Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/7xqVdJJBiKwx76_LJk55nR09mXk.roa
File: 7xqVdJJBiKwx76_LJk55nR09mXk.roa (raw, json)
Hash identifier: iW0Zl+a9t6zETDNOuG/jCfminEyiGoXTHE4ucSBv1M0=
Subject key identifier: EF:1A:95:74:92:41:88:AC:31:EF:AF:CB:26:4E:79:9D:1D:3D:99:79
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01894B44412EF0035A96F1A9345CA5326B4D
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/7xqVdJJBiKwx76_LJk55nR09mXk.roa
Signing time: Wed 12 Jul 2023 18:01:51 +0000
ROA not before: Wed 12 Jul 2023 18:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200403
IP address blocks: 82.114.48.0/24 maxlen: 24
82.114.49.0/24 maxlen: 24
82.114.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:44:41:2e:f0:03:5a:96:f1:a9:34:5c:a5:32:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jul 12 18:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef1a9574924188ac31efafcb264e799d1d3d9979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:ed:c1:ba:1c:ea:67:e7:49:05:02:30:54:
e1:2f:cb:00:2c:41:ee:6e:fc:12:fc:c8:7e:3a:93:
b8:c3:c2:96:2f:18:7f:0d:a5:85:65:d2:67:29:3d:
44:60:0d:cf:9b:0e:a7:07:4a:da:51:21:4f:e7:4d:
64:79:cc:e3:2d:81:b5:63:fb:5c:d2:33:84:f9:18:
e0:68:57:c2:c1:96:f2:29:ff:56:c1:3d:a5:52:10:
40:0a:17:fd:91:21:ce:cd:b7:07:6a:49:2f:23:8d:
e8:4a:0f:1d:2a:69:ef:a9:3f:fe:cf:f6:6b:15:34:
9f:cd:aa:b5:7b:d0:f1:f7:86:13:29:a4:2d:f5:44:
2e:bb:4a:62:79:fe:97:02:13:1f:b8:f6:54:0f:3c:
bf:4d:8b:d6:cd:18:29:4d:10:6c:f5:2f:ae:91:fd:
3d:45:53:d0:76:65:64:b2:d1:8a:37:5b:1e:7b:24:
8f:7c:26:cf:58:ec:c2:ea:ee:8f:4a:3c:5f:53:0c:
b9:83:b3:65:3a:2e:3e:8e:8d:03:57:5a:34:f7:e7:
ae:c8:de:3b:d1:f4:10:43:c6:10:96:66:69:f1:e8:
70:40:eb:d8:6b:a2:7c:e1:2b:e0:ed:72:f2:17:8c:
b4:7d:0e:bc:85:4b:fc:d6:ed:9b:ff:95:ef:68:38:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:95:74:92:41:88:AC:31:EF:AF:CB:26:4E:79:9D:1D:3D:99:79
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/7xqVdJJBiKwx76_LJk55nR09mXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.48.0-82.114.50.255
Signature Algorithm: sha256WithRSAEncryption
80:63:ff:74:66:ee:be:3a:56:b2:30:0e:bc:18:a9:29:66:88:
07:af:db:f7:7a:b8:43:e2:5f:05:3a:9d:a6:cd:a5:bb:ae:4e:
8c:01:b1:55:2c:03:93:f7:70:1b:dc:e5:06:55:e3:3b:9a:52:
48:d1:c2:40:a3:d2:4b:7b:e4:f0:f4:9f:d6:aa:fe:eb:75:3c:
63:de:e4:19:a6:70:f7:f8:cf:1d:36:13:a9:da:37:f4:75:e2:
15:c5:a9:0b:7f:b6:a5:ce:4c:2e:18:75:2b:7e:c8:f4:fd:90:
6e:11:e6:03:88:ed:6f:2a:aa:de:89:34:e6:e3:a2:20:69:e8:
2d:d2:36:d6:b9:a5:bd:bb:fe:76:d9:63:eb:ea:a7:7a:1f:35:
13:76:da:72:c0:6f:db:4e:dd:db:b1:e9:b7:f4:f3:8c:48:cf:
35:b3:6b:f8:f1:c3:72:e3:e8:39:3c:03:56:6f:81:e8:fe:e5:
cb:8d:4b:2a:59:75:ea:d5:bc:c2:90:0d:64:c9:5b:dd:29:81:
b3:1e:3c:a5:4b:cd:f4:dd:0d:d6:7f:c8:75:4e:88:3d:97:92:
57:af:b6:e4:73:ba:0a:9b:61:fe:a3:8a:33:8a:fc:36:b5:e8:
99:33:60:0b:70:87:61:b5:f5:95:b2:2e:df:8f:82:31:04:97:
80:b9:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:42 2025 by rpki-client