Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/737K33SxNggU3CF9O5oLf8HN9eE.roa
File: 737K33SxNggU3CF9O5oLf8HN9eE.roa (raw, json)
Hash identifier: XqIr8M+UemAskruqvtw9j/LSs8irxjN8CLvgezH9STY=
Subject key identifier: EF:7E:CA:DF:74:B1:36:08:14:DC:21:7D:3B:9A:0B:7F:C1:CD:F5:E1
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 018461200C555B70489CE2EF226C41327F2B
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/737K33SxNggU3CF9O5oLf8HN9eE.roa
Signing time: Thu 10 Nov 2022 10:40:00 +0000
ROA not before: Thu 10 Nov 2022 10:40:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58096
IP address blocks: 185.216.192.0/23 maxlen: 32
45.93.4.0/22 maxlen: 32
193.160.204.0/23 maxlen: 32
94.141.124.0/22 maxlen: 24
91.220.69.0/24 maxlen: 24
193.105.114.0/24 maxlen: 32
185.154.72.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:20:0c:55:5b:70:48:9c:e2:ef:22:6c:41:32:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Nov 10 10:40:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef7ecadf74b1360814dc217d3b9a0b7fc1cdf5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:bb:f0:60:a4:41:bc:ba:2f:c0:58:23:2d:
56:ba:02:30:fc:db:72:54:1f:2f:63:80:31:25:49:
bc:c8:e1:55:9d:dd:b8:55:6a:6b:b5:99:7d:3e:9a:
cb:ce:3f:39:a0:6e:1b:04:15:b5:1e:24:6d:0f:29:
3d:23:c3:b2:f3:b9:d8:59:82:00:3d:b3:b6:de:ac:
72:3c:a8:67:f7:c8:2f:f7:eb:fc:19:54:5c:16:e0:
41:8a:66:47:7a:f6:47:60:8a:fe:90:cb:16:e6:33:
f3:d4:b9:3a:7c:e6:99:a9:6a:b4:a5:25:a5:80:73:
56:0f:90:35:44:8a:a2:d3:2d:67:fc:4c:ec:ff:7d:
77:27:c0:f8:17:4e:10:73:3b:5a:9d:10:6d:43:84:
32:3a:e1:6f:0c:80:6a:e0:87:8e:1e:6d:55:73:4c:
13:59:28:9b:c1:93:fa:d7:d7:9e:f3:de:a8:a2:f6:
b0:7b:ed:05:d7:70:2f:b7:6e:b9:93:66:83:6f:f4:
c8:12:3b:43:81:ef:c4:6b:5d:e5:cb:4a:ab:14:58:
39:6c:8b:9e:37:61:93:d7:37:23:a5:52:74:cf:95:
3a:a9:86:64:e0:0b:34:9e:86:a1:fe:d3:8d:3f:cb:
8f:5a:dc:e8:8b:72:aa:75:b7:84:33:16:da:2e:6b:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:CA:DF:74:B1:36:08:14:DC:21:7D:3B:9A:0B:7F:C1:CD:F5:E1
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/737K33SxNggU3CF9O5oLf8HN9eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.4.0/22
91.220.69.0/24
94.141.124.0/22
185.154.72.0/22
185.216.192.0/23
193.105.114.0/24
193.160.204.0/23
Signature Algorithm: sha256WithRSAEncryption
76:f2:68:65:9e:f7:e9:c5:4c:a6:b9:f7:04:0a:9c:c1:24:2c:
f2:ca:de:4e:83:5b:0b:c4:a2:31:48:1f:e4:98:b2:04:aa:f9:
6d:81:1e:58:7c:3d:6f:e8:6a:15:b7:d2:be:1b:68:78:1b:99:
77:62:f0:ae:5e:85:63:4c:41:5e:5d:8f:0b:55:39:df:f3:00:
0d:3a:f4:81:2e:5c:51:2d:fb:36:24:04:2d:5a:41:a2:45:a9:
9d:28:9c:4e:18:10:22:4d:64:6c:3a:b2:fd:16:f4:51:01:56:
88:90:64:f3:94:c6:1f:3e:2f:de:cb:de:16:44:25:9d:23:51:
fc:ef:6c:13:35:8c:d0:b6:3c:06:ef:9a:87:f3:73:3f:7b:b0:
23:73:67:fd:22:9b:df:3e:69:be:04:a5:39:19:7d:f0:89:42:
3e:00:8a:28:78:30:a2:f2:39:d3:10:f9:b4:d7:d7:82:ca:eb:
47:be:a1:b5:38:02:2f:54:79:55:cb:64:9e:95:4f:f4:64:5a:
1a:85:32:b9:6d:82:08:42:ff:54:5d:ca:75:81:07:25:5d:d1:
e4:2f:4a:01:b4:5f:34:78:53:05:ba:61:fa:c0:90:94:23:56:
78:65:5b:76:30:3f:d9:d8:e9:1f:9a:2d:bd:41:09:9d:86:17:
bf:52:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:19 2025 by rpki-client