Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/4EuBl4Mo2PDV5oIA9MuGb9x6vpM.roa
File: 4EuBl4Mo2PDV5oIA9MuGb9x6vpM.roa (raw, json)
Hash identifier: BKptgvZ0mZYefuMkCSlJZI2XnM6DWkb2WfmxEtjdQSU=
Subject key identifier: E0:4B:81:97:83:28:D8:F0:D5:E6:82:00:F4:CB:86:6F:DC:7A:BE:93
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 0185720C466E89D8D633280626A2DE31EA5B
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/4EuBl4Mo2PDV5oIA9MuGb9x6vpM.roa
Signing time: Mon 02 Jan 2023 10:34:45 +0000
ROA not before: Mon 02 Jan 2023 10:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57626
IP address blocks: 37.9.216.0/21 maxlen: 24
37.9.216.0/22 maxlen: 24
45.158.240.0/22 maxlen: 23
37.9.220.0/22 maxlen: 24
2a07:b700::/29 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:46:6e:89:d8:d6:33:28:06:26:a2:de:31:ea:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Jan 2 10:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e04b81978328d8f0d5e68200f4cb866fdc7abe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:95:2a:60:b0:9c:ee:61:93:4d:7e:f0:d1:
4d:32:9d:5b:8a:00:8f:27:f6:2d:e8:ab:d7:45:6e:
30:01:69:95:90:17:6f:41:31:e3:a2:10:fd:5c:bf:
5d:64:e7:e3:f5:03:15:5d:50:f9:78:23:d8:90:d2:
98:ed:d2:4e:59:6c:e6:8f:9b:fe:1f:3f:9a:3d:48:
2e:53:65:0d:99:c9:f7:1b:09:e9:01:fc:33:b1:9b:
e8:84:11:5a:73:34:c0:9e:fb:07:88:da:f4:de:51:
44:2e:c3:fe:33:95:22:c1:d6:49:98:4b:90:89:29:
a2:63:b8:20:33:0a:12:22:bf:99:cb:a5:3b:ef:65:
89:b2:ca:2d:c6:6c:3b:68:a5:a9:10:81:f4:93:ff:
bc:7e:de:46:f4:81:d5:a3:7c:9f:7a:f2:b5:11:3f:
7c:b9:90:47:14:c3:b5:41:37:0e:93:ce:58:6d:d5:
de:b7:76:a8:f9:9a:2b:fe:f6:10:8f:50:76:61:29:
cf:85:44:63:e0:26:b4:d4:68:c5:77:bc:8a:c5:13:
0c:be:6c:b0:64:39:70:dc:5b:57:11:f6:d4:12:59:
5c:0c:68:45:dc:8c:75:b6:77:f6:5a:16:3e:f0:f5:
a5:bd:99:05:27:3e:d4:c7:b0:85:23:ec:37:a0:15:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4B:81:97:83:28:D8:F0:D5:E6:82:00:F4:CB:86:6F:DC:7A:BE:93
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/4EuBl4Mo2PDV5oIA9MuGb9x6vpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.216.0/21
45.158.240.0/22
IPv6:
2a07:b700::/29
Signature Algorithm: sha256WithRSAEncryption
79:65:86:6c:86:3a:6d:94:9c:8b:75:fd:02:e9:37:7a:c4:34:
a3:77:2a:46:a3:b0:60:cb:01:09:cf:79:78:83:a9:6b:76:8f:
32:65:1b:c5:78:75:22:4a:6c:dc:61:ea:a8:07:62:1e:22:69:
c4:29:4f:f7:b6:13:76:d1:3d:a3:3b:d9:ef:e7:80:7c:70:60:
f3:b0:23:aa:df:22:d6:c8:90:ed:16:52:53:b1:80:36:04:c4:
eb:eb:15:d9:d7:80:64:b5:ba:e5:be:d1:9e:ef:ed:49:58:ff:
6f:c9:b5:fd:e4:b3:79:51:cb:cd:72:cc:ed:8f:ec:85:0c:27:
0e:4b:04:aa:8d:db:2e:14:1e:43:4f:d7:a2:66:fa:7f:b3:b9:
2a:16:cc:a5:0f:5f:33:97:73:8e:f7:8a:ea:b4:b9:de:e2:45:
b7:cb:15:78:4c:01:fa:ba:80:2d:3c:ea:ae:20:23:e3:fa:db:
45:0b:93:0f:4e:48:34:e9:0b:8e:96:33:67:68:f5:2b:4b:de:
f7:ce:28:66:af:a9:6e:67:98:0c:1c:01:4c:62:8b:5d:4f:12:
05:02:ea:e0:54:99:2b:ed:7d:65:d4:35:ef:c0:dd:63:be:18:
10:cf:79:d4:1d:f8:56:4a:71:02:b7:e1:fa:bb:e4:f3:c4:ee:
1f:ff:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:47 2025 by rpki-client