Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/EPpgqJpg8VxR8erXyWqUn7DZuHA.roa
File: EPpgqJpg8VxR8erXyWqUn7DZuHA.roa (raw, json)
Hash identifier: HgNUzN1cLKO8x3hoEUeicp8bDIy2P006x4xLxvzRcsc=
Subject key identifier: 10:FA:60:A8:9A:60:F1:5C:51:F1:EA:D7:C9:6A:94:9F:B0:D9:B8:70
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 01866EDB67594D417A1C0023AC3B036F2534
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/EPpgqJpg8VxR8erXyWqUn7DZuHA.roa
Signing time: Mon 20 Feb 2023 12:45:17 +0000
ROA not before: Mon 20 Feb 2023 12:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50873
IP address blocks: 37.228.130.0/24 maxlen: 24
94.247.143.0/24 maxlen: 24
194.104.114.0/23 maxlen: 23
185.97.4.0/22 maxlen: 22
194.104.149.0/24 maxlen: 24
185.97.6.0/24 maxlen: 24
2a06:1c0::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:db:67:59:4d:41:7a:1c:00:23:ac:3b:03:6f:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Feb 20 12:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10fa60a89a60f15c51f1ead7c96a949fb0d9b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:14:67:57:bc:fe:fa:ba:b0:2e:39:14:2e:
0d:dd:5e:f6:62:57:d9:3e:fa:4d:95:e6:5e:a9:a2:
4d:80:8a:22:df:33:d3:29:43:dc:f2:32:3e:7f:9d:
b7:0f:0f:95:27:bd:a4:2d:37:a5:ac:cd:08:ea:a2:
80:15:6b:34:3f:77:5e:8b:44:14:00:fc:47:8e:5a:
1c:f2:c2:18:ec:b3:68:10:02:68:b9:00:e3:65:9e:
2a:c6:db:95:c6:6d:0a:de:72:80:10:00:63:7c:fa:
15:fe:b6:8e:72:b4:63:cc:67:2e:4a:83:8a:7a:f8:
4a:cb:03:7f:23:b7:b1:d8:d0:ac:c4:40:93:f1:30:
7e:02:ee:52:5f:fb:8a:57:7b:9b:38:18:66:3c:e8:
0e:b4:80:37:28:ad:f6:45:f9:f5:d5:8b:5f:17:37:
82:45:32:11:b1:d6:c9:ea:4f:71:81:5b:18:6b:4b:
4f:0c:ad:d2:92:ae:8e:a3:10:9d:08:82:bb:47:b8:
92:8f:a7:f0:b9:e4:94:7a:01:e6:fa:56:93:34:14:
f8:dd:55:f2:19:3f:51:04:6b:26:38:c3:a6:f4:d3:
fc:bf:07:3e:cf:55:50:f3:c9:28:55:c8:4f:41:4f:
11:7e:74:42:eb:a2:bf:ad:63:27:ba:01:e6:b7:e9:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:60:A8:9A:60:F1:5C:51:F1:EA:D7:C9:6A:94:9F:B0:D9:B8:70
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/EPpgqJpg8VxR8erXyWqUn7DZuHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.130.0/24
94.247.143.0/24
185.97.4.0/22
194.104.114.0/23
194.104.149.0/24
IPv6:
2a06:1c0::/30
Signature Algorithm: sha256WithRSAEncryption
a4:7a:bd:75:51:e7:88:b1:cb:51:4e:32:59:f1:f4:a5:a0:d5:
1e:12:3b:d1:aa:df:1a:68:80:07:89:c6:62:74:6e:4f:c3:86:
34:b7:33:0e:6d:1c:85:0a:87:60:06:37:d1:53:a5:f4:d0:64:
cb:48:e9:37:73:3d:b7:46:71:fd:b2:a5:50:e8:f0:e3:50:7f:
a4:ba:ec:3d:a8:ec:e5:dc:73:b7:da:af:65:cc:aa:dd:9c:ee:
20:b4:a8:59:9e:5c:4d:5a:84:f6:08:70:3a:52:2a:21:4c:39:
4b:c3:9f:44:95:ae:c2:25:15:b1:5a:b1:33:26:6a:54:9a:48:
79:85:ae:36:66:a2:f8:1e:bb:e1:88:4b:bd:9c:5f:72:39:fe:
de:a0:d4:15:87:37:f0:1e:05:24:7e:87:3b:d1:54:3f:3a:79:
f8:42:7d:d8:e4:10:0d:fb:0e:79:f1:91:c3:df:5c:12:45:81:
b7:df:4d:1f:44:b0:28:09:cc:0b:c1:dd:03:93:c5:1e:31:4e:
12:1f:39:7e:10:fe:12:ce:6e:bb:85:a4:67:6b:73:0b:4b:36:
50:3f:c7:7d:00:fe:4e:3a:5c:8b:6f:7c:88:c8:68:a8:dc:95:
97:73:36:7e:6b:a5:2d:0e:10:cb:2e:a4:98:e0:3e:03:80:46:
e5:2b:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:41 2025 by rpki-client