Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/72XtizsE0cn9jfFF2LCk_-Zuy3U.roa
File: 72XtizsE0cn9jfFF2LCk_-Zuy3U.roa (raw, json)
Hash identifier: JgSOd16HU5J+GeBU0OIlRgmOczF17l+kIqJWch+KuIs=
Subject key identifier: EF:65:ED:8B:3B:04:D1:C9:FD:8D:F1:45:D8:B0:A4:FF:E6:6E:CB:75
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 3836896B
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/72XtizsE0cn9jfFF2LCk_-Zuy3U.roa
Signing time: Sat 01 Jan 2022 06:04:23 +0000
ROA not before: Sat 01 Jan 2022 06:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15969
IP address blocks: 185.7.170.0/23 maxlen: 23
185.7.168.0/23 maxlen: 23
46.227.240.0/23 maxlen: 23
46.227.246.0/23 maxlen: 23
46.227.242.0/23 maxlen: 23
46.227.244.0/24 maxlen: 24
46.227.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943098219 (0x3836896b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Jan 1 06:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef65ed8b3b04d1c9fd8df145d8b0a4ffe66ecb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:15:ad:3b:fd:f2:8e:57:9d:b5:9c:79:e5:
6c:35:59:b2:07:37:2a:a5:57:c3:3e:e3:a3:d8:53:
da:0f:21:8b:4b:fc:84:29:63:98:51:22:58:91:67:
36:26:e7:ce:f6:91:72:df:b2:14:df:dd:29:a9:0b:
22:cd:d5:68:80:3d:4c:89:88:30:6e:0a:1b:5c:c2:
46:b8:3d:e4:de:de:c1:84:94:dd:f6:a3:36:03:8d:
48:82:24:b0:4a:1e:8d:f8:ea:80:a3:44:df:8a:64:
ef:72:eb:5d:e8:06:f7:9d:20:36:b4:61:4a:5c:4a:
b8:7a:4a:53:11:10:28:2e:64:7a:f6:e4:e4:46:4b:
14:f9:9d:73:a0:ae:da:6a:8a:88:0b:91:35:8d:74:
df:5e:75:ba:40:f8:b2:11:6c:0c:19:df:bd:fa:9e:
71:b3:bf:12:86:13:04:58:93:f2:13:8f:98:59:f8:
2e:78:5e:3f:5b:92:b6:df:a1:9b:b5:bf:b2:f9:26:
98:0e:3e:77:9a:e4:33:97:c4:50:5d:75:73:4d:3d:
45:b8:13:41:7a:8b:91:91:95:41:6e:85:fb:e3:90:
eb:b1:99:a4:3c:4d:0f:80:b7:72:e3:7f:e6:18:a7:
ba:5d:46:e4:94:54:e8:9c:3b:c0:ef:92:25:36:0a:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:65:ED:8B:3B:04:D1:C9:FD:8D:F1:45:D8:B0:A4:FF:E6:6E:CB:75
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/72XtizsE0cn9jfFF2LCk_-Zuy3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.240.0/21
185.7.168.0/22
Signature Algorithm: sha256WithRSAEncryption
08:39:35:a6:74:e7:ac:ca:25:f4:ce:01:dc:6a:bd:14:ee:10:
2d:41:bf:21:58:75:fe:d8:0f:b9:26:20:0d:1c:82:84:a3:31:
08:e0:08:94:ad:07:cf:0f:14:fa:ca:10:7d:d8:ea:cf:db:55:
22:f9:ff:a6:95:96:c6:10:58:5d:97:00:2f:1c:a4:23:95:c4:
44:2d:99:dd:34:71:1b:cf:5f:1e:de:85:c8:ca:be:12:6c:0a:
25:90:c7:02:71:18:cc:bf:c2:bf:9c:fd:92:7d:32:21:6b:93:
28:b7:43:74:a6:2a:06:91:e6:08:50:34:06:29:07:c4:99:24:
c2:60:f5:f1:e5:a0:3d:3a:65:d8:e5:7d:7a:ee:3d:0a:e2:71:
ff:85:8c:18:3c:6f:e1:d6:0f:48:1e:21:0a:7f:bf:10:7a:d8:
a4:73:a2:37:77:85:05:77:01:11:e6:88:cd:0c:d6:ef:d8:04:
bf:de:2b:14:c4:33:1e:de:ae:74:f9:41:46:98:56:e5:0e:c2:
99:70:62:2b:38:53:5e:28:01:bc:4f:73:c8:6a:06:b6:62:47:
be:86:2f:f2:32:d4:05:b3:6e:e5:1b:c0:6d:19:e0:9d:c4:b1:
8c:c1:81:9c:5f:32:7d:56:0a:41:c3:56:a7:8d:88:24:b4:df:
1b:5f:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:17 2025 by rpki-client