Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/E3JB0evJPd1a59bK8wFuWm6nVpI.roa
File: E3JB0evJPd1a59bK8wFuWm6nVpI.roa (raw, json)
Hash identifier: 6JkApQvuuXZdbOXeNRQlJqjAWdqKOadKISAxiEJBJZo=
Subject key identifier: 13:72:41:D1:EB:C9:3D:DD:5A:E7:D6:CA:F3:01:6E:5A:6E:A7:56:92
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 01856C0A3D764AE808947E1073583C9AF8CD
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/E3JB0evJPd1a59bK8wFuWm6nVpI.roa
Signing time: Sun 01 Jan 2023 06:34:48 +0000
ROA not before: Sun 01 Jan 2023 06:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57256
IP address blocks: 89.187.217.0/24 maxlen: 24
89.187.216.0/24 maxlen: 24
89.187.219.0/24 maxlen: 24
89.187.218.0/24 maxlen: 24
89.187.220.0/24 maxlen: 24
89.187.223.0/24 maxlen: 24
89.187.222.0/24 maxlen: 24
89.187.221.0/24 maxlen: 24
185.176.145.0/24 maxlen: 24
185.176.144.0/24 maxlen: 24
185.176.147.0/24 maxlen: 24
185.176.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:3d:76:4a:e8:08:94:7e:10:73:58:3c:9a:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Jan 1 06:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=137241d1ebc93ddd5ae7d6caf3016e5a6ea75692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:8d:ed:d9:2c:e4:e3:e5:45:7c:01:60:d0:
09:19:b9:04:37:ec:7e:af:ab:86:96:b4:90:41:92:
45:42:cc:60:4d:0f:c6:16:49:bb:9d:16:f8:d8:48:
2a:17:dd:79:3c:df:02:64:a1:66:39:b6:d6:98:e3:
fb:e3:46:4b:4a:9b:3d:6f:f7:5d:7b:f1:48:76:59:
f1:86:63:e0:b9:c8:1b:ea:ed:02:5c:c5:66:26:e6:
6e:58:8e:3c:01:fd:1d:94:58:00:ff:e3:b2:3c:de:
92:fd:cc:a9:38:95:9c:5f:fd:f1:71:41:ff:72:3d:
ab:57:31:12:2b:44:bd:ee:b4:33:f2:c8:11:7b:d6:
1f:cf:7f:aa:5a:49:68:e8:1f:7a:9b:7f:b8:82:04:
20:f3:ec:87:79:fb:8e:59:d4:4f:e7:6e:0c:93:b3:
18:ce:0d:07:cc:01:fa:bb:b1:f9:23:2f:ef:85:63:
5c:42:57:ae:8e:db:3f:1c:9d:d5:63:30:34:8e:15:
1b:bc:9c:79:af:04:61:97:f5:58:51:d0:c3:f4:d4:
b0:18:3b:ae:06:ed:4b:50:7d:b7:ca:62:16:93:c2:
87:7e:3c:f7:14:af:67:99:f7:d9:e0:9a:b0:28:10:
e4:5e:a2:12:7e:f5:23:43:9c:c2:49:e3:f1:79:90:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:72:41:D1:EB:C9:3D:DD:5A:E7:D6:CA:F3:01:6E:5A:6E:A7:56:92
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/E3JB0evJPd1a59bK8wFuWm6nVpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.216.0/21
185.176.144.0/22
Signature Algorithm: sha256WithRSAEncryption
51:e5:7a:da:0d:c4:fe:89:87:e1:b9:53:f7:04:0a:bc:ff:77:
81:b2:ab:24:d7:5c:01:1e:3b:d4:b1:f3:79:d8:6d:da:3d:70:
18:2b:df:da:d2:1d:bf:45:8b:c1:44:bd:b5:28:4e:3e:ea:ef:
23:b5:25:55:25:51:79:b5:da:0c:b1:4d:55:e4:eb:32:e7:b2:
e2:cb:4c:97:a4:8d:d8:75:00:2f:f6:eb:24:e1:8d:17:50:37:
aa:d7:42:2c:1c:bd:7c:aa:e8:96:01:62:32:1c:0f:99:cb:4c:
72:09:0b:6f:a9:a7:80:b4:5c:7c:46:c5:1a:b8:14:25:86:86:
72:e6:31:48:c1:96:17:b3:67:f3:5a:71:64:13:1d:68:4e:f4:
31:4f:a4:3f:b4:1f:f9:ec:71:1d:e5:67:6f:2e:a6:b6:51:dc:
90:53:ce:52:27:5e:d2:fe:03:56:dd:83:77:e5:94:62:8f:a3:
1d:3a:ff:b1:1f:60:3a:ce:61:4b:82:74:14:4a:13:ee:b4:6d:
d7:83:41:8a:16:12:fb:08:b2:24:34:55:10:e8:eb:61:06:b5:
76:1f:c1:6e:01:b1:bc:fe:06:98:cf:3a:61:ae:da:45:92:58:
a7:d5:ab:00:76:64:65:ac:65:a7:a0:10:35:b6:fd:5d:50:1c:
4c:69:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:44 2025 by rpki-client