Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/7S-bOcksZ-U0gQglEFV0OJjNHow.roa
File: 7S-bOcksZ-U0gQglEFV0OJjNHow.roa (raw, json)
Hash identifier: pCWIiRrfGNPFgw07wIEdQLoui1Gxb6B/i4MOzxmS2q4=
Subject key identifier: ED:2F:9B:39:C9:2C:67:E5:34:81:08:25:10:55:74:38:98:CD:1E:8C
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 0185E36AB19823E358BB619D325E154C944D
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/7S-bOcksZ-U0gQglEFV0OJjNHow.roa
Signing time: Tue 24 Jan 2023 10:54:58 +0000
ROA not before: Tue 24 Jan 2023 10:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200424
IP address blocks: 45.92.56.0/22 maxlen: 24
185.107.144.0/22 maxlen: 24
2a06:42c0::/29 maxlen: 32
2a0e:1ec0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:6a:b1:98:23:e3:58:bb:61:9d:32:5e:15:4c:94:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Jan 24 10:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed2f9b39c92c67e5348108251055743898cd1e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:c2:d8:48:d3:65:13:50:92:f1:bd:3c:3c:
da:22:0a:67:36:be:92:af:d2:4e:5e:de:6f:5f:d5:
38:1a:0c:8c:c0:4c:80:45:01:e6:71:60:c3:f5:54:
f6:21:a9:94:ce:49:55:01:2a:32:25:09:12:91:3d:
b8:82:aa:94:44:c3:b8:bf:8d:4a:e0:23:cd:e2:c9:
7a:98:f4:42:e4:1c:41:e3:6f:b5:85:f4:6c:8e:54:
c5:c4:3b:ab:1b:52:4f:2b:a4:b2:8a:e8:71:a7:ce:
7c:09:8b:00:07:60:cb:38:09:1f:63:83:02:f3:76:
1a:6a:b4:ec:38:cf:73:22:2b:7f:0e:0a:bc:5b:03:
43:6f:08:d5:17:fd:f5:61:86:54:cf:0f:8f:69:5d:
a1:18:91:00:55:52:3c:a8:cc:de:ce:3f:da:a5:27:
dd:e0:12:0d:13:53:bf:c9:ac:b8:09:38:55:48:d4:
5c:3d:e1:34:15:16:da:e0:9a:1a:83:e5:c6:94:98:
6d:09:c6:f0:59:d8:08:71:d9:58:37:e7:b1:77:19:
44:9e:da:ab:78:74:02:e7:47:29:d3:e3:18:aa:46:
a0:82:2b:ad:a2:0e:d1:0f:e3:df:28:ee:be:32:56:
29:e5:78:e9:08:c4:c6:f2:ff:d1:a3:c5:43:55:96:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2F:9B:39:C9:2C:67:E5:34:81:08:25:10:55:74:38:98:CD:1E:8C
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/7S-bOcksZ-U0gQglEFV0OJjNHow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.56.0/22
185.107.144.0/22
IPv6:
2a06:42c0::/29
2a0e:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
46:ac:33:89:3e:48:f4:a4:12:4f:37:b0:92:2f:8c:eb:f9:98:
99:8d:e6:b5:e5:b2:ef:f4:ae:9f:bb:94:4d:20:dc:80:4e:aa:
8b:17:fb:cc:2a:6b:b7:5f:ff:78:8e:9f:1f:35:5e:50:9c:2c:
c0:82:d3:a2:d9:98:39:00:a8:f6:49:59:e5:da:79:a3:24:f3:
f7:51:7d:7c:f0:e5:f4:86:b2:10:88:f0:b7:d0:73:d9:92:51:
b4:32:70:b6:95:37:a8:09:d4:5a:a2:e0:69:c6:19:7f:da:7f:
ab:64:3a:44:a8:2f:0d:a5:5a:41:95:31:b6:89:55:e3:d5:2d:
44:7b:88:57:38:48:a0:aa:0f:d1:8b:d8:2e:73:71:77:57:32:
0c:da:4e:b7:51:13:d0:cf:32:3a:af:42:09:be:7e:aa:98:eb:
9b:ad:53:98:91:1d:0f:ca:a0:3e:4a:4b:6e:64:2c:19:d2:aa:
22:f4:dc:ef:fd:8f:67:d5:4c:ca:27:bc:24:89:e4:c5:df:de:
dc:28:73:d8:19:e6:14:14:68:1f:41:40:eb:b8:37:67:ac:07:
ef:31:03:e2:76:97:2a:c2:e3:b5:cb:90:6d:69:27:10:90:7c:
ab:5c:d3:7a:d3:6a:71:df:ea:54:da:6a:f3:f4:4f:8f:f3:41:
96:fd:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:16 2025 by rpki-client