Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/7H-ZfqpPIql6Jf8-tLkWjiqewxg.roa
File: 7H-ZfqpPIql6Jf8-tLkWjiqewxg.roa (raw, json)
Hash identifier: csCr62JU0OGJFyZfHnpH4kETBaLvwcT/2Sk5N6a4/PI=
Subject key identifier: EC:7F:99:7E:AA:4F:22:A9:7A:25:FF:3E:B4:B9:16:8E:2A:9E:C3:18
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 3532E090
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/7H-ZfqpPIql6Jf8-tLkWjiqewxg.roa
Signing time: Sat 01 Jan 2022 11:57:31 +0000
ROA not before: Sat 01 Jan 2022 11:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51601
IP address blocks: 176.56.170.0/23 maxlen: 24
176.56.176.0/22 maxlen: 24
176.56.190.0/23 maxlen: 24
195.189.120.0/22 maxlen: 24
185.65.174.0/24 maxlen: 24
193.33.70.0/23 maxlen: 24
185.65.175.0/24 maxlen: 24
87.239.184.0/22 maxlen: 24
2a03:9d40:5100::/40 maxlen: 48
2a03:9d40:5000::/40 maxlen: 48
2a03:9d40:ff00::/40 maxlen: 48
2a03:9d40:2100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892526736 (0x3532e090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Jan 1 11:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec7f997eaa4f22a97a25ff3eb4b9168e2a9ec318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:1e:89:03:a4:c7:fa:a2:1d:58:f3:fa:00:
b0:0e:ba:87:0a:81:fe:10:a0:fd:74:e4:b8:70:bc:
79:3c:fe:8c:47:29:5b:dd:0b:18:9b:1d:df:43:3f:
43:f4:8e:ef:fd:0f:ab:ee:ce:26:b4:6d:74:26:f2:
58:88:40:7f:ec:8e:19:5e:c6:43:f2:48:34:b8:77:
c5:86:3a:c8:d8:dd:bd:9b:ab:de:90:f5:5d:17:7e:
7e:6d:75:fe:6f:5c:aa:1c:3a:b3:d6:07:6f:8e:bf:
86:14:fc:4a:5f:7b:05:c8:52:70:c6:fe:0e:8f:4f:
e5:c3:4e:2a:88:17:22:3a:b0:30:49:39:b1:a6:86:
64:17:02:9f:c3:12:8f:a6:69:e9:59:f6:14:20:84:
4f:d6:ae:b2:7a:f1:4d:bd:3d:65:a0:fd:c7:c2:1b:
2c:dc:f9:ab:1e:bf:0a:ca:c2:84:f5:f3:da:cf:81:
88:dc:b2:e7:ea:7a:6d:d6:cb:43:15:bf:ff:fa:1d:
ec:28:fb:29:01:d6:6b:39:36:62:43:11:e4:91:28:
6a:38:83:4c:13:e2:8b:1f:68:dc:af:9a:7f:cc:82:
94:e1:1f:d2:b2:18:06:f4:52:96:16:d5:2e:85:f9:
7c:13:65:82:43:06:f5:2a:14:21:ff:f0:60:f2:b2:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:99:7E:AA:4F:22:A9:7A:25:FF:3E:B4:B9:16:8E:2A:9E:C3:18
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/7H-ZfqpPIql6Jf8-tLkWjiqewxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.184.0/22
176.56.170.0/23
176.56.176.0/22
176.56.190.0/23
185.65.174.0/23
193.33.70.0/23
195.189.120.0/22
IPv6:
2a03:9d40:2100::/40
2a03:9d40:5000::/39
2a03:9d40:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
7a:f7:7b:46:bb:57:8e:6f:ae:d2:58:12:e5:ce:9d:44:0f:76:
b8:67:61:d5:ee:42:b3:de:e6:b8:a7:31:71:1b:b6:ab:59:bd:
f1:6a:51:25:b1:42:9f:e4:d4:76:4b:08:08:3d:10:5a:61:e7:
a0:d9:ac:ba:60:c6:93:14:24:e8:41:dd:b8:b3:71:1b:38:1e:
f8:e0:65:45:8c:e9:ea:d1:f4:3f:11:a3:b8:cb:9d:a1:18:a6:
d8:55:36:6a:02:5f:ce:e7:00:af:69:55:a7:8b:bb:4c:1e:b2:
5e:73:93:75:86:9b:1e:50:b4:5c:b5:92:57:39:cf:fc:a8:55:
3c:29:b5:f4:e8:b1:57:e3:ed:60:95:9b:d9:eb:6e:2e:31:a6:
f3:b1:41:c5:4f:03:4a:aa:78:22:0a:27:23:39:eb:c9:75:37:
c8:56:79:5b:90:0e:a2:bb:62:fa:2e:f0:2e:c0:38:cb:86:f5:
cc:9d:33:9b:7b:fa:21:88:63:78:33:bb:64:51:0c:c5:fb:0d:
79:81:72:2b:25:1d:31:64:33:61:47:91:34:a0:6a:34:8d:ec:
af:b6:b2:58:1f:b7:2b:a2:e0:40:4a:29:e7:f0:2f:46:4a:40:
8a:75:9d:17:08:2e:30:a0:61:23:30:12:f7:2e:2e:db:7c:35:
8f:f0:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:37 2025 by rpki-client