Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/4N__7Lb-RkyzXId8xS63ObNzyRE.roa
File: 4N__7Lb-RkyzXId8xS63ObNzyRE.roa (raw, json)
Hash identifier: ruiaCbkxLITuY01Uxo7KRif8JBq3X+G7Iv/9U9BLIhI=
Subject key identifier: E0:DF:FF:EC:B6:FE:46:4C:B3:5C:87:7C:C5:2E:B7:39:B3:73:C9:11
Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial: 01856D93F874F66531FB9F3C52B4C7E0C799
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/4N__7Lb-RkyzXId8xS63ObNzyRE.roa
Signing time: Sun 01 Jan 2023 13:44:51 +0000
ROA not before: Sun 01 Jan 2023 13:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39449
IP address blocks: 77.95.160.0/21 maxlen: 21
178.20.80.0/21 maxlen: 21
88.151.80.0/21 maxlen: 21
185.52.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:f8:74:f6:65:31:fb:9f:3c:52:b4:c7:e0:c7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Validity
Not Before: Jan 1 13:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0dfffecb6fe464cb35c877cc52eb739b373c911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:e7:d2:ca:a0:17:d3:58:6a:f5:3c:f9:8e:
62:a2:ca:59:e7:b3:28:66:26:da:41:3f:c2:54:36:
3d:b9:ef:9c:ec:e1:c4:7a:58:fb:b0:0a:71:27:b7:
63:db:20:ae:73:82:ea:cd:0e:ef:ea:f7:b1:64:ca:
2e:9c:dc:68:f7:bf:e4:5c:40:90:26:53:3f:d6:2a:
e3:7a:2c:f2:05:06:9f:23:10:fd:06:56:12:da:f4:
69:1f:01:c3:3d:07:1b:34:7d:f5:03:e5:d5:9b:18:
8b:8c:b9:3d:77:ad:75:07:a4:69:8b:58:2e:a9:63:
fc:59:82:5a:e6:19:e0:ca:66:28:6c:11:ca:a1:1c:
e7:bd:b3:8d:f7:ef:e4:3a:ed:82:b6:f6:10:36:5e:
21:71:33:71:bd:fd:29:3d:0f:a2:6c:fc:20:af:0b:
68:fb:b9:73:b8:8f:34:2d:da:87:41:f7:76:37:7f:
d7:fb:2f:5c:a9:18:b9:f6:d3:12:5f:f7:be:00:2d:
dd:9b:dc:0e:3b:8d:a8:54:70:46:65:28:69:aa:4f:
a3:fc:7d:67:57:a9:c1:d2:c0:04:47:ff:37:7a:a9:
26:08:65:9f:da:3e:1e:70:b3:91:53:3a:40:bd:f4:
0a:60:9e:1e:1b:ef:c1:23:21:7a:9a:8b:b0:89:8d:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:FF:EC:B6:FE:46:4C:B3:5C:87:7C:C5:2E:B7:39:B3:73:C9:11
X509v3 Authority Key Identifier:
keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/4N__7Lb-RkyzXId8xS63ObNzyRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.160.0/21
88.151.80.0/21
178.20.80.0/21
185.52.92.0/22
Signature Algorithm: sha256WithRSAEncryption
05:1f:da:65:69:a7:e7:94:4e:06:1a:89:b0:aa:92:b6:fc:6c:
ca:d0:02:28:ac:93:45:f4:af:d9:43:2f:c5:7b:21:c3:aa:57:
44:c0:b2:1f:2d:bb:8d:81:88:0b:dd:43:8f:85:ed:8e:bc:63:
ab:6f:df:a1:2f:96:38:da:7f:2b:64:91:6b:ed:11:ff:fc:59:
df:9f:7b:e2:2b:67:b7:6a:0e:75:54:6b:e6:46:4f:f1:7f:fe:
4c:1c:48:fb:d9:da:09:06:df:f5:a7:c5:96:98:f0:4a:00:d7:
8e:9a:6d:d5:96:f8:97:18:0d:af:ab:16:ea:92:3f:c0:c6:e1:
61:dd:0f:7a:d1:26:b3:0c:23:96:0f:be:e3:00:1b:d9:00:7f:
6e:31:54:da:05:5d:76:f5:dc:1a:18:34:37:e3:e2:ee:29:ec:
4f:aa:45:01:78:4b:e7:0b:a1:a3:14:40:7f:ed:98:9f:89:8b:
6e:97:98:80:52:b7:36:a7:52:58:d7:7f:37:5d:2b:7c:6d:98:
18:5c:01:0b:02:41:de:ec:ec:6f:2b:6a:14:bd:c4:e1:43:6f:
cc:06:57:de:74:16:00:4a:a3:28:54:cb:29:fc:63:87:05:52:
6b:45:ac:ab:9b:d1:ff:3c:82:ef:69:6a:81:48:c0:5a:9f:09:
c5:1d:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:20 2025 by rpki-client