Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/EeOD6qfzQoE5RSRHyMknhutKW7g.roa
File: EeOD6qfzQoE5RSRHyMknhutKW7g.roa (raw, json)
Hash identifier: d/75an6LgClgz9LhrxLotkE2/bTM/bX+FOPqEBVDRoc=
Subject key identifier: 11:E3:83:EA:A7:F3:42:81:39:45:24:47:C8:C9:27:86:EB:4A:5B:B8
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 4D014A
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/EeOD6qfzQoE5RSRHyMknhutKW7g.roa
Signing time: Mon 21 Mar 2022 23:30:09 +0000
ROA not before: Mon 21 Mar 2022 23:30:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51795
IP address blocks: 185.25.36.0/24 maxlen: 24
185.25.37.0/24 maxlen: 24
185.25.38.0/24 maxlen: 24
185.25.39.0/24 maxlen: 24
46.18.246.0/24 maxlen: 24
46.18.244.0/24 maxlen: 24
46.18.245.0/24 maxlen: 24
46.18.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5046602 (0x4d014a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Mar 21 23:30:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e383eaa7f3428139452447c8c92786eb4a5bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:af:33:28:67:e1:29:ba:55:be:84:4a:ca:
59:0c:8c:59:0e:6b:2d:81:79:ea:a0:46:4e:8a:e5:
73:e3:e7:23:58:5a:ff:2d:2c:6e:fa:f4:c0:fb:7a:
34:d6:24:04:5b:c7:01:2e:5d:8c:42:d3:d0:27:92:
79:a4:82:8b:1e:e3:c1:8b:ac:33:6c:90:1f:9e:ba:
75:c8:5f:6d:3f:af:14:ae:48:1e:4b:f0:5e:57:32:
b6:bf:ed:a0:bc:d0:52:e3:f3:df:90:80:52:c1:70:
40:bf:2e:47:c9:52:a3:71:62:20:14:95:7b:e5:96:
71:3f:b4:ef:bf:c6:12:7e:02:9f:e5:4a:25:3d:84:
ae:58:5e:7c:66:cb:97:36:33:30:07:59:25:52:5c:
21:7f:7b:d5:78:01:d6:dc:17:9f:a9:52:aa:e8:4c:
2e:89:7e:f5:19:4e:00:78:eb:77:a3:d9:c0:61:61:
00:8e:a8:18:40:64:d6:8e:f6:ca:66:35:00:36:84:
9a:4c:87:05:72:3b:ff:5c:cd:5c:c1:91:b4:bc:be:
74:cc:6f:5c:f4:a2:28:08:04:d3:a6:a1:e0:45:59:
2e:ee:54:5c:68:1e:3f:a0:61:f3:96:79:31:f0:2e:
c0:eb:76:53:74:5d:72:25:94:60:22:58:5f:e4:53:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:83:EA:A7:F3:42:81:39:45:24:47:C8:C9:27:86:EB:4A:5B:B8
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/EeOD6qfzQoE5RSRHyMknhutKW7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.244.0/22
185.25.36.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:80:e6:32:d3:6a:0d:47:7b:0f:bb:fa:8f:5a:1d:c4:fc:6d:
1b:9d:c0:38:5d:85:fb:ec:f5:5c:36:70:67:68:57:85:d0:28:
75:30:20:20:3c:55:81:25:74:66:0a:92:73:da:26:07:40:0f:
37:20:bc:0f:d0:cb:ed:04:af:c3:f7:58:7e:86:8e:4d:40:75:
0a:9c:54:78:fd:ad:01:fb:87:b0:29:7f:96:58:46:29:5a:fd:
fa:d4:3e:9d:d9:8c:18:ac:89:15:9a:b1:b7:30:20:14:aa:be:
50:34:b1:33:9c:4b:dc:b9:9c:6d:e2:00:39:e0:d4:9a:28:f7:
c5:4f:5f:ed:4c:90:21:66:68:0e:f0:73:d1:c1:d5:b6:b5:02:
b6:f5:fd:7b:b6:a3:d1:1d:1c:91:cc:fe:46:c9:4e:93:80:9f:
90:91:61:7c:c2:15:ed:8a:82:ec:11:bd:ed:41:11:32:23:8f:
36:4b:13:3d:35:08:c7:2b:d4:24:50:26:15:92:8e:22:41:4b:
07:21:f5:2c:5f:8c:2d:b2:c5:3b:a7:48:8e:53:2d:93:86:09:
f7:cb:f3:af:36:cd:4f:7b:8f:d6:45:b2:8d:4f:3c:ed:d6:f2:
8b:31:ed:d6:fb:47:7b:f7:cd:a2:fc:3b:7c:19:71:8a:20:c6:
c9:59:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-fra.rpki-client.org