Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/e3hOENhturcK_89V4qHXv3fmtjA.roa
File: e3hOENhturcK_89V4qHXv3fmtjA.roa (raw, json)
Hash identifier: heb7TR+Unsfxm5AyJCudNYwbBuhk3kIqNCjTxIMU8MI=
Subject key identifier: 7B:78:4E:10:D8:6D:BA:B7:0A:FF:CF:55:E2:A1:D7:BF:77:E6:B6:30
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 01825E8C871C1D52CCC09B86F906D5BBCB57
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/e3hOENhturcK_89V4qHXv3fmtjA.roa
Signing time: Tue 02 Aug 2022 12:34:04 +0000
ROA not before: Tue 02 Aug 2022 12:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33869
IP address blocks: 217.113.128.0/20 maxlen: 20
194.116.138.0/23 maxlen: 23
194.114.148.0/22 maxlen: 22
194.150.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:8c:87:1c:1d:52:cc:c0:9b:86:f9:06:d5:bb:cb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Aug 2 12:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b784e10d86dbab70affcf55e2a1d7bf77e6b630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:d0:c7:e5:5e:3e:a1:f6:21:b9:6a:5a:41:
7e:87:bc:34:0a:ee:ce:ee:cc:ed:37:e1:eb:57:f8:
57:40:2b:ec:2c:e0:4f:16:30:24:68:e9:cf:77:67:
7e:52:a7:11:a5:fd:4f:c8:75:e6:7e:d0:7f:9f:7d:
b7:97:a2:9d:68:cb:33:9e:1d:0f:68:0f:6d:c6:5d:
0f:61:c5:a6:f8:10:04:b0:a9:ef:88:e3:8f:87:9d:
7b:a2:7a:0d:80:23:43:1d:60:44:f9:ac:f4:eb:ed:
63:b2:d9:3c:a4:95:3f:e1:8b:8f:8b:66:ac:98:c3:
0f:eb:bd:13:d9:a9:7a:90:54:f9:e5:1f:70:f6:5f:
4d:7e:df:58:89:4a:2a:73:cc:a2:28:15:ea:28:18:
dc:93:33:80:3d:78:d6:ec:9d:9d:24:04:00:46:18:
02:2d:2b:d1:c4:8c:6e:59:4f:9d:33:aa:57:07:53:
44:3a:df:1b:41:5f:00:5c:46:48:25:81:b9:e1:2d:
e0:aa:4d:5b:31:b4:be:8a:d3:7f:52:07:47:a6:a8:
dc:b0:cc:0e:5f:be:db:ff:4d:55:93:d2:cf:ef:36:
6a:2e:c6:07:c1:58:7a:80:46:cb:67:21:de:b2:a2:
a5:e4:27:47:2d:a2:75:6a:ea:2e:6c:46:c7:e4:3b:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:4E:10:D8:6D:BA:B7:0A:FF:CF:55:E2:A1:D7:BF:77:E6:B6:30
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/e3hOENhturcK_89V4qHXv3fmtjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.148.0/22
194.116.138.0/23
194.150.206.0/23
217.113.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:4b:e9:4b:37:3b:d4:25:cd:24:0a:55:b7:df:47:64:40:de:
7e:cf:a9:87:20:9e:00:09:10:ea:f8:6e:76:29:ba:3f:60:bc:
39:8f:98:d2:c4:32:19:06:33:5f:72:5b:cf:a4:95:8f:7f:99:
94:34:47:7d:fc:be:8b:9b:f2:eb:51:bb:91:2d:95:a2:e3:8c:
c5:da:e9:45:ab:db:e4:25:cb:2e:2d:21:3f:2b:94:b5:2d:3d:
f5:1b:c0:38:7e:88:d4:2f:fe:55:65:91:7b:6f:35:06:08:74:
f7:2e:da:ed:97:2f:32:0f:76:29:a5:ea:35:ce:c8:fc:73:0a:
d2:ad:be:ad:2d:1f:c5:84:48:21:37:5c:3d:c6:6a:64:12:ae:
a4:4e:b9:0c:8a:e7:1e:39:eb:19:b8:5c:8a:92:26:83:09:3b:
9f:17:76:f9:f8:d7:7d:13:60:20:14:80:6b:7e:22:d7:ea:35:
e3:49:c4:e8:5c:e7:19:cb:a3:22:d7:7a:77:ec:bf:e5:42:ed:
53:39:a3:84:39:b0:61:5f:f6:c7:c6:5b:ce:f7:40:09:02:15:
c5:53:09:2e:fd:2e:98:c4:73:aa:86:2b:95:1b:21:41:2e:95:
44:76:6f:7d:51:cb:ed:45:f5:0a:f9:95:2d:a4:bf:b6:23:87:
1c:2b:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:39 2025 by rpki-client