Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EgNOYlq9qDuy7JyVXxWlHEDIn0c.roa
File: EgNOYlq9qDuy7JyVXxWlHEDIn0c.roa (raw, json)
Hash identifier: pGfnhzbn87sidTDw99FCbPtS8dWpfD2e50fzIHEgnAY=
Subject key identifier: 12:03:4E:62:5A:BD:A8:3B:B2:EC:9C:95:5F:15:A5:1C:40:C8:9F:47
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 43314587
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EgNOYlq9qDuy7JyVXxWlHEDIn0c.roa
Signing time: Tue 08 Mar 2022 07:50:56 +0000
ROA not before: Tue 08 Mar 2022 07:50:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43893
IP address blocks: 192.165.66.0/24 maxlen: 24
194.103.221.0/24 maxlen: 24
194.71.224.0/24 maxlen: 24
192.165.30.0/24 maxlen: 24
194.71.161.0/24 maxlen: 24
194.71.162.0/24 maxlen: 24
194.132.80.0/24 maxlen: 24
193.234.52.0/24 maxlen: 24
194.132.82.0/23 maxlen: 23
193.234.53.0/24 maxlen: 24
192.121.13.0/24 maxlen: 24
194.132.30.0/24 maxlen: 24
192.121.62.0/24 maxlen: 24
192.71.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127302535 (0x43314587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 8 07:50:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12034e625abda83bb2ec9c955f15a51c40c89f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:54:10:ab:8c:9b:fe:f6:a8:aa:8a:2a:98:
00:a7:9b:c5:81:1f:1e:db:89:7a:27:5d:d3:81:fe:
02:dc:2a:d7:9c:07:55:3b:14:c2:e2:96:03:fd:bc:
5c:1a:b0:5c:30:4d:f7:88:4a:6e:e6:16:2f:cb:69:
55:60:5d:9a:45:b5:9f:58:9e:97:3d:fe:98:4e:61:
5e:fd:e7:37:f2:f2:00:3e:90:d1:05:2d:5d:d0:6e:
21:67:16:04:c6:62:c4:ea:e0:e3:93:0f:61:d6:49:
77:fe:72:5f:4c:7c:8b:57:42:36:b0:be:52:35:89:
43:9c:b2:68:c6:f2:73:80:8d:18:e7:1c:ce:3f:09:
d2:e3:33:22:72:6a:f9:57:02:b8:3a:fe:99:6f:ed:
ce:b7:ec:be:21:ce:ca:a9:ad:79:4b:ab:0f:04:9a:
1a:94:a8:0f:f6:b0:ac:48:51:2c:a4:1a:34:5e:29:
22:bd:ec:6f:35:59:2a:70:18:72:d4:a8:88:23:c2:
48:ba:1d:89:f0:2e:ac:6f:1d:ce:eb:7d:dc:1a:41:
87:27:4e:48:2f:3a:26:fe:43:1d:df:93:f8:f5:bf:
8d:5c:c6:6e:ce:86:8d:0c:bc:00:90:88:f3:75:e7:
d4:d7:79:bd:6e:0b:09:b9:35:6c:5f:d0:ea:61:f4:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:03:4E:62:5A:BD:A8:3B:B2:EC:9C:95:5F:15:A5:1C:40:C8:9F:47
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EgNOYlq9qDuy7JyVXxWlHEDIn0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.58.0/24
192.121.13.0/24
192.121.62.0/24
192.165.30.0/24
192.165.66.0/24
193.234.52.0/23
194.71.161.0-194.71.162.255
194.71.224.0/24
194.103.221.0/24
194.132.30.0/24
194.132.80.0/24
194.132.82.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5c:4a:b4:94:0b:67:79:e8:4b:42:d2:9f:3a:6a:4d:2f:67:
ed:a6:11:26:c3:b2:dd:ea:f9:89:af:76:c2:c8:0f:99:9a:1f:
b5:31:1c:47:d9:ca:c1:e7:4e:4a:58:41:56:6d:d3:25:8e:ac:
b6:14:3c:68:89:1c:ce:e3:9e:b4:8f:89:f9:66:bb:c9:bb:c5:
55:a5:05:ce:d6:2d:a2:db:4c:d9:88:1e:e9:2b:e2:51:f5:87:
14:fe:fc:94:64:e8:38:14:99:44:c5:86:cc:e5:04:25:e9:36:
23:2a:96:4e:78:9f:55:a0:3d:91:08:d3:ef:02:ae:cf:c5:7e:
85:d8:e2:e7:ef:ce:8a:ca:43:dd:0e:11:1d:30:73:c5:01:89:
f0:1c:ad:5a:f0:62:50:71:f8:77:65:df:81:0c:50:6a:0e:80:
8d:71:1c:9b:02:e0:e4:f9:69:15:6a:44:25:11:d3:e7:21:c3:
da:23:c1:b6:17:32:3b:b0:be:3c:3c:25:88:af:90:d9:75:20:
61:48:23:ba:14:98:58:74:bb:ad:72:cf:9d:5a:a1:5d:3d:38:
6e:e8:b4:cc:d0:fe:28:52:07:b7:20:15:dd:b3:38:b0:6d:e0:
5e:c7:69:c0:df:f5:d2:c5:2d:0e:06:95:d4:86:c4:ae:06:da:
cb:11:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:49 2025 by rpki-client