Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/7BKbDpUBX2JppZQngyt4DXnKmck.roa
File: 7BKbDpUBX2JppZQngyt4DXnKmck.roa (raw, json)
Hash identifier: 0mQvmKXbbGDuxCJH0MrVPiieDrJwmI6vCZBtpPtDL4Q=
Subject key identifier: EC:12:9B:0E:95:01:5F:62:69:A5:94:27:83:2B:78:0D:79:CA:99:C9
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 018570951820A0046A5F82E836EC9CFB434C
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/7BKbDpUBX2JppZQngyt4DXnKmck.roa
Signing time: Mon 02 Jan 2023 03:44:57 +0000
ROA not before: Mon 02 Jan 2023 03:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 45.83.200.0/22 maxlen: 22
185.114.156.0/22 maxlen: 22
185.229.32.0/22 maxlen: 22
2a03:3a60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:18:20:a0:04:6a:5f:82:e8:36:ec:9c:fb:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Jan 2 03:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec129b0e95015f6269a59427832b780d79ca99c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:ac:7d:7e:3d:47:f0:c9:50:b0:19:68:3e:
36:ec:7d:fa:4e:73:a0:07:60:22:84:ed:64:fb:e4:
22:af:17:d8:d7:0c:4b:4f:e4:dd:40:53:a8:9f:17:
1f:f5:d2:16:f5:93:c9:ce:a0:1b:a7:20:a8:3f:93:
81:fa:88:25:7a:14:b0:19:bd:92:e2:02:2d:83:1c:
e8:87:49:45:fc:35:df:93:70:6a:1d:4f:e7:37:4d:
c7:02:b8:00:43:ff:09:dc:b7:32:22:fc:7d:6f:35:
4f:89:7d:c5:28:17:af:78:51:52:3a:e2:8f:cc:86:
10:a4:a1:1f:cb:44:dd:39:38:f6:d7:57:48:1e:d0:
86:e0:25:45:db:81:48:5f:bd:a4:de:5a:9b:67:63:
cc:8c:a1:38:96:c3:09:7c:b1:9d:b1:c8:2c:49:9a:
3a:2b:de:aa:d7:1f:b9:14:49:2a:d5:91:0f:9c:ff:
5d:22:ef:af:a7:9f:6a:e9:4c:2a:0b:13:87:38:4d:
b5:bd:61:d8:8d:4f:be:a2:5b:b3:17:ff:6c:30:70:
76:06:dc:20:c1:09:5e:71:ab:11:ae:ed:ee:4d:0d:
d7:73:19:96:95:88:73:d3:db:15:e5:f5:c9:a5:38:
50:a4:fa:d9:c8:ef:ef:d4:b4:a4:75:71:f8:12:42:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:12:9B:0E:95:01:5F:62:69:A5:94:27:83:2B:78:0D:79:CA:99:C9
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/7BKbDpUBX2JppZQngyt4DXnKmck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.200.0/22
185.114.156.0/22
185.229.32.0/22
IPv6:
2a03:3a60::/32
Signature Algorithm: sha256WithRSAEncryption
8a:44:8a:48:2e:ce:43:45:79:fe:90:4e:99:b5:d8:d7:79:18:
5c:98:a3:47:44:1f:68:96:d3:65:12:93:1c:4a:ff:98:c6:44:
7b:96:b1:c4:eb:a2:0c:04:e5:10:b2:e3:03:a8:a5:3b:e8:de:
39:a1:7f:1b:cc:4d:f1:0b:d8:b3:f3:96:3f:f9:08:59:c4:d0:
e7:45:38:05:9b:a5:92:77:ea:18:32:a4:d8:ff:26:8e:21:e5:
73:0a:7b:c4:61:fb:59:9e:6d:d4:51:59:12:c5:ed:bd:96:fb:
f9:d6:b7:e5:5d:66:74:9e:2f:2c:23:b8:30:a3:f6:c2:5c:18:
2b:04:67:28:47:91:dc:29:eb:b9:27:9c:9e:c9:80:79:56:43:
eb:7d:e1:45:ae:5c:62:0d:5c:c1:e7:a8:47:ab:d2:4f:db:ec:
70:c8:70:c9:52:14:38:4c:f4:df:f1:8e:34:f8:ba:87:61:e7:
7f:92:4e:a9:f7:95:a6:31:58:b3:07:cf:78:dd:07:82:0c:ee:
4d:2e:1a:c9:33:64:25:f2:6a:67:7b:11:e8:18:a2:b1:e0:86:
29:e8:25:97:d3:b6:1f:e4:5c:8e:09:9d:af:15:fa:18:bd:bf:
46:fb:8b:4c:27:01:58:c5:09:b7:d0:ed:57:d4:33:c9:8b:dd:
b3:2e:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:12 2025 by rpki-client