Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/fJJJYQ9DeuDpgxayzThZNvipiec.roa
File: fJJJYQ9DeuDpgxayzThZNvipiec.roa (raw, json)
Hash identifier: x9Syp0d1+EWl2wBSfgAaKwUWWRTh3/spDVWnJXTg+GY=
Subject key identifier: 7C:92:49:61:0F:43:7A:E0:E9:83:16:B2:CD:38:59:36:F8:A9:89:E7
Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial: 168F75D2
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/fJJJYQ9DeuDpgxayzThZNvipiec.roa
Signing time: Sat 01 Jan 2022 10:58:16 +0000
ROA not before: Sat 01 Jan 2022 10:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50572
IP address blocks: 37.49.240.0/20 maxlen: 20
91.211.169.0/24 maxlen: 24
91.211.170.0/23 maxlen: 23
91.211.168.0/24 maxlen: 24
109.205.216.0/21 maxlen: 21
185.5.20.0/22 maxlen: 22
2a02:1380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378500562 (0x168f75d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Validity
Not Before: Jan 1 10:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c9249610f437ae0e98316b2cd385936f8a989e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:71:9b:18:80:ac:23:5c:8f:b8:b1:90:fb:
88:8c:e0:1f:d5:36:15:ac:95:be:1c:2f:19:a0:a8:
49:4c:85:c8:7c:d2:e0:1c:18:c4:18:a1:92:03:fb:
cf:e4:7e:9a:40:e9:8e:b6:3f:14:d5:f1:26:97:ea:
f4:58:1f:fe:cb:00:3a:21:a6:f1:5c:64:a0:1e:22:
4e:5f:dd:06:a3:ae:75:26:d1:4e:32:fb:14:04:04:
68:3e:6e:2d:52:32:31:a4:b1:34:56:92:82:af:b3:
15:06:44:7e:5c:be:a0:99:40:84:5f:01:c1:2e:48:
e5:42:63:00:68:cd:23:ff:7e:fa:60:00:39:36:90:
a2:c5:3e:b2:f3:ec:4f:e9:f1:4a:61:ef:4a:1b:22:
7f:de:e1:f9:88:85:97:99:c5:c0:be:03:70:cb:b5:
be:3d:64:a2:89:a8:60:23:49:78:1a:31:bd:46:75:
1c:fb:02:e6:08:e8:83:4e:73:ac:3e:c3:53:9e:1a:
83:a9:a9:50:cf:7a:de:0e:f4:7a:ff:32:72:ad:14:
e5:27:b4:52:f1:ab:af:89:45:b0:63:30:59:0a:dd:
ff:68:3d:38:77:95:20:ef:02:a9:26:47:c0:09:21:
23:5b:18:9b:a7:da:b1:71:19:a1:77:c4:f2:37:7f:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:49:61:0F:43:7A:E0:E9:83:16:B2:CD:38:59:36:F8:A9:89:E7
X509v3 Authority Key Identifier:
keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/fJJJYQ9DeuDpgxayzThZNvipiec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.240.0/20
91.211.168.0/22
109.205.216.0/21
185.5.20.0/22
IPv6:
2a02:1380::/32
Signature Algorithm: sha256WithRSAEncryption
92:a2:1f:2e:f5:c5:01:d8:84:55:80:7d:d5:b0:47:18:3e:af:
7a:91:cb:2a:a0:4d:05:10:d4:e1:65:0c:00:88:67:27:dd:99:
e2:61:c1:26:ed:ee:03:a9:ce:c4:f1:14:f7:fe:50:83:03:0e:
02:86:e8:81:f1:02:2b:dd:01:f3:9b:32:f3:83:be:dd:38:b7:
fc:77:18:b0:12:4e:a5:c2:08:5f:e6:e0:bf:8d:fb:d0:be:f6:
75:75:73:f6:9c:dc:1d:45:89:16:b2:4b:dd:5a:6f:e2:81:59:
ee:08:3d:55:1b:8f:27:70:58:d7:c9:a8:b5:b9:68:46:41:6f:
a0:b6:ab:89:f8:a1:74:1f:47:8b:d1:85:c5:0b:11:98:2a:02:
98:0d:44:e4:4f:dd:00:2b:19:4d:54:c8:db:ff:c4:86:6d:c4:
88:4f:31:19:e0:8c:db:a9:d6:9a:cf:1c:74:fa:3e:19:9c:e6:
82:5a:d3:5d:a0:e8:5c:e7:15:b6:93:5d:55:ea:4a:83:cd:cb:
4d:20:eb:7f:6f:48:e6:b5:21:c6:f6:c3:14:88:20:91:ee:f9:
42:e4:ab:b4:c4:29:1a:aa:37:3d:ba:b7:e9:84:2a:c3:99:65:
46:2b:51:8a:97:96:3a:5f:48:dd:fa:a4:dd:50:5b:92:46:df:
dc:30:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:47 2025 by rpki-client