Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/EQ5bR5OqsmFRi5xEeoN6eqRUlCs.roa
File: EQ5bR5OqsmFRi5xEeoN6eqRUlCs.roa (raw, json)
Hash identifier: pqULg+5xs85zFHTAtHtofe7iArftNn12UFZd4ahcKds=
Subject key identifier: 11:0E:5B:47:93:AA:B2:61:51:8B:9C:44:7A:83:7A:7A:A4:54:94:2B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01858750DD94D2201ADF603025BB1F038535
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/EQ5bR5OqsmFRi5xEeoN6eqRUlCs.roa
Signing time: Fri 06 Jan 2023 13:41:41 +0000
ROA not before: Fri 06 Jan 2023 13:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:50:dd:94:d2:20:1a:df:60:30:25:bb:1f:03:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 6 13:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=110e5b4793aab261518b9c447a837a7aa454942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:57:68:ba:57:df:9e:7e:2f:5e:30:90:df:
c5:6c:6e:cc:da:94:3d:5d:47:de:9d:b8:a3:3b:8b:
37:1e:78:85:68:8a:f3:fd:0c:1b:4e:1e:6e:e0:ca:
02:20:03:77:9e:01:46:d4:2e:26:95:e7:b3:e2:76:
c1:99:db:1a:77:da:c5:90:c7:6a:57:95:9d:2e:a0:
b6:6d:a9:c8:ed:67:c9:95:7d:4e:f3:50:fd:3b:f1:
ce:64:9a:27:4e:e1:00:25:44:31:ef:f0:b8:11:1f:
20:7f:5e:5a:1c:13:4f:03:95:19:a9:28:4e:d2:10:
63:e7:fd:1c:23:bd:59:90:26:83:0d:cd:5b:65:54:
8b:3e:4a:59:b5:a0:73:40:31:06:c4:be:ea:4e:e9:
b2:f3:6d:ce:44:05:6d:2a:0e:b5:50:46:4c:85:b8:
5f:a4:39:31:de:6b:eb:48:05:58:c5:6c:66:50:81:
c8:fe:f4:c7:b5:33:95:4c:43:a5:38:6c:bd:0c:22:
91:d4:e1:c1:c2:f8:02:1d:0a:1f:03:26:c3:87:b2:
88:da:d5:c3:74:49:c8:db:f5:aa:ca:f4:ec:f6:98:
56:6d:72:60:f9:92:b2:7c:14:f2:85:60:7c:e8:be:
09:bc:68:e2:c6:fe:a1:61:dc:e0:58:95:b5:75:b9:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0E:5B:47:93:AA:B2:61:51:8B:9C:44:7A:83:7A:7A:A4:54:94:2B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/EQ5bR5OqsmFRi5xEeoN6eqRUlCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.201.0-37.128.203.255
46.23.96.0/24
46.23.98.0/23
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
12:20:31:7b:3d:5b:f7:16:62:54:2c:a1:39:d1:11:11:80:27:
c5:b9:aa:00:3f:af:a7:a3:66:95:c4:f2:65:27:59:71:32:dc:
ea:23:33:a9:ad:82:79:cf:b3:a0:b1:40:bb:a2:4a:4b:0c:4b:
2f:a1:77:c4:04:84:fa:d6:34:c9:2b:54:81:70:d8:c6:36:28:
c4:f8:bf:98:a7:fb:62:d0:8a:cd:68:4c:db:4d:90:6d:07:e6:
29:c8:a9:24:0c:89:67:f5:3f:fb:13:d3:63:3b:61:51:34:99:
ee:f1:5c:0f:67:89:3f:1a:49:0d:e2:02:d1:fa:de:09:a4:64:
c3:f6:53:fb:f9:81:cf:55:97:e6:18:24:c4:69:ce:57:04:56:
26:11:3f:3c:f6:bd:d2:ba:51:92:5c:b3:6c:a2:ee:66:73:df:
9d:a7:d0:22:63:86:69:7f:dc:17:4c:43:c3:0b:d4:8f:bf:ce:
e5:e2:19:bd:87:14:6e:fb:57:d3:5b:b1:3c:e6:7a:0d:9d:40:
d5:c0:23:b1:bd:d5:7a:c8:2c:99:bc:c6:64:e3:aa:f1:39:a7:
f3:b5:00:f3:b8:73:e4:85:5a:3e:88:93:dd:59:76:59:c3:a3:
5b:c4:d7:8b:67:ce:3f:f4:b6:56:a7:b7:b8:c2:bf:7a:03:53:
ae:52:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:54:57 2025 by rpki-client