Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/7uDa_DOBOkeoaJQrcbJ6aMYRuMw.roa
File: 7uDa_DOBOkeoaJQrcbJ6aMYRuMw.roa (raw, json)
Hash identifier: czy5R4bT887pVwC7plYg65aPFWJ7ImnsDiSXNHXsSlw=
Subject key identifier: EE:E0:DA:FC:33:81:3A:47:A8:68:94:2B:71:B2:7A:68:C6:11:B8:CC
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 0B628F75
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/7uDa_DOBOkeoaJQrcbJ6aMYRuMw.roa
Signing time: Sat 01 Jan 2022 13:59:38 +0000
ROA not before: Sat 01 Jan 2022 13:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 37.46.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191008629 (0xb628f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jan 1 13:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eee0dafc33813a47a868942b71b27a68c611b8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:61:56:13:bb:d1:0b:f5:1c:3f:18:c3:b4:6f:
ed:cf:20:a9:d6:fa:09:cb:31:2b:da:41:a6:bf:2f:
26:cf:4b:87:46:c7:e3:dd:a1:f8:56:62:bd:33:00:
d7:46:4e:99:71:f7:78:9f:bb:8f:54:78:a9:6b:2e:
74:6c:e5:e7:3c:8c:e4:14:b9:5f:56:c8:d7:d8:ff:
0e:0b:c5:2a:f9:4b:96:57:68:14:9f:a3:73:85:94:
a5:68:59:52:24:83:f1:d0:00:90:98:50:ef:92:82:
34:ad:db:75:54:94:de:e8:b4:50:f5:cf:69:fa:88:
6a:63:5a:42:94:bf:f1:d4:a3:54:7f:0f:a1:29:29:
70:14:ba:32:de:20:d6:52:3f:02:e8:4a:01:73:29:
83:78:17:17:21:bc:97:ac:a2:b5:03:04:af:fa:d3:
5e:c4:5b:19:7a:9f:7d:be:9e:11:19:08:e0:2b:24:
00:43:02:75:b6:fa:ee:f8:7e:e3:33:22:76:03:12:
b9:38:8e:97:91:26:c7:d0:44:ca:e7:12:b4:ea:ef:
a9:02:6f:78:b1:88:73:9b:70:26:b1:91:14:c0:ba:
4a:4b:b3:e5:8d:74:20:99:38:1e:03:06:a8:3f:bb:
79:55:99:e2:d9:bf:d3:b1:dc:ff:0a:56:66:df:2a:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:DA:FC:33:81:3A:47:A8:68:94:2B:71:B2:7A:68:C6:11:B8:CC
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/7uDa_DOBOkeoaJQrcbJ6aMYRuMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:61:86:1e:09:b3:4f:ed:82:9d:40:9b:11:f3:57:ae:07:3a:
15:92:84:8d:54:c1:4a:9f:d8:e2:ff:04:25:df:bb:42:53:eb:
10:33:e4:24:7f:12:fa:de:b7:f9:f1:b7:41:1c:f5:68:ae:64:
26:8d:cd:f1:77:03:c6:fa:c7:08:77:dd:8a:85:da:0b:d2:01:
11:21:da:f5:60:54:b7:06:90:1a:fe:64:cc:82:b7:2c:87:72:
1e:3f:b0:aa:3b:de:6b:c6:72:a7:fd:84:e1:a8:48:66:19:7e:
5f:b5:fc:3a:6e:d3:ee:d1:fa:5b:60:e0:23:47:2e:fa:22:ba:
73:1c:c2:91:54:c4:8a:16:98:1c:c7:c2:34:68:18:8c:ef:f3:
5a:15:74:87:70:55:70:2e:e1:b7:3c:e0:b3:55:78:65:ae:5d:
95:19:d5:cf:e1:76:92:a0:fd:a0:18:d0:1d:30:2b:93:b1:d6:
78:b0:65:f8:8e:1e:84:7b:24:0e:72:5d:8f:7d:36:4b:0f:ab:
42:d4:c9:1b:6b:a2:70:c3:b5:8c:1a:3c:24:5e:14:89:a0:a6:
26:30:1d:e2:e9:60:c1:bc:1e:26:94:c4:48:73:88:2b:6d:dd:
f9:66:49:cd:c2:9d:fc:52:e6:f1:74:bb:06:65:1e:28:2f:0e:
55:16:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:07 2025 by rpki-client