Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/76HId3oXin8ZSDvOsQGiV1kPISM.roa
File: 76HId3oXin8ZSDvOsQGiV1kPISM.roa (raw, json)
Hash identifier: 9T4rZ4dL1nQwA7tAlFwXVRWM7jaX60NOGNXS2Y7cubQ=
Subject key identifier: EF:A1:C8:77:7A:17:8A:7F:19:48:3B:CE:B1:01:A2:57:59:0F:21:23
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 036DBD61
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/76HId3oXin8ZSDvOsQGiV1kPISM.roa
Signing time: Sat 01 Jan 2022 00:57:47 +0000
ROA not before: Sat 01 Jan 2022 00:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49879
IP address blocks: 185.131.49.0/24 maxlen: 24
185.131.48.0/24 maxlen: 24
185.131.51.0/24 maxlen: 24
185.131.50.0/24 maxlen: 24
185.241.137.0/24 maxlen: 24
185.241.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57523553 (0x36dbd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Jan 1 00:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efa1c8777a178a7f19483bceb101a257590f2123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:1b:f0:9b:a1:62:72:38:98:5f:b3:75:24:
45:e2:e3:1f:ee:2e:6b:6b:86:e2:79:ce:ab:97:1a:
c2:a1:fd:58:32:6c:5e:3d:08:97:90:03:06:8e:fd:
ba:67:09:6b:ce:d0:5f:b2:52:a9:33:dc:df:c0:1b:
9d:bf:e2:36:39:e5:dd:7f:5f:ec:4a:14:82:86:9c:
49:bb:ee:aa:7e:14:5c:f6:d0:5e:ea:31:aa:5f:f6:
6a:11:a7:ba:50:05:6b:66:98:51:d0:5e:1e:f6:45:
d6:0c:a1:cf:be:af:4b:28:de:76:80:c4:35:6a:6d:
62:4f:48:5c:26:6b:44:21:44:79:66:6a:5c:ac:9e:
84:17:f3:0d:a5:60:1f:35:ca:95:29:5c:74:95:3d:
e4:25:82:39:07:d9:9c:55:41:ac:62:b8:a8:00:9f:
f2:ad:c0:4d:e8:fd:75:8e:6b:70:f8:f7:f8:55:15:
a5:13:61:d2:91:03:4e:02:59:74:5a:10:5b:20:be:
ac:2d:9c:56:8b:4e:68:f4:ce:c3:f0:b8:1a:4a:96:
e4:12:e9:3a:6d:b6:a6:71:ec:bf:4a:ca:2b:41:b6:
9a:96:e1:ca:2d:42:13:55:02:a0:07:45:32:90:59:
9e:5c:2e:e6:50:a5:0f:55:f8:d4:d6:07:87:9e:46:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:C8:77:7A:17:8A:7F:19:48:3B:CE:B1:01:A2:57:59:0F:21:23
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/76HId3oXin8ZSDvOsQGiV1kPISM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.48.0/22
185.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:76:96:7f:d3:6f:e7:7b:04:2a:06:e4:dc:9e:fc:1d:5f:2e:
83:70:f5:02:8e:2f:70:03:5c:12:00:45:73:27:6f:53:06:06:
47:cb:9b:3e:5f:7b:3b:b9:de:56:7f:8d:17:52:a5:4c:88:81:
1b:98:88:6d:83:6b:fc:35:01:ea:c4:3a:34:6b:35:ff:bb:28:
66:0b:ba:8b:3a:dd:b1:f5:8e:7e:a0:1a:f0:a4:b8:c7:36:84:
2f:bd:5a:dc:13:4a:c3:9e:80:27:23:66:0c:9f:94:5e:2d:94:
18:1e:2b:82:30:05:05:e5:f9:9e:38:27:9d:5c:9f:1f:1b:e5:
af:69:cf:d4:41:57:bc:39:12:7a:19:88:e4:89:5f:3c:03:7c:
23:81:aa:70:e3:3b:5f:ac:12:c7:df:e3:b5:4a:8d:e7:c3:c7:
af:f8:94:48:24:55:77:48:5e:17:43:43:a8:cd:5b:91:34:fe:
b5:e8:9c:e3:66:f8:46:52:8d:58:28:d5:42:79:f9:82:49:52:
fb:5b:f3:af:41:81:b5:0a:04:f9:6b:92:f3:4d:6c:32:48:65:
43:99:14:6a:8b:be:ef:71:1d:f9:60:5d:b9:aa:1c:6e:fc:a0:
d7:76:73:17:af:39:57:9b:af:be:5c:9f:24:c2:37:da:8b:7f:
48:fb:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:16 2025 by rpki-client