Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/EI-WYypMonnB_sUAAyTb38USp2o.roa
File: EI-WYypMonnB_sUAAyTb38USp2o.roa (raw, json)
Hash identifier: EUrKGHjEhVfeH6gbrLsBL1zi7ZzsmgnUU+7HnJHRaPA=
Subject key identifier: 10:8F:96:63:2A:4C:A2:79:C1:FE:C5:00:03:24:DB:DF:C5:12:A7:6A
Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial: 0185729EFB9AA85C989AA8D5B1E074BE515C
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/EI-WYypMonnB_sUAAyTb38USp2o.roa
Signing time: Mon 02 Jan 2023 13:14:59 +0000
ROA not before: Mon 02 Jan 2023 13:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59451
IP address blocks: 37.75.146.0/24 maxlen: 24
185.173.56.0/24 maxlen: 24
37.75.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:fb:9a:a8:5c:98:9a:a8:d5:b1:e0:74:be:51:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Validity
Not Before: Jan 2 13:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=108f96632a4ca279c1fec5000324dbdfc512a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:4a:7f:e5:e5:05:13:7f:0b:14:ba:8e:66:
46:37:35:ce:50:2b:98:3b:5b:90:a2:cc:a7:fb:3a:
43:8b:4c:e8:c7:7c:37:00:06:93:3c:b7:40:60:29:
32:1b:d5:5c:b3:3c:bf:a8:52:b3:a6:80:d9:c7:7a:
d3:1a:59:10:d3:67:fd:2e:7c:36:1f:01:24:9b:98:
f6:f8:04:90:bf:9d:fe:e7:ed:d8:ae:1f:74:19:a3:
4e:8e:1d:f8:ce:3a:62:8e:2e:a6:0a:87:9c:d3:7d:
03:76:2b:2d:13:c2:61:41:bd:0d:ca:b4:03:9d:02:
b1:2f:f9:10:24:dd:c8:76:45:5a:f1:df:ca:01:be:
4d:c1:2f:40:5d:3b:87:42:25:7b:3b:77:4f:75:5f:
40:12:4d:4a:2f:25:05:53:9a:48:6d:04:8d:1d:0f:
6d:b5:4f:14:db:b6:1a:16:9a:59:f9:52:43:84:d8:
e9:52:8d:bf:83:47:b5:34:4e:6a:84:de:68:d8:a7:
00:0e:78:57:ef:1a:dc:1f:9b:45:7f:73:54:89:73:
72:ad:38:9a:45:f1:c1:84:3c:08:eb:88:0c:39:78:
1e:a9:54:94:77:ee:eb:34:27:b9:a8:99:70:1b:43:
52:7f:4d:84:31:8f:79:d1:aa:96:02:7e:00:61:01:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:96:63:2A:4C:A2:79:C1:FE:C5:00:03:24:DB:DF:C5:12:A7:6A
X509v3 Authority Key Identifier:
keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/EI-WYypMonnB_sUAAyTb38USp2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.144.0/24
37.75.146.0/24
185.173.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:92:c0:88:f3:88:3f:b1:6f:ef:74:60:58:8a:e9:73:4f:66:
fd:b5:08:58:4e:4c:64:8d:16:4c:9b:47:47:4d:17:a2:bb:d6:
7c:76:d9:32:96:79:28:68:bf:65:6e:0c:80:6d:22:5a:74:d4:
68:15:db:ba:37:eb:39:0b:0c:56:d2:62:80:7f:2a:74:86:24:
cc:5b:a4:d1:bf:ac:5a:91:da:2e:a6:08:61:f4:18:6a:a2:b5:
18:75:f0:f5:18:f7:fb:7b:8e:63:85:69:12:c7:30:aa:eb:fa:
d6:ea:b2:6f:3e:ed:f4:5a:f7:1a:49:f8:a4:60:96:ad:7b:9c:
f9:b9:b2:05:38:4a:18:85:d8:2f:fd:a9:7d:0e:61:17:6d:42:
6c:9c:33:c9:ff:97:43:cb:91:5f:c9:93:ea:62:6c:d5:14:c0:
b0:c6:76:6e:6e:a4:2a:13:e9:6f:87:f6:ee:41:39:cd:20:dd:
8d:42:0a:4f:6d:91:e8:30:e1:b9:39:f5:20:d2:fe:7d:f2:26:
9e:ed:be:3e:77:da:15:03:51:0f:92:2d:26:5e:61:6c:58:62:
6e:85:29:53:36:04:f1:f5:03:d5:da:f7:9d:48:4b:53:12:14:
4f:70:76:e0:86:f9:3a:46:fe:06:73:e0:33:9c:61:01:33:90:
a5:9d:83:49
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVynvuaqFyYmqjVseB0vlFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMWM1MDk0OGYzNzM3ZmZlMGMzYjc2YjI0MWNlOTA1NjI4
ODg1ZDUwHhcNMjMwMTAyMTMxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDhmOTY2MzJhNGNhMjc5YzFmZWM1MDAwMzI0ZGJkZmM1MTJhNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/VKf+XlBRN/CxS6jmZGNzXOUCuY
O1uQosyn+zpDi0zox3w3AAaTPLdAYCkyG9Vcszy/qFKzpoDZx3rTGlkQ02f9Lnw2
HwEkm5j2+ASQv53+5+3Yrh90GaNOjh34zjpiji6mCoec030DdistE8JhQb0NyrQD
nQKxL/kQJN3IdkVa8d/KAb5NwS9AXTuHQiV7O3dPdV9AEk1KLyUFU5pIbQSNHQ9t
tU8U27YaFppZ+VJDhNjpUo2/g0e1NE5qhN5o2KcADnhX7xrcH5tFf3NUiXNyrTia
RfHBhDwI64gMOXgeqVSUd+7rNCe5qJlwG0NSf02EMY950aqWAn4AYQH3QwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBCPlmMqTKJ5wf7FAAMk29/FEqdqMB8GA1UdIwQY
MBaAFMAcUJSPNzf/4MO3ayQc6QViiIXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYt
Y2QxNDk2ZGU4NDVlLzEvRUktV1l5cE1vbm5CX3NVQUF5VGIzOFVTcDJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYtY2QxNDk2ZGU4NDVl
LzEvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJUuQAwQA
JUuSAwQAua04MA0GCSqGSIb3DQEBCwUAA4IBAQAdksCI84g/sW/vdGBYiulzT2b9
tQhYTkxkjRZMm0dHTReiu9Z8dtkylnkoaL9lbgyAbSJadNRoFdu6N+s5CwxW0mKA
fyp0hiTMW6TRv6xakdoupghh9BhqorUYdfD1GPf7e45jhWkSxzCq6/rW6rJvPu30
WvcaSfikYJate5z5ubIFOEoYhdgv/al9DmEXbUJsnDPJ/5dDy5FfyZPqYmzVFMCw
xnZubqQqE+lvh/buQTnNIN2NQgpPbZHoMOG5OfUg0v598iae7b4+d9oVA1EPki0m
XmFsWGJuhSlTNgTx9QPV2vedSEtTEhRPcHbghvk6Rv4Gc+AznGEBM5ClnYNJ
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:40:05 2025 by rpki-client