Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/eWW7I1rcxHFnBEuRV0ne9xWyo-w.roa
File: eWW7I1rcxHFnBEuRV0ne9xWyo-w.roa (raw, json)
Hash identifier: MhKipn2TkhflsQ7N0FSNiXM2Y+iwu7Oczf8On9lIyY4=
Subject key identifier: 79:65:BB:23:5A:DC:C4:71:67:04:4B:91:57:49:DE:F7:15:B2:A3:EC
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 333383C7
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/eWW7I1rcxHFnBEuRV0ne9xWyo-w.roa
Signing time: Sat 01 Jan 2022 16:06:33 +0000
ROA not before: Sat 01 Jan 2022 16:06:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25148
IP address blocks: 89.250.112.0/20 maxlen: 20
79.171.80.0/21 maxlen: 21
195.28.172.0/23 maxlen: 23
109.68.88.0/21 maxlen: 21
46.31.184.0/22 maxlen: 22
194.24.252.0/23 maxlen: 23
81.93.160.0/20 maxlen: 20
46.31.188.0/22 maxlen: 22
195.225.0.0/19 maxlen: 19
2a01:600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859014087 (0x333383c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Jan 1 16:06:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7965bb235adcc47167044b915749def715b2a3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:96:cb:91:e0:fd:6c:c1:f1:a7:1b:46:5a:
59:c0:c8:b9:78:78:28:f5:75:75:2b:4a:82:e6:26:
6c:f0:b7:b4:ab:f2:a3:fb:f4:08:21:5a:17:31:f2:
b8:bb:50:8c:5b:49:c2:24:a3:ec:84:db:b9:d9:41:
82:6b:ad:90:2a:be:75:5e:96:d3:a0:ac:24:33:ad:
c6:1b:01:bd:49:e3:d9:ab:26:d2:d1:a4:4b:4c:74:
f4:7c:26:e3:89:8c:74:2c:d7:e8:36:5a:22:85:12:
54:e6:f6:a5:63:51:70:09:57:12:90:9b:67:95:2a:
3b:58:e6:39:67:49:25:13:9e:b7:72:4c:9c:6d:fc:
0b:82:54:ed:27:89:87:bb:e1:3f:7e:fe:05:fb:fd:
e0:6b:6e:e5:dc:c4:2e:42:19:fa:32:46:9d:dc:22:
93:37:4a:be:fb:cd:e6:35:1b:40:c5:d3:e6:86:4e:
21:3f:41:49:42:09:24:fe:1d:c9:5a:22:b0:d8:4a:
82:1d:89:70:a1:f9:f9:23:fa:0f:92:44:7b:e0:7e:
cf:59:db:cb:44:89:bf:01:88:1f:0c:66:4b:30:fe:
ea:7c:34:81:37:01:39:ef:ab:96:e4:63:d1:61:ff:
07:85:41:e7:dc:85:33:64:67:f7:cd:ab:01:21:b9:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:BB:23:5A:DC:C4:71:67:04:4B:91:57:49:DE:F7:15:B2:A3:EC
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/eWW7I1rcxHFnBEuRV0ne9xWyo-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.184.0/21
79.171.80.0/21
81.93.160.0/20
89.250.112.0/20
109.68.88.0/21
194.24.252.0/23
195.28.172.0/23
195.225.0.0/19
IPv6:
2a01:600::/32
Signature Algorithm: sha256WithRSAEncryption
4c:5f:49:ae:5f:ad:34:8a:be:a3:33:54:0d:8b:d2:c5:1d:ca:
5b:64:9f:cc:94:0f:ab:c2:d2:dc:35:68:04:9a:79:d9:39:ba:
e5:ae:14:8e:75:44:89:ed:78:bb:a4:e1:d3:99:db:f5:fd:64:
86:12:4c:0a:b6:d5:44:47:da:05:7f:f6:b6:29:6d:ba:48:4e:
14:63:0e:f0:f8:31:97:e7:1c:f5:d6:7e:52:bc:c6:4c:7d:1b:
a9:64:fb:fb:93:79:db:77:78:66:34:97:ef:9b:95:0b:59:0c:
8f:47:a7:bb:27:2a:1f:ed:8b:8e:97:3b:25:b6:9a:79:97:a1:
6c:e9:f2:42:aa:08:4a:12:2e:a1:3f:ba:0a:13:79:30:94:b6:
68:5c:0f:98:03:39:0a:e1:00:d1:90:67:1c:6a:4b:06:06:d5:
dd:e2:0c:45:76:b5:ef:ab:2a:9f:16:bc:e8:60:02:94:9c:f1:
66:63:cc:d5:81:1a:20:09:a0:1d:f0:c6:4d:89:03:be:f0:70:
2f:49:8b:a9:0a:d6:cb:35:f9:ce:c6:31:7e:94:bf:cc:64:5d:
f0:e0:6d:84:a9:11:49:61:71:da:7d:d9:7b:79:21:e4:17:5c:
a4:08:61:ec:20:a1:a3:9e:bb:0b:c3:ee:6d:08:c1:b9:a8:cc:
4a:2a:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:56 2025 by rpki-client