Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/eb9vVCYHBk8CeaacquupmxpnZEE.roa
File: eb9vVCYHBk8CeaacquupmxpnZEE.roa (raw, json)
Hash identifier: /9Tme/dgrnqrAJUCWWeUvIVt+bm4o9m5jUHll1uaKhM=
Subject key identifier: 79:BF:6F:54:26:07:06:4F:02:79:A6:9C:AA:EB:A9:9B:1A:67:64:41
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 018573284F53294354E70C6900289EF4994B
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/eb9vVCYHBk8CeaacquupmxpnZEE.roa
Signing time: Mon 02 Jan 2023 15:44:59 +0000
ROA not before: Mon 02 Jan 2023 15:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197712
IP address blocks: 185.34.192.0/22 maxlen: 24
46.16.56.0/21 maxlen: 24
185.42.104.0/22 maxlen: 24
134.0.8.0/21 maxlen: 24
185.66.40.0/22 maxlen: 24
185.22.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:4f:53:29:43:54:e7:0c:69:00:28:9e:f4:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Jan 2 15:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79bf6f542607064f0279a69caaeba99b1a676441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:33:a1:77:73:84:9c:3c:16:aa:7a:09:7d:
61:6a:8b:b8:62:ae:3d:d7:80:ec:0c:86:ae:42:16:
a2:ac:6b:1d:98:78:31:c5:2b:80:66:b4:40:7f:a8:
2f:fc:16:84:a7:d9:2c:6d:87:5b:c6:8a:72:9d:7a:
9a:7f:cb:44:be:7d:be:26:fd:35:4c:33:19:e4:cf:
e7:fd:38:43:e9:1f:e1:c1:63:40:bf:92:c9:38:bd:
97:7c:e9:4a:13:09:aa:b7:57:4d:44:74:05:2b:fe:
09:5d:32:ce:5c:c7:e4:4c:61:fd:3e:7b:6c:2f:cf:
4f:cc:e7:16:b0:a5:87:58:08:8e:81:62:67:c7:d2:
d4:66:de:65:5d:e1:44:6f:1d:6e:70:6b:2e:af:d0:
b4:16:13:d5:5c:24:1a:1f:8e:fd:b0:4a:93:1a:d4:
d6:0e:ed:ee:49:61:09:05:a3:93:a4:16:05:ac:82:
7f:1a:fc:a8:b6:11:ac:04:a4:28:96:7a:cb:19:be:
e1:5b:cf:33:3a:9f:7a:63:13:42:83:4c:e2:c7:fe:
8a:e1:ee:ab:3a:03:19:c0:17:0a:c8:4c:a2:db:fa:
26:b2:9e:ab:2c:db:a6:24:b3:f3:be:38:83:f5:f6:
fc:95:dd:c6:e4:85:c7:44:e3:83:bf:95:7c:d1:f6:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:6F:54:26:07:06:4F:02:79:A6:9C:AA:EB:A9:9B:1A:67:64:41
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/eb9vVCYHBk8CeaacquupmxpnZEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.56.0/21
134.0.8.0/21
185.22.200.0/22
185.34.192.0/22
185.42.104.0/22
185.66.40.0/22
Signature Algorithm: sha256WithRSAEncryption
14:3c:35:d7:e2:c8:57:d2:f1:52:6c:7c:2d:21:95:54:82:6a:
46:ba:4c:6b:1c:6f:56:f7:eb:2f:eb:ef:ab:b2:5d:4e:cf:11:
b8:69:44:4b:48:62:da:82:29:61:1b:ad:ee:f0:ff:0b:be:ea:
3c:e1:29:80:be:82:7f:bb:25:63:ce:7a:e3:a3:86:57:c1:dd:
aa:06:85:2f:66:58:d7:3e:24:9b:ac:0a:ff:e7:ff:6d:90:3c:
d1:d7:97:05:0e:b5:70:b6:22:a5:23:80:aa:5b:c1:1a:2c:b3:
22:d4:61:43:7e:f1:80:b1:e0:35:f0:73:67:b5:b3:89:a7:ec:
dc:d7:f9:58:ef:74:e8:f8:99:58:c0:bc:09:1f:90:7a:d1:0c:
18:84:48:47:c8:fe:39:b0:5f:01:7d:96:16:0b:0c:45:fc:ca:
fe:74:23:a2:d0:d2:b4:b0:e0:15:b4:77:d7:cc:07:74:4c:24:
b1:14:ce:50:0f:ce:55:0e:bf:6e:e9:e0:17:30:c1:85:61:e1:
04:e2:c5:42:e5:e7:7f:be:54:b1:da:74:5b:d3:5a:b7:0a:88:
d9:6e:29:c6:74:a6:0a:78:3a:80:ce:4c:1e:f5:98:78:57:b9:
c5:fc:56:1b:77:cd:7d:a5:70:0b:41:18:34:51:ce:72:fc:a0:
50:df:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:06:34 2025 by rpki-client