Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/eYYGrrKgYCppY-P5QY9dSsdB12c.roa
File: eYYGrrKgYCppY-P5QY9dSsdB12c.roa (raw, json)
Hash identifier: BfI2Ra1FMQ+6uH9m/4mM31hcq1eih2eieZZWYKoO7WU=
Subject key identifier: 79:86:06:AE:B2:A0:60:2A:69:63:E3:F9:41:8F:5D:4A:C7:41:D7:67
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 0EAD21CA
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/eYYGrrKgYCppY-P5QY9dSsdB12c.roa
Signing time: Mon 04 Apr 2022 22:05:14 +0000
ROA not before: Mon 04 Apr 2022 22:05:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209551
IP address blocks: 185.146.204.0/22 maxlen: 32
185.74.216.0/22 maxlen: 32
5.154.164.0/22 maxlen: 32
185.192.28.0/22 maxlen: 32
5.154.160.0/22 maxlen: 32
5.154.160.0/21 maxlen: 32
2a11:8040::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246227402 (0xead21ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Apr 4 22:05:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=798606aeb2a0602a6963e3f9418f5d4ac741d767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:d5:37:05:ab:b1:c3:95:6a:cd:0a:91:fd:
43:fa:fe:5c:35:24:ed:f6:bc:46:a1:e2:84:8a:db:
aa:16:8e:7d:bd:b0:ce:d0:07:0f:82:cf:b5:e0:41:
85:54:4d:e3:4f:9c:33:41:e3:76:bc:e2:d4:6e:f5:
63:f4:8d:4e:ac:bd:8f:a5:90:16:11:a7:7a:80:83:
7e:09:aa:e2:4c:2b:0e:06:c1:3f:65:8b:6b:dd:63:
81:cf:62:31:56:2c:31:89:4e:e4:c5:95:89:97:28:
44:29:fc:89:09:aa:72:25:7a:22:2a:1c:0d:04:a2:
f2:6d:d0:d3:00:84:fc:54:1d:09:47:e3:f9:7a:e3:
25:ce:5c:9a:8b:9d:79:41:43:47:22:15:1f:01:de:
0b:35:3b:00:43:36:21:9b:ce:e9:d2:c0:4e:12:9b:
2a:28:e9:81:b6:4d:52:6e:3f:44:58:bf:44:fe:63:
ba:24:10:c6:f7:c5:1f:05:1b:37:fd:a3:42:c7:af:
0e:db:dd:a4:a2:ce:a3:6f:51:52:93:84:c8:13:52:
09:05:45:91:5f:07:56:16:d9:37:e4:08:ba:1e:70:
03:42:63:fe:c7:b8:d5:36:6a:a1:3c:fe:6b:9c:62:
e0:76:aa:ea:6c:82:a8:f7:2d:14:76:b9:37:66:58:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:06:AE:B2:A0:60:2A:69:63:E3:F9:41:8F:5D:4A:C7:41:D7:67
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/eYYGrrKgYCppY-P5QY9dSsdB12c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.160.0/21
185.74.216.0/22
185.146.204.0/22
185.192.28.0/22
IPv6:
2a11:8040::/29
Signature Algorithm: sha256WithRSAEncryption
61:49:76:04:e6:d6:c4:8f:96:f9:60:04:c1:9e:92:a6:a3:88:
53:6a:29:12:ce:a6:be:91:a3:e9:08:ec:ee:f9:d5:f8:8c:2c:
a9:53:86:0c:81:57:46:3d:38:93:37:3d:a9:9f:15:04:38:ef:
66:fa:25:4b:8e:44:76:df:99:82:2f:e4:a8:bc:33:89:95:19:
f1:da:3d:9b:91:b3:3a:d8:6a:ba:c4:7f:04:ef:29:c6:9b:c4:
46:81:d3:77:9f:68:18:c3:24:2c:94:46:b4:e1:3d:97:2c:72:
00:4d:c9:b7:6d:cf:be:e8:d2:e6:5c:00:25:d8:27:1b:bf:90:
a2:89:fb:1f:ec:86:6b:bc:c0:a4:52:52:a1:9c:3d:2d:10:0b:
67:33:74:69:9e:04:3d:a6:fa:82:15:01:a3:f4:44:59:53:6a:
27:e5:6e:db:4b:0a:f6:73:36:5b:a6:60:2a:45:f1:4f:ad:92:
03:b1:9d:61:58:c4:6b:39:d7:68:2c:a0:8e:b2:75:51:80:73:
83:ef:dd:a8:bc:72:9a:ff:8d:26:60:c6:ad:4c:07:73:e6:b6:
39:03:a0:38:c0:c0:cf:83:f0:4e:6b:9b:cc:94:51:fb:50:d6:
6e:cb:b9:07:8d:4e:38:0d:2f:ec:b3:16:3c:ae:c5:29:3f:23:
1d:ae:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:06:07 2025 by rpki-client