Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7t3V7BYp7PWoAEgZ529293CkH9s.roa
File: 7t3V7BYp7PWoAEgZ529293CkH9s.roa (raw, json)
Hash identifier: UoIjstuTqkgqyKLKTPxkO1310aSscSqUGtul+BMxK4I=
Subject key identifier: EE:DD:D5:EC:16:29:EC:F5:A8:00:48:19:E7:6F:76:F7:70:A4:1F:DB
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01856F14AF65A9B1EED194EBF3C29DBC8C2E
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7t3V7BYp7PWoAEgZ529293CkH9s.roa
Signing time: Sun 01 Jan 2023 20:45:04 +0000
ROA not before: Sun 01 Jan 2023 20:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197954
IP address blocks: 37.10.80.0/20 maxlen: 20
31.44.112.0/20 maxlen: 20
185.49.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:af:65:a9:b1:ee:d1:94:eb:f3:c2:9d:bc:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jan 1 20:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeddd5ec1629ecf5a8004819e76f76f770a41fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:ab:74:16:1d:20:f6:6d:02:16:ad:08:3f:
5a:d7:80:3d:d6:2f:b5:e2:b3:6f:01:fb:f4:ba:d1:
18:e9:f7:7f:6b:b6:74:93:d3:c9:b4:d4:a1:5f:5b:
0f:05:c1:fd:21:ce:de:d6:bb:64:5e:b7:4c:6f:ad:
70:1c:60:3d:a3:06:3b:d5:bc:de:7e:57:c6:72:33:
54:e5:95:80:5b:7c:f6:94:47:50:f3:db:85:21:6e:
89:17:54:9a:ed:a4:0b:d6:41:2b:e7:38:d7:3c:77:
0d:0c:a2:d3:4a:28:94:d3:ba:66:0d:50:da:c3:e9:
e9:3b:64:cf:6f:e9:06:05:92:a5:74:f8:28:64:09:
67:5b:ee:90:1c:3c:3e:96:5c:27:0e:b5:de:6e:5c:
8a:ca:d8:1e:83:69:b2:a6:c5:8b:4e:cc:bf:00:d5:
b1:24:f3:e7:83:79:11:a0:56:1c:56:df:6e:3a:5b:
c6:d2:69:22:c5:eb:53:96:3e:4e:19:53:7d:43:13:
86:76:60:d1:e1:fc:82:11:d1:4b:fe:59:7e:99:47:
98:ad:d5:2f:bb:19:d7:29:ab:0e:3d:1e:9c:3e:76:
07:55:4d:3c:bd:06:45:65:4d:f6:05:08:00:63:80:
c3:04:f3:6b:9f:66:1b:a4:55:8c:eb:af:96:68:25:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:D5:EC:16:29:EC:F5:A8:00:48:19:E7:6F:76:F7:70:A4:1F:DB
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7t3V7BYp7PWoAEgZ529293CkH9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.112.0/20
37.10.80.0/20
185.49.212.0/22
Signature Algorithm: sha256WithRSAEncryption
68:05:2b:a3:9a:91:2c:5c:45:af:47:03:74:9d:77:31:59:38:
45:c0:f2:a9:44:9c:cb:6c:e6:24:a5:42:f4:68:49:10:29:f9:
13:87:5c:f1:16:36:96:d9:09:ab:5d:96:1d:dd:29:77:ca:ea:
f5:b4:39:43:17:f6:9b:dc:fd:e0:a4:bb:53:c8:bf:80:8a:49:
4f:3d:e6:23:e8:27:2c:8b:84:90:0c:8b:b8:6b:86:5d:08:e0:
06:2e:7b:a4:fe:15:46:60:4e:a0:40:7f:11:da:45:f5:00:28:
09:07:ec:7d:7f:17:fd:c7:06:78:dc:a9:19:a6:af:b2:19:e9:
82:09:86:f8:74:42:97:ed:1c:f3:45:a5:a0:44:6f:90:c6:db:
60:b6:79:37:50:8a:cd:7f:4b:74:5f:94:30:6f:0f:f0:ec:2e:
52:51:de:8b:36:23:69:d6:25:5b:25:85:06:b7:cb:22:0f:10:
ee:d6:d9:9a:a7:46:86:e4:e8:dd:fa:70:2f:31:f2:3a:59:c7:
96:a1:11:bc:ff:1a:14:2c:69:f5:fd:48:c4:9e:85:28:13:85:
24:a0:78:67:99:2f:70:5f:5b:30:c8:c2:0f:6a:30:97:25:29:
c0:94:ed:b7:31:2e:c0:7c:83:ba:33:7b:c0:0c:7a:cf:9f:02:
ca:8e:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:52:54 2025 by rpki-client