Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/7et-0_EUHUCUVFZW-8FT4CfUCA8.roa
File: 7et-0_EUHUCUVFZW-8FT4CfUCA8.roa (raw, json)
Hash identifier: 7hWAqYhH+fcdz7OUYDrvFzAu9rZOz7JHcYFVrHGrnjY=
Subject key identifier: ED:EB:7E:D3:F1:14:1D:40:94:54:56:56:FB:C1:53:E0:27:D4:08:0F
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 01857094DF75BAF9E394173F73FA17ED2D52
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/7et-0_EUHUCUVFZW-8FT4CfUCA8.roa
Signing time: Mon 02 Jan 2023 03:44:42 +0000
ROA not before: Mon 02 Jan 2023 03:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204096
IP address blocks: 185.114.232.0/22 maxlen: 24
2a06:7280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:df:75:ba:f9:e3:94:17:3f:73:fa:17:ed:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Jan 2 03:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edeb7ed3f1141d4094545656fbc153e027d4080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:82:81:e8:3c:c2:6d:42:32:8d:5b:a9:e2:
d5:76:93:3c:fe:a2:bf:67:75:62:36:58:2f:89:39:
2e:f0:5f:bd:78:34:6a:31:a5:c8:a0:2f:da:43:b4:
8e:19:cc:8b:f3:95:52:61:86:a6:40:cc:38:e7:8a:
8a:fb:d3:56:c4:c9:2a:fd:79:5a:96:01:72:16:47:
82:10:86:0a:5b:9c:c3:e5:e9:4d:70:d3:a8:aa:43:
74:ef:6c:cc:ae:fb:42:f9:08:98:84:0f:c8:6e:18:
d7:f0:63:c9:0b:81:9b:0c:a7:50:7e:1b:9e:ca:f6:
b1:46:6e:af:9d:ff:d0:90:05:6d:cb:13:be:ae:e6:
12:b0:01:91:be:4d:51:ff:89:2a:e5:43:65:34:c5:
74:8b:e9:f7:d8:07:9f:00:27:93:e5:c0:cc:88:8f:
06:b5:8a:3f:f0:fa:83:e4:da:b1:e8:e5:38:c1:c7:
30:ed:93:7b:32:75:9a:47:6b:e7:a4:1d:bb:dd:e1:
49:aa:d5:6f:4e:6f:31:89:ef:a5:92:6e:7c:b1:42:
25:c3:e9:c0:77:7c:f1:ed:41:78:1f:4d:e8:03:55:
6c:7f:64:23:18:f0:8c:b7:0b:02:70:a2:76:a8:57:
1f:00:c9:8a:39:ec:be:ef:d7:7b:6b:f7:f4:f1:eb:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EB:7E:D3:F1:14:1D:40:94:54:56:56:FB:C1:53:E0:27:D4:08:0F
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/7et-0_EUHUCUVFZW-8FT4CfUCA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.232.0/22
IPv6:
2a06:7280::/29
Signature Algorithm: sha256WithRSAEncryption
a6:c1:4a:74:66:44:af:9e:fb:85:39:0e:03:cd:ec:db:8d:68:
a3:9a:8e:7c:67:52:59:bf:a8:df:aa:31:27:5b:50:3a:49:b3:
3f:f6:7c:ec:0e:b7:4e:c7:c8:46:d5:b4:81:fc:53:3c:2d:fa:
7d:28:00:1a:b3:ae:c7:40:7d:fa:1c:8c:78:e0:48:e6:a3:fc:
0f:14:ed:86:65:b2:62:6a:7c:1a:d0:cc:b0:54:31:ae:93:29:
1f:5c:a0:b4:a6:40:f8:f6:d3:32:eb:0e:92:ff:2e:85:71:c4:
ab:c1:b6:da:3f:06:84:4a:2c:47:7a:6f:a3:40:8d:5d:57:c9:
18:a8:d0:c5:2d:e4:d2:9c:dc:08:a6:41:7b:8b:86:95:63:3e:
22:67:23:08:c0:dc:9f:4f:c5:fb:b9:58:67:8f:04:29:99:68:
9d:ca:34:bc:ba:ca:32:8d:27:62:7e:0d:5b:61:27:67:da:d7:
fa:ad:7e:00:2b:b2:38:cb:67:8a:3b:4f:22:b4:05:b2:0a:4d:
3c:a0:3b:aa:70:9b:1e:49:a4:30:a1:91:75:a9:30:6d:f5:a5:
2e:40:c3:46:fc:e0:0a:c0:9f:fb:c2:60:e2:5d:e6:ab:d4:56:
09:b0:28:94:4a:0e:db:d4:dc:96:d7:ff:d6:93:bc:6f:04:8a:
8c:e3:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:48:40 2025 by rpki-client