Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/EoU_nMBg_e1_N7zjRsKLlix0wVc.roa
File: EoU_nMBg_e1_N7zjRsKLlix0wVc.roa (raw, json)
Hash identifier: eVIpSxiuvfIaUFWcf6iNyH4+q2y0RI01deOwLBQf834=
Subject key identifier: 12:85:3F:9C:C0:60:FD:ED:7F:37:BC:E3:46:C2:8B:96:2C:74:C1:57
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 01856B8A38788077B20662B28B5763CD9634
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/EoU_nMBg_e1_N7zjRsKLlix0wVc.roa
Signing time: Sun 01 Jan 2023 04:14:58 +0000
ROA not before: Sun 01 Jan 2023 04:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211720
IP address blocks: 185.56.83.0/24 maxlen: 24
2a06:e80:3000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:38:78:80:77:b2:06:62:b2:8b:57:63:cd:96:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 04:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12853f9cc060fded7f37bce346c28b962c74c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:69:ad:b6:b6:cc:e7:86:bf:d0:18:cb:59:
1c:9e:ba:66:45:44:aa:2a:e1:51:6e:b9:aa:e0:da:
97:d5:c3:d0:c4:83:b5:49:b1:a5:0b:0e:7a:21:98:
12:d6:ed:3c:13:db:81:f2:52:e8:03:27:e8:3c:af:
c7:b8:48:45:a7:ed:b4:2c:18:31:3a:92:c3:46:bb:
f9:81:a7:0e:9d:e3:bd:1b:45:cb:58:07:42:9d:f6:
8a:af:90:25:f9:ad:cf:f8:12:00:bb:f8:cd:11:bb:
fe:96:e6:87:31:d6:b9:bb:af:e8:03:88:a8:cc:68:
43:c9:2f:29:ab:a6:03:9b:cc:fa:a6:99:ff:da:d3:
ab:61:a1:04:64:69:f7:50:62:b6:fe:54:c3:36:e8:
aa:31:20:00:72:8f:dc:3c:99:45:95:d8:74:ba:3f:
cf:55:34:ac:0e:d2:36:54:3a:b6:de:33:15:c9:47:
00:47:71:af:d9:7f:70:e7:fd:86:ee:42:32:a0:34:
67:2f:a2:48:db:2c:60:a3:14:bd:4c:cc:8f:18:c1:
ba:90:3f:b1:9d:2b:e5:f5:3f:c9:c5:c5:fc:99:f0:
6a:b8:34:5c:5c:4f:3f:72:bd:71:fb:1e:87:9c:2e:
1c:43:04:ce:4f:7d:4c:50:3a:bc:ca:ba:03:76:7f:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:3F:9C:C0:60:FD:ED:7F:37:BC:E3:46:C2:8B:96:2C:74:C1:57
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/EoU_nMBg_e1_N7zjRsKLlix0wVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.83.0/24
IPv6:
2a06:e80:3000::/36
Signature Algorithm: sha256WithRSAEncryption
67:b3:97:44:35:bc:db:b5:3f:62:20:7d:58:2f:67:2c:5e:1e:
95:1b:1f:ad:b7:96:e8:b6:1c:b6:76:fa:43:b3:80:eb:3e:3c:
1a:1b:a8:51:7c:35:72:3a:a9:25:21:f3:06:46:c6:93:5f:3d:
60:ee:c9:35:f7:2f:72:8c:ee:3c:f8:7e:66:38:a3:7c:17:3a:
72:a1:2f:00:0c:99:4e:d1:e3:ce:23:f5:9e:da:91:4f:da:a1:
1a:02:31:f7:0d:1c:e9:95:80:06:22:68:d5:63:6f:57:0d:86:
2c:14:9d:98:5c:c7:05:31:f2:77:4d:61:b0:6a:6a:79:50:8b:
a2:da:54:31:35:c2:18:85:1e:62:98:c7:80:01:1a:29:2a:0b:
a7:ec:5c:22:a0:1c:f7:ad:b5:9d:ab:ba:b0:51:25:30:e0:83:
32:6d:13:56:66:31:81:4c:16:12:bc:6f:03:25:aa:36:f3:d8:
ae:1c:ed:f3:5b:56:67:da:47:65:eb:5f:6c:79:e3:c1:0c:78:
02:48:da:ca:51:2b:24:74:96:bf:57:da:92:a1:e8:d5:49:7e:
46:2e:b1:45:ee:39:b5:b6:2f:5c:b4:0c:9e:54:d5:3f:11:ce:
c8:5e:4f:cd:ca:6a:9d:84:cf:c5:89:9d:04:3c:05:c6:f0:02:
c1:7d:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:52 2025 by rpki-client