Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/EoR_zjQ2mMKE9ZP6QcoiaqaXCNY.roa
File: EoR_zjQ2mMKE9ZP6QcoiaqaXCNY.roa (raw, json)
Hash identifier: qsubqATf6YglIk3WYSPe9ukGoSnk7uTxGZxogfJo7RE=
Subject key identifier: 12:84:7F:CE:34:36:98:C2:84:F5:93:FA:41:CA:22:6A:A6:97:08:D6
Certificate issuer: /CN=7819b096edf8760e8e500f94169bc00378ae9475
Certificate serial: 0185714C3D1226A8E50F760C778C36A2B0FB
Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/EoR_zjQ2mMKE9ZP6QcoiaqaXCNY.roa
Signing time: Mon 02 Jan 2023 07:04:59 +0000
ROA not before: Mon 02 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51294
IP address blocks: 178.23.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3d:12:26:a8:e5:0f:76:0c:77:8c:36:a2:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475
Validity
Not Before: Jan 2 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12847fce343698c284f593fa41ca226aa69708d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:a1:b4:62:60:e1:3b:a3:a6:a3:ac:2a:0f:
e9:61:ed:c5:3d:0e:97:e3:ea:8e:2f:a8:07:16:bf:
93:26:de:ef:f0:94:3c:f2:45:f7:b7:95:97:6e:02:
8c:a1:f3:92:d7:d8:1b:5a:0e:bc:27:a7:ea:81:99:
ae:4b:5e:94:91:af:c3:38:b0:cb:b4:ba:d3:8a:7d:
9c:9d:1c:11:25:b0:42:9e:3a:41:8c:6e:40:0e:13:
e6:de:8e:9e:ba:60:0d:93:c9:d9:84:09:75:29:00:
3a:0f:41:ff:f5:61:26:c9:ec:53:75:0c:ce:44:3e:
b8:fa:bf:78:04:cc:18:bf:66:a0:79:7d:b5:f2:27:
9c:68:cb:97:83:d2:5e:1d:95:78:77:b1:6d:fa:d3:
71:ef:7d:cd:88:89:00:7e:ae:0b:ea:51:00:90:90:
c3:d1:53:78:66:62:17:22:0d:0c:93:11:67:2e:b9:
96:3a:9e:65:86:0d:c2:cb:b8:10:42:76:27:62:85:
08:a2:14:fd:d0:74:34:15:ea:0d:7a:d2:6a:72:d0:
99:fc:e2:c6:ca:d1:3a:c3:47:64:b5:6f:d0:1b:db:
ec:8b:8b:3c:cc:fa:7c:9b:b9:f6:ea:39:d1:2a:6d:
e7:26:af:a5:f1:0c:72:5e:b8:84:87:eb:43:02:4a:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:84:7F:CE:34:36:98:C2:84:F5:93:FA:41:CA:22:6A:A6:97:08:D6
X509v3 Authority Key Identifier:
keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/EoR_zjQ2mMKE9ZP6QcoiaqaXCNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.56.0/21
Signature Algorithm: sha256WithRSAEncryption
48:4b:bb:e8:ff:1e:cf:b4:1f:58:3b:48:20:d5:2d:2b:0c:21:
d9:61:e7:ae:c7:c9:54:13:23:53:af:e3:ba:8a:cd:ec:f7:98:
a2:e7:d4:96:b3:b4:34:43:10:a5:56:23:2c:73:2d:7b:ac:1c:
f1:8a:5c:55:0d:c9:fc:d7:53:bf:f5:1c:fc:47:ab:10:c5:90:
8b:81:95:b3:4d:36:41:22:6c:c5:03:07:f3:42:3f:c6:34:14:
6c:4e:74:6c:a4:5f:f9:d1:ca:b8:73:e7:1f:95:e4:21:ab:8d:
2c:ae:a6:eb:52:7d:00:43:39:d1:38:0c:c4:74:c8:2c:43:23:
15:16:d7:ac:45:f0:cd:74:77:74:e8:62:ca:54:6f:5a:68:5e:
4b:82:34:f6:c7:29:23:b0:c7:0c:98:75:a3:39:20:06:c1:74:
63:85:0f:98:e8:e5:ac:79:0b:d5:ae:57:06:28:4c:56:02:3b:
71:06:d0:d7:1a:a1:f4:92:b0:27:15:a7:1a:b6:63:32:61:20:
49:4b:22:53:96:7e:94:92:23:ce:f8:d6:87:29:8d:70:96:fc:
e5:1a:0e:fa:51:ac:31:06:1d:91:0f:93:84:ec:a9:ff:2f:10:
4a:2b:46:aa:33:04:b6:a0:18:7c:27:32:11:d7:7b:ed:49:81:
19:cf:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:54:29 2025 by rpki-client