Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/EYjhQMX4z3XDqQhhVuMwSxvtfy4.roa
File: EYjhQMX4z3XDqQhhVuMwSxvtfy4.roa (raw, json)
Hash identifier: Oxlf1yQPiRN2Hw5mQVHDkOYr/4FSH4DUNfE9gLG9ous=
Subject key identifier: 11:88:E1:40:C5:F8:CF:75:C3:A9:08:61:56:E3:30:4B:1B:ED:7F:2E
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 018571D7DE926B3909F1F53DB35DACFCDC45
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/EYjhQMX4z3XDqQhhVuMwSxvtfy4.roa
Signing time: Mon 02 Jan 2023 09:37:30 +0000
ROA not before: Mon 02 Jan 2023 09:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13249
IP address blocks: 193.109.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:de:92:6b:39:09:f1:f5:3d:b3:5d:ac:fc:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Jan 2 09:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1188e140c5f8cf75c3a9086156e3304b1bed7f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:e7:ec:a7:bc:83:97:fc:3d:e6:8e:eb:8f:
c8:5d:f1:11:ca:0a:59:8e:24:ce:d0:1d:6b:ef:d8:
35:cf:38:fd:a4:d6:62:fd:f3:32:ea:ff:92:d2:6d:
ad:1b:38:fd:9c:0d:fc:b2:df:17:d7:d1:88:d2:d4:
8f:65:a4:ed:7b:1d:84:e8:a8:ad:3f:b9:4b:8d:d7:
20:b3:3c:63:25:ec:50:f1:5d:6a:da:6b:17:56:2d:
30:fc:de:ce:af:7b:54:aa:5a:12:b0:f9:28:5e:64:
dd:da:72:f7:63:3f:f5:1a:e2:62:a1:d0:3c:96:22:
d9:5e:29:87:bb:8b:90:b4:95:47:65:b6:0c:6d:78:
e5:85:e0:cf:a9:04:f2:5a:1a:e9:fc:eb:1b:95:bd:
bd:f5:0c:bb:5d:b6:04:e7:d9:9b:62:4a:29:0b:0f:
9b:92:7d:f4:71:96:14:50:bf:4c:c8:13:7b:f6:d3:
a1:ac:e8:f9:65:37:b9:48:13:4d:86:b4:a2:7b:0d:
b5:ae:c0:9a:ab:f7:28:09:77:fd:6e:58:7e:e6:f5:
cb:97:d1:89:fc:9b:4b:e4:5d:57:18:dc:59:0b:89:
d4:7b:c3:ed:84:77:44:af:08:a7:e3:6c:58:b6:af:
ac:a6:bf:6a:38:68:cb:f8:61:0e:5e:53:c5:fe:42:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:88:E1:40:C5:F8:CF:75:C3:A9:08:61:56:E3:30:4B:1B:ED:7F:2E
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/EYjhQMX4z3XDqQhhVuMwSxvtfy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.241.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:4a:ec:f2:2b:5b:2e:d3:d2:9b:72:75:19:44:42:97:eb:61:
82:02:e7:1b:e8:32:f6:28:c2:9a:c1:48:c7:09:4b:a8:f1:ac:
b6:55:fc:7e:37:00:b4:49:f5:04:dc:dc:95:7e:e6:88:3f:46:
56:9a:9a:13:0d:f9:29:a7:84:0c:6e:77:7e:64:26:7a:d1:88:
51:15:74:21:0e:9d:98:fc:3c:4f:1c:3e:69:b9:a6:72:c6:af:
65:ca:f9:99:38:a3:85:bd:2d:17:ac:06:15:98:56:c9:49:3e:
9f:a2:7a:3b:49:e4:0c:5e:e3:f0:c1:f7:41:32:68:9f:5d:27:
57:cc:0d:5c:1f:8f:78:19:40:86:e3:48:5d:96:1f:71:7b:48:
c3:ec:30:a6:98:d8:bb:71:1c:c1:7f:76:c0:3f:7f:bb:11:b9:
80:21:09:3a:0e:a7:66:eb:7c:09:c7:25:93:a6:17:b8:1d:1c:
6a:d4:8a:91:a2:4c:b7:ca:3c:98:51:d2:98:15:a1:f8:79:3f:
87:76:5e:cf:1b:c9:bc:52:a6:87:79:47:1c:ec:0d:d6:83:12:
04:62:1b:0a:54:1d:9d:9a:0c:43:19:9a:90:3b:1a:99:61:9d:
93:f9:17:13:fc:1d:05:b4:bc:f3:d5:bd:05:8c:f8:3d:fb:90:
7f:b7:52:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:17 2025 by rpki-client