Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/eL8TdW7W0479Q3xmehemX74MvRQ.roa
File: eL8TdW7W0479Q3xmehemX74MvRQ.roa (raw, json)
Hash identifier: mIH1PnWbjxcZl8XCc3k5LUL+8R5V2WIP3gW4XsGNspc=
Subject key identifier: 78:BF:13:75:6E:D6:D3:8E:FD:43:7C:66:7A:17:A6:5F:BE:0C:BD:14
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 04E6AD8D
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/eL8TdW7W0479Q3xmehemX74MvRQ.roa
Signing time: Sat 01 Jan 2022 05:53:00 +0000
ROA not before: Sat 01 Jan 2022 05:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13249
IP address blocks: 193.109.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82226573 (0x4e6ad8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Jan 1 05:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78bf13756ed6d38efd437c667a17a65fbe0cbd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:22:88:05:fa:d8:83:21:e9:62:0f:27:d7:
e8:3c:3b:17:11:a0:8f:a8:66:51:7e:27:07:a0:25:
60:28:8a:73:47:e9:55:63:d4:07:40:17:39:89:f9:
6a:5d:d4:a9:99:bd:53:14:7c:c5:f1:e4:b3:42:e1:
95:74:8a:de:e5:ab:78:b6:bb:0e:e1:77:d7:25:85:
77:f8:d1:39:80:ef:04:1b:b1:8f:68:22:39:53:ed:
f8:86:a2:fe:05:13:fa:77:c2:f1:28:75:82:a6:12:
d3:cf:be:14:3b:7e:10:35:25:1a:b8:3c:3c:5c:08:
68:36:c6:90:72:94:58:a9:11:a7:54:cd:b5:dd:f0:
a1:f3:2d:f3:ca:a4:09:62:1e:de:eb:af:0d:2d:c6:
2e:c3:fb:5f:5a:3b:e8:d7:a1:50:e6:9a:4e:20:8e:
80:90:e3:4b:68:6b:bf:6b:f9:67:4f:5e:a6:97:7d:
c9:ed:44:ee:f0:df:26:8b:c8:78:89:27:b5:fa:f7:
29:dd:a2:82:52:04:21:c1:4e:a6:59:5e:f4:99:d5:
da:61:96:4c:99:07:a5:f9:99:cd:43:68:c4:db:59:
a7:ba:67:1f:df:8f:ec:40:d2:eb:0a:41:8f:7a:22:
41:6d:7f:a7:bb:d3:89:53:f0:ae:e5:89:f9:01:5c:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:13:75:6E:D6:D3:8E:FD:43:7C:66:7A:17:A6:5F:BE:0C:BD:14
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/eL8TdW7W0479Q3xmehemX74MvRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ce:90:f7:e4:b1:83:41:40:37:1d:48:ba:78:8b:38:53:1f:
9b:95:58:e8:71:6c:c3:dc:fe:3a:c5:9b:ea:c9:ec:0f:a0:b6:
c1:06:1d:1b:fe:87:d1:af:73:25:7f:62:af:95:2d:c0:93:97:
30:9a:08:79:23:94:af:da:79:25:1e:66:5c:32:f1:ef:23:4d:
2b:4f:9b:bf:64:cb:2e:cc:fa:94:cb:66:1c:33:8d:9d:aa:62:
6c:78:45:16:ae:56:f6:5a:4f:6c:4f:8d:03:e7:3f:fc:a2:0d:
9d:1b:a6:f3:af:7e:84:b0:71:ec:3c:d1:8e:b9:b4:13:71:b0:
d1:b3:3f:0d:55:5b:a8:ed:d8:48:94:a5:f1:df:b6:af:e3:3d:
5c:58:46:37:aa:d6:b8:9e:2c:bd:cf:23:8b:fc:b8:fa:5f:cb:
06:35:50:56:e2:60:a1:46:e7:b4:88:98:da:f5:29:35:44:24:
4b:48:1c:97:ce:7e:6e:18:7d:85:4b:ba:4e:88:cf:81:24:33:
e5:68:68:8b:e6:e6:ff:cb:32:02:cf:66:87:12:4d:bd:ab:09:
77:85:e8:c9:56:33:a3:c5:9a:8d:fa:0c:7f:f3:3d:58:7b:88:
c4:0a:13:da:76:f1:85:a8:f5:23:3e:ed:03:38:ba:1e:6c:33:
10:13:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:20:40 2025 by rpki-client