Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eUsEMJztw6rSgobSlDB211RxVGM.roa
File: eUsEMJztw6rSgobSlDB211RxVGM.roa (raw, json)
Hash identifier: ymag9i2zrPGVZMNW+pda83maNI9r28/xs0+FIqv9ep4=
Subject key identifier: 79:4B:04:30:9C:ED:C3:AA:D2:82:86:D2:94:30:76:D7:54:71:54:63
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 136D9D7A
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eUsEMJztw6rSgobSlDB211RxVGM.roa
Signing time: Sat 01 Jan 2022 05:58:25 +0000
ROA not before: Sat 01 Jan 2022 05:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60799
IP address blocks: 82.98.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325950842 (0x136d9d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=794b04309cedc3aad28286d2943076d754715463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:5a:21:bf:e1:ae:cf:c9:c8:39:b7:4d:1d:
80:8c:49:d1:ae:e3:89:42:af:ba:73:c3:52:d8:53:
8a:ad:02:ab:9c:b0:3d:e1:0e:22:c9:a8:1d:9c:de:
16:90:b3:84:1d:0c:69:0f:d7:a5:23:82:19:b7:81:
c0:64:0b:a0:d3:68:e4:57:98:5b:42:4e:fa:cf:1e:
02:69:7c:e9:99:aa:f9:57:8b:4b:91:a0:a3:e0:7b:
af:b0:ae:4b:43:98:31:2a:96:f3:f4:bc:67:17:37:
15:2c:a3:9c:6e:a5:4d:cd:ea:63:91:1d:68:72:d9:
5c:3f:53:f9:8f:42:20:36:cd:65:11:df:9a:9e:81:
ec:36:91:b3:82:e2:27:d3:a4:23:a3:97:92:4d:ce:
e9:30:9f:04:af:a0:a4:17:01:6b:7c:63:12:f2:38:
db:de:16:f5:e8:04:d5:3d:9a:3e:98:e4:56:94:6c:
e5:7c:c6:9c:f3:82:9f:c1:f0:32:4f:6d:b6:21:57:
ef:40:e3:ba:87:2b:4d:dc:a7:98:23:b3:72:cb:11:
7e:73:fc:d2:0c:93:86:15:9a:39:86:90:35:cf:1c:
b4:23:ce:e3:a6:26:43:46:59:e8:2c:34:a5:f5:af:
64:6f:6c:4d:6b:09:7f:af:74:f1:be:86:14:b3:79:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:04:30:9C:ED:C3:AA:D2:82:86:D2:94:30:76:D7:54:71:54:63
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eUsEMJztw6rSgobSlDB211RxVGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1a:92:0f:7b:13:88:91:1f:34:ff:a8:e7:a7:d2:24:03:d9:
bf:d8:2b:31:0b:ac:da:d6:6d:6f:7b:9f:be:7a:f0:53:a9:95:
b5:d9:64:05:47:e0:69:d5:5f:3b:09:e6:7f:a4:9f:26:66:9d:
d1:12:c7:60:31:4c:9d:43:9a:00:ce:ca:55:36:48:79:af:3e:
c5:1d:04:dd:75:2b:b0:27:0e:9e:12:8a:c9:fa:2e:70:85:fc:
50:0e:3e:e8:78:fe:bb:de:50:c0:82:14:8c:53:cd:46:83:ca:
00:02:cd:a0:ec:a0:05:83:81:f4:57:a5:34:e4:9f:9d:3e:fc:
6c:66:59:1d:50:15:94:be:9b:50:af:dc:95:3c:a9:8c:5f:89:
b6:eb:7f:97:71:f8:ff:35:06:79:0e:2a:af:01:da:b6:35:c0:
27:49:66:68:72:32:58:61:be:a7:29:77:0b:fb:ae:ea:35:64:
e0:1d:41:a4:ea:70:16:48:51:d5:f8:78:ca:e1:5b:23:f5:36:
79:df:9e:e4:ef:5f:72:9c:85:cf:4e:f8:fa:d1:dc:66:5a:d4:
59:f0:a4:f2:83:82:7d:02:f7:4f:31:c5:a0:22:32:14:18:67:
9a:b8:0c:38:1c:63:26:ca:e3:73:9d:19:f6:da:6a:01:a0:98:
83:9a:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:33 2025 by rpki-client