Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/EwYqKQ-Fb9-9qgVaQhag1eMoWDw.roa
File: EwYqKQ-Fb9-9qgVaQhag1eMoWDw.roa (raw, json)
Hash identifier: ExrgUuQacRLf5QtqDZLgAUjxyl+sE/0Om4na8BJOIcc=
Subject key identifier: 13:06:2A:29:0F:85:6F:DF:BD:AA:05:5A:42:16:A0:D5:E3:28:58:3C
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 018571B9F3578FA58E9A5714253601203B4F
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/EwYqKQ-Fb9-9qgVaQhag1eMoWDw.roa
Signing time: Mon 02 Jan 2023 09:04:49 +0000
ROA not before: Mon 02 Jan 2023 09:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50585
IP address blocks: 194.110.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f3:57:8f:a5:8e:9a:57:14:25:36:01:20:3b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: Jan 2 09:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13062a290f856fdfbdaa055a4216a0d5e328583c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:a2:c2:42:0d:85:e9:d6:c2:a1:12:ec:0d:
16:83:fb:a1:50:2a:ea:bb:3f:9c:e6:c0:4f:3f:55:
44:13:33:69:f6:5c:6c:97:a3:b1:ca:b2:68:0b:71:
e1:0c:93:8b:dd:02:9b:32:97:24:f3:c9:9d:0b:40:
4b:1d:e1:25:be:6f:11:06:0a:05:f8:99:b8:01:80:
7c:08:6b:ef:6a:76:d2:9f:b8:14:6a:fe:cc:50:f8:
76:47:7b:23:b0:f6:ac:f9:14:22:c7:ed:c2:c9:9d:
59:d5:86:1c:7a:80:38:69:a8:37:7e:e4:df:19:6e:
1a:67:7f:9a:93:5c:18:ef:ea:86:dd:35:d5:de:55:
05:97:5a:d2:65:9b:15:38:a1:9c:07:09:73:5d:8b:
4c:5f:62:98:c0:ea:b0:0e:89:21:26:17:b1:bb:db:
c0:93:e5:07:1a:71:c0:a4:2a:d0:9c:ff:89:65:84:
84:a9:b4:bf:b2:52:8f:17:16:16:59:66:22:77:ab:
f8:8c:c7:0d:f6:96:8d:ce:ad:e5:00:e5:ff:c7:e3:
17:f9:dd:83:eb:77:e3:a1:da:8a:cc:35:57:6b:6e:
24:d2:da:af:da:fc:e2:a5:aa:7e:3f:9e:c2:57:e6:
7e:8a:88:71:27:24:73:94:55:f2:e7:98:ca:f4:17:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:2A:29:0F:85:6F:DF:BD:AA:05:5A:42:16:A0:D5:E3:28:58:3C
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/EwYqKQ-Fb9-9qgVaQhag1eMoWDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:bf:80:1c:53:23:e0:15:79:64:20:87:af:39:6d:89:e4:91:
7d:9e:50:7b:69:c0:1b:f8:06:5d:49:46:34:e0:ff:74:c6:2d:
6b:e1:4e:7a:2b:36:1f:47:8f:a7:9d:88:a1:b1:01:b5:f4:2b:
83:12:f5:05:3b:36:b8:31:52:7e:fc:4d:75:d0:b7:f5:93:e8:
7c:c2:b9:d5:a0:c3:18:67:a8:f8:75:4b:0c:49:d0:50:7f:ac:
d7:18:f7:94:10:cd:1e:06:96:a8:6a:00:18:4e:5b:4d:cd:2e:
24:ee:ab:2d:7c:20:21:2e:2a:09:7f:18:26:1c:37:41:3e:3a:
a8:0d:1e:aa:68:33:33:a8:ba:5d:93:d1:77:a6:66:f0:8c:32:
e1:dd:c3:ab:5d:73:93:61:be:16:d8:bf:c1:75:49:78:2b:e6:
40:59:15:f9:19:1d:f6:58:63:11:d2:04:06:19:44:c6:dc:91:
fa:b6:53:f6:9e:18:4a:bb:8a:55:40:77:10:d7:46:48:2b:92:
0b:8a:b4:df:64:66:05:94:d5:86:ab:bf:d9:df:97:5b:a1:77:
97:2b:3b:57:aa:1c:71:13:d1:f0:b1:9c:d2:35:81:d9:c5:da:
67:f7:c1:b4:22:f3:e7:6a:91:67:f8:a2:f4:1b:1c:67:cc:3a:
58:eb:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:27 2025 by rpki-client