Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/E9v5QhEMG-I3tTgvZrXom03PsVg.roa
File: E9v5QhEMG-I3tTgvZrXom03PsVg.roa (raw, json)
Hash identifier: CLJ1tZHIdFl8KyDpjTPOVhcXs0OtpJ/NRIadcADh6RE=
Subject key identifier: 13:DB:F9:42:11:0C:1B:E2:37:B5:38:2F:66:B5:E8:9B:4D:CF:B1:58
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 018553185645D7AC337C46ED8A79B44A0ABB
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/E9v5QhEMG-I3tTgvZrXom03PsVg.roa
Signing time: Tue 27 Dec 2022 10:19:41 +0000
ROA not before: Tue 27 Dec 2022 10:19:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31172
IP address blocks: 87.239.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:18:56:45:d7:ac:33:7c:46:ed:8a:79:b4:4a:0a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Dec 27 10:19:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13dbf942110c1be237b5382f66b5e89b4dcfb158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:ed:cc:b0:2c:6b:b9:d0:1d:93:ed:a0:37:
fc:f3:51:dd:65:3e:e0:2e:e8:19:8c:64:7a:31:43:
69:df:c9:de:0f:b9:d3:8a:d7:cf:c8:03:89:01:39:
dd:5b:ee:0d:e2:ec:a4:0d:d3:d6:6d:f2:bd:26:cb:
74:35:88:ef:e4:3c:5a:31:32:2e:e6:b6:b5:b4:4f:
70:2d:82:a3:bc:69:98:a5:ca:6f:84:d8:fa:af:41:
33:3f:a9:1a:38:cb:cb:2c:0e:36:e0:24:85:be:49:
49:14:41:1f:74:13:f7:6e:5a:d1:22:14:ee:39:30:
0e:cd:69:57:30:13:64:fc:db:cb:fd:d8:fe:22:57:
52:ae:33:e4:7c:bd:b4:26:21:5b:f2:5d:71:a6:1c:
9b:72:d4:40:76:ef:24:14:28:ec:74:21:7d:9d:9d:
bf:0d:7a:68:58:62:9d:dc:86:64:20:3b:91:8c:d0:
57:4c:b2:ec:a1:13:89:7c:47:8d:d2:23:55:fb:64:
9e:7d:85:db:41:59:b1:12:09:1e:3b:a7:79:dd:ad:
1a:54:15:62:d9:96:f0:3a:f1:98:ab:f5:80:a7:2e:
5e:e3:2c:3d:fb:5c:a7:f1:8b:2f:44:56:26:7b:fe:
70:53:c0:b4:8c:72:e7:82:bf:00:3d:6d:f1:0f:c2:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DB:F9:42:11:0C:1B:E2:37:B5:38:2F:66:B5:E8:9B:4D:CF:B1:58
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/E9v5QhEMG-I3tTgvZrXom03PsVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:76:78:54:e6:ba:8b:97:0f:9c:55:af:55:f8:ae:00:58:ef:
75:ed:96:d2:cc:8c:c1:6c:86:72:17:00:32:97:82:27:25:50:
42:47:94:b1:1b:a9:fc:8d:51:df:0b:66:53:2c:db:5d:4f:16:
92:8d:24:65:42:22:5b:9c:ce:04:6c:2d:3e:10:1b:90:d7:68:
8a:45:ed:f5:27:c3:a2:08:10:67:c8:7a:86:bb:46:44:4e:8a:
1e:05:57:49:10:75:97:0a:d4:58:e1:5a:1b:e5:65:c0:b9:56:
9a:d1:60:f5:4b:91:f9:c6:68:31:ef:23:f0:bf:a9:dc:73:1f:
59:c9:6a:67:5c:e0:f8:1d:04:fc:23:75:d0:96:e7:3d:f9:82:
54:3b:de:ca:fb:dc:39:6f:da:0a:f9:15:fb:5a:df:1d:b0:26:
e1:e9:7d:5b:6c:07:8c:ba:34:45:d8:67:ed:ba:73:68:57:2d:
45:6f:de:93:99:ee:15:15:79:65:64:2c:c5:ba:f2:b5:4e:1b:
0c:73:cc:0d:2d:dc:94:dc:27:f5:38:66:66:0f:d8:48:1f:25:
43:1d:4f:46:72:48:78:4b:3b:b4:06:63:b3:6f:dd:9a:47:bc:
f7:2b:1b:50:d1:b4:a2:52:e1:3a:f8:8f:a9:14:71:dc:75:03:
c9:c6:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:35 2025 by rpki-client