Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/eQMmeX8v6u_1dBtb1pKfTGaXIfI.roa
File: eQMmeX8v6u_1dBtb1pKfTGaXIfI.roa (raw, json)
Hash identifier: BMSg86NICcnyHxPK8dnpKBK2dtpbu7kF1YKGjTP3hWU=
Subject key identifier: 79:03:26:79:7F:2F:EA:EF:F5:74:1B:5B:D6:92:9F:4C:66:97:21:F2
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 1136A5B6
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/eQMmeX8v6u_1dBtb1pKfTGaXIfI.roa
Signing time: Sat 01 Jan 2022 08:56:57 +0000
ROA not before: Sat 01 Jan 2022 08:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 286
IP address blocks: 193.17.185.0/24 maxlen: 24
193.17.186.0/24 maxlen: 24
195.234.152.0/24 maxlen: 24
2001:67c:1514::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288794038 (0x1136a5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Jan 1 08:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=790326797f2feaeff5741b5bd6929f4c669721f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:26:a0:71:a8:cd:dd:1d:a5:71:d6:c2:97:
3e:45:c7:55:9b:c5:93:d4:aa:e5:4c:df:29:00:ac:
0e:d6:e3:af:97:33:ff:f5:5f:e2:9e:4a:85:05:e5:
c9:59:27:0d:fb:d1:c4:35:a0:07:3a:e6:15:82:db:
ac:a2:31:35:2c:8e:bb:42:5c:60:5c:7a:fe:95:9b:
f3:72:b7:10:4d:0c:c1:3c:93:84:81:6a:ff:05:da:
92:19:a6:6f:53:01:03:82:45:3d:71:e5:f3:fa:63:
67:d0:02:54:ac:9b:58:5c:b3:7a:2f:7e:2f:e6:19:
aa:f0:bc:0a:fa:34:f0:5f:94:01:c0:0f:61:35:90:
4d:12:61:e1:e0:dc:05:2a:26:35:bc:6f:4b:c6:5b:
11:fb:b9:3d:5f:8c:fe:ca:b8:8a:2d:8d:74:29:cb:
f0:02:43:c6:91:28:92:6e:4b:fa:4b:58:12:a4:1c:
22:dc:7a:ce:c6:fd:b9:7e:92:aa:84:e1:cf:08:a4:
79:4b:99:1b:8f:64:77:d9:61:11:5c:02:a4:3c:04:
b2:ee:3c:f1:96:7e:e5:28:e0:10:da:c7:b4:be:a6:
a0:6e:5e:40:89:e6:fb:bb:22:3d:5b:1a:93:be:98:
3b:e2:08:74:4f:f0:68:76:09:cb:79:5d:0b:39:f7:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:26:79:7F:2F:EA:EF:F5:74:1B:5B:D6:92:9F:4C:66:97:21:F2
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/eQMmeX8v6u_1dBtb1pKfTGaXIfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.185.0-193.17.186.255
195.234.152.0/24
IPv6:
2001:67c:1514::/48
Signature Algorithm: sha256WithRSAEncryption
70:65:e0:e9:41:8f:85:ff:d3:94:5f:f7:91:63:9a:ae:08:2c:
4e:7d:90:75:9e:73:d5:3d:ce:00:0e:61:21:96:d9:87:29:91:
bb:36:29:87:8a:66:a3:f5:1b:6e:59:fd:bf:9a:d1:8b:f5:45:
da:ca:ee:73:c9:df:7d:b2:00:d7:61:fb:87:4d:ac:f5:88:dd:
f1:9e:e0:71:5d:fe:28:cc:80:ef:d4:d2:da:25:32:aa:7f:b3:
c3:b5:d0:e6:0e:90:bc:80:5a:9e:60:5e:db:15:b1:24:d8:2f:
b6:4b:2b:89:0b:b3:18:9d:ba:ad:82:f3:15:b5:9a:88:8c:46:
0d:af:9b:7b:72:58:8f:b5:c9:4b:53:fe:da:da:d2:ae:a0:a5:
4f:05:3d:ac:fb:d6:a7:73:93:74:c8:96:26:ad:d7:7c:16:5e:
de:6b:52:9f:ab:62:30:7d:0a:b4:e1:ef:b1:1e:ce:0f:6c:42:
9c:0d:5c:ef:4d:c0:11:d0:00:24:a8:9e:7a:1a:cd:d3:c4:6c:
84:3d:ea:29:3b:ec:36:5c:09:c6:37:15:a2:03:5e:91:33:5a:
00:02:fc:8f:60:ab:18:9b:8c:8c:46:2f:e6:62:62:ee:e5:3f:
c9:e1:8e:20:50:a5:89:02:2d:c4:6b:c2:15:92:80:0f:cd:b8:
1b:b0:98:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIEETaltjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZDk1NTMzZWY0N2ZkOTRiOGM1NTRkZjNkMjI4ZWVkY2Q0Y2EwMzg0MB4XDTIyMDEw
MTA4NTY1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzkwMzI2Nzk3ZjJm
ZWFlZmY1NzQxYjViZDY5MjlmNGM2Njk3MjFmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN2TJqBxqM3dHaVx1sKXPkXHVZvFk9Sq5UzfKQCsDtbjr5cz
//Vf4p5KhQXlyVknDfvRxDWgBzrmFYLbrKIxNSyOu0JcYFx6/pWb83K3EE0MwTyT
hIFq/wXakhmmb1MBA4JFPXHl8/pjZ9ACVKybWFyzei9+L+YZqvC8Cvo08F+UAcAP
YTWQTRJh4eDcBSomNbxvS8ZbEfu5PV+M/sq4ii2NdCnL8AJDxpEokm5L+ktYEqQc
Itx6zsb9uX6SqoThzwikeUuZG49kd9lhEVwCpDwEsu488ZZ+5SjgENrHtL6moG5e
QInm+7siPVsak76YO+IIdE/waHYJy3ldCzn3y20CAwEAAaOCAigwggIkMB0GA1Ud
DgQWBBR5AyZ5fy/q7/V0G1vWkp9MZpch8jAfBgNVHSMEGDAWgBTtlVM+9H/ZS4xV
TfPSKO7c1MoDhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdaVlRQdlJfMlV1TVZVM3owaWp1M05US0E0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvN2EwNDIzLTlhOTUtNDJjMS04MWU1LTE0ZGE3OWQ2YzNhYS8x
L2VRTW1lWDh2NnVfMWRCdGIxcEtmVEdhWElmSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
N2EwNDIzLTlhOTUtNDJjMS04MWU1LTE0ZGE3OWQ2YzNhYS8xLzdaVlRQdlJfMlV1
TVZVM3owaWp1M05US0E0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA+
BggrBgEFBQcBBwEB/wQvMC0wGgQCAAEwFDAMAwQAwRG5AwQAwRG6AwQAw+qYMA8E
AgACMAkDBwAgAQZ8FRQwDQYJKoZIhvcNAQELBQADggEBAHBl4OlBj4X/05Rf95Fj
mq4ILE59kHWec9U9zgAOYSGW2Ycpkbs2KYeKZqP1G25Z/b+a0Yv1RdrK7nPJ332y
ANdh+4dNrPWI3fGe4HFd/ijMgO/U0tolMqp/s8O10OYOkLyAWp5gXtsVsSTYL7ZL
K4kLsxiduq2C8xW1moiMRg2vm3tyWI+1yUtT/tra0q6gpU8FPaz71qdzk3TIliat
13wWXt5rUp+rYjB9CrTh77Eezg9sQpwNXO9NwBHQACSonnoazdPEbIQ96ik77DZc
CcY3FaIDXpEzWgAC/I9gqxibjIxGL+ZiYu7lP8nhjiBQpYkCLcRrwhWSgA/NuBuw
mH8=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:00 2025 by rpki-client