Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa
File: eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa (raw, json)
Hash identifier: IEnubwb/VjkUs3ooNN1q4pTgD3QhchK7RTJtI36AVQU=
Subject key identifier: 78:83:23:FC:AF:0E:3D:B2:82:49:87:2C:52:95:C4:9C:52:CC:D7:0E
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 01852AD9F7F029E12E4A7DA3FCA9A928215E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa
Signing time: Mon 19 Dec 2022 14:46:45 +0000
ROA not before: Mon 19 Dec 2022 14:46:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212166
IP address blocks: 193.30.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:d9:f7:f0:29:e1:2e:4a:7d:a3:fc:a9:a9:28:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Dec 19 14:46:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=788323fcaf0e3db28249872c5295c49c52ccd70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:04:bf:e2:f5:55:62:92:64:e6:8f:00:f6:
a6:d7:e8:8a:f6:18:d9:8d:29:65:85:af:8a:d5:27:
07:7e:d6:dd:e1:cb:9e:c8:b5:28:f8:5b:d5:44:48:
1e:54:d8:70:56:c1:a0:21:49:90:20:d3:27:37:01:
f4:ec:6a:a9:31:ef:1e:c7:f7:ee:a8:58:3d:4d:d0:
05:26:aa:a4:00:f9:0b:b8:41:0e:78:51:85:48:cc:
56:ee:f0:a7:42:c0:5a:6e:88:9c:ec:90:51:15:dc:
64:22:01:d1:1d:1b:6e:8e:77:9c:78:d3:40:40:54:
64:9b:a1:d4:81:54:94:52:18:2d:0c:a5:bd:66:cf:
01:96:43:eb:89:b4:61:74:5b:d3:c9:b1:a5:f1:00:
b1:d2:12:9d:5a:38:2f:f6:51:f1:49:59:61:05:c6:
6e:84:ae:29:8f:0f:e3:25:5c:78:c0:89:f7:10:df:
c3:b9:f8:8e:a3:ad:f7:9b:5c:1c:cd:9d:86:c1:a6:
87:7a:68:8d:5d:b0:7b:00:96:d3:92:73:5c:0b:bd:
2c:61:13:a5:9f:91:87:a6:b2:48:b2:a6:ee:a7:4d:
53:af:6b:c8:48:30:91:cf:4a:c3:1d:3e:e5:81:69:
25:8b:24:57:c1:d6:97:13:31:6c:e5:cc:a1:14:db:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:23:FC:AF:0E:3D:B2:82:49:87:2C:52:95:C4:9C:52:CC:D7:0E
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/eIMj_K8OPbKCSYcsUpXEnFLM1w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.101.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a9:5c:42:df:67:8a:2e:54:21:1d:5f:cd:fb:49:30:af:02:
c6:5e:ae:90:dc:63:f0:87:b8:30:75:d3:22:04:11:0b:db:a1:
e9:1c:f9:81:4f:c8:81:d5:56:7e:c2:41:20:fa:b2:ec:86:a7:
e7:4c:c7:51:4f:76:42:90:c5:e8:6d:4e:4d:1a:b8:15:0f:9e:
1f:16:55:0d:ff:f7:c4:7b:8b:c5:87:9c:0a:41:58:19:18:5c:
52:ff:1c:30:21:fd:4c:59:49:1e:43:85:60:1d:30:f8:af:d8:
74:1d:93:41:81:e5:d3:2e:a8:47:8a:4a:fc:24:05:4a:20:43:
c0:1b:dd:5e:65:15:26:91:2a:1c:0c:87:43:33:ef:fc:ce:fb:
18:c2:70:e6:1b:d2:51:c8:94:22:ce:24:8b:88:1b:ea:8d:90:
01:18:17:45:7c:e2:8c:73:96:ad:f7:a4:e9:0f:93:c7:70:1c:
e8:1c:14:19:32:5c:13:15:4d:95:c6:0d:36:ff:fd:a3:cf:ec:
a2:41:a4:34:fc:77:7e:1d:22:e7:ce:e4:95:a6:44:b9:af:d8:
6f:8d:2c:8d:c0:23:bf:a2:93:46:72:02:45:da:a1:ee:0e:6a:
55:8a:e1:f6:c9:f6:dc:b3:1f:15:94:08:1e:1b:32:df:4c:09:
2c:cb:be:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUq2ffwKeEuSn2j/KmpKCFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjIxMjE5MTQ0NjQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODgzMjNmY2FmMGUzZGIyODI0OTg3MmM1Mjk1YzQ5YzUyY2NkNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWcEv+L1VWKSZOaPAPam1+iK9hjZ
jSllha+K1ScHftbd4cueyLUo+FvVREgeVNhwVsGgIUmQINMnNwH07GqpMe8ex/fu
qFg9TdAFJqqkAPkLuEEOeFGFSMxW7vCnQsBaboic7JBRFdxkIgHRHRtujneceNNA
QFRkm6HUgVSUUhgtDKW9Zs8BlkPribRhdFvTybGl8QCx0hKdWjgv9lHxSVlhBcZu
hK4pjw/jJVx4wIn3EN/DufiOo633m1wczZ2GwaaHemiNXbB7AJbTknNcC70sYROl
n5GHprJIsqbup01Tr2vISDCRz0rDHT7lgWkliyRXwdaXEzFs5cyhFNtFQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHiDI/yvDj2ygkmHLFKVxJxSzNcOMB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvZUlNal9LOE9QYktDU1ljc1VwWEVuRkxNMXc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR5lMA0G
CSqGSIb3DQEBCwUAA4IBAQCRqVxC32eKLlQhHV/N+0kwrwLGXq6Q3GPwh7gwddMi
BBEL26HpHPmBT8iB1VZ+wkEg+rLshqfnTMdRT3ZCkMXobU5NGrgVD54fFlUN//fE
e4vFh5wKQVgZGFxS/xwwIf1MWUkeQ4VgHTD4r9h0HZNBgeXTLqhHikr8JAVKIEPA
G91eZRUmkSocDIdDM+/8zvsYwnDmG9JRyJQiziSLiBvqjZABGBdFfOKMc5at96Tp
D5PHcBzoHBQZMlwTFU2Vxg02//2jz+yiQaQ0/Hd+HSLnzuSVpkS5r9hvjSyNwCO/
opNGcgJF2qHuDmpViuH2yfbcsx8VlAgeGzLfTAksy77w
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:32 2025 by rpki-client