Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/e1kd_Qe_w_0vs7RO7_PQybV6ik0.roa
File: e1kd_Qe_w_0vs7RO7_PQybV6ik0.roa (raw, json)
Hash identifier: ZUVCBPwz9jk8HpnPYCuIweQDcJbcgZvOCMiCfpLN2g4=
Subject key identifier: 7B:59:1D:FD:07:BF:C3:FD:2F:B3:B4:4E:EF:F3:D0:C9:B5:7A:8A:4D
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01847BA5A54CE19494B7AB963B1A1FFB9A7B
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/e1kd_Qe_w_0vs7RO7_PQybV6ik0.roa
Signing time: Tue 15 Nov 2022 14:16:03 +0000
ROA not before: Tue 15 Nov 2022 14:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204428
IP address blocks: 80.94.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:a5:a5:4c:e1:94:94:b7:ab:96:3b:1a:1f:fb:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 15 14:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b591dfd07bfc3fd2fb3b44eeff3d0c9b57a8a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:f3:06:61:21:25:8d:8f:fb:d2:bd:f4:04:
2c:12:cf:a2:3d:01:ff:f3:f8:32:96:11:60:9d:c0:
5e:f4:3f:aa:bc:da:06:cc:43:02:1f:56:ed:f1:b0:
67:fc:4d:16:e0:b7:c4:d3:3a:d4:f7:50:5b:f4:46:
4a:e9:3f:11:d1:21:17:59:f7:84:b1:d4:99:03:9a:
92:d3:4e:93:9f:b2:12:3d:8b:be:2f:15:8a:ed:65:
2a:a6:20:a1:bd:56:25:91:bb:6d:4f:83:84:21:7d:
73:5f:bb:18:d9:9b:78:a0:05:2a:64:8c:ba:3f:51:
f8:76:4e:0e:ee:94:46:70:02:f7:6a:6d:29:84:b5:
2c:1e:16:71:06:72:71:ea:a5:ed:5a:4e:ba:c6:82:
9c:c6:f1:3e:0c:d0:48:0e:b8:32:1a:6b:06:18:b8:
a2:8e:c2:a2:eb:6a:6b:89:23:da:f5:34:77:d4:60:
c8:cb:13:6d:f5:f2:94:43:2f:93:9c:f7:b3:11:ac:
3f:94:81:42:92:29:7b:f7:06:d7:3c:6e:ad:f7:5c:
f4:6f:e3:dc:8a:de:00:6d:23:d2:49:6b:49:7a:f3:
1b:2e:87:d4:62:ed:08:cc:f7:f0:ae:65:74:bd:f2:
db:c6:2e:6f:0b:5d:d1:dc:d4:4e:9e:c3:50:3e:2e:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:59:1D:FD:07:BF:C3:FD:2F:B3:B4:4E:EF:F3:D0:C9:B5:7A:8A:4D
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/e1kd_Qe_w_0vs7RO7_PQybV6ik0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:82:b0:f5:0c:aa:41:45:fa:16:d4:45:46:04:81:23:31:1b:
36:52:94:c7:0f:98:a6:68:06:fe:42:70:07:e0:3b:ef:68:98:
9c:59:93:31:1b:09:0e:7d:da:69:ed:65:12:5b:56:ef:3a:70:
2b:d0:00:33:a2:28:58:1c:ee:a9:75:6c:62:c7:53:e4:3d:78:
bd:22:20:3f:c6:02:37:63:d6:52:45:ab:b5:ee:34:42:a1:87:
bc:92:9b:84:dc:3d:dc:55:24:8e:24:ff:a7:b9:db:dc:09:2c:
b7:8a:4f:8b:e7:a8:bb:22:53:1f:ee:52:6d:02:47:6b:2d:fc:
c7:79:22:fb:cb:aa:04:ca:44:c1:b2:36:16:00:13:13:e7:ea:
2f:de:ba:80:d3:a6:55:b5:58:6c:14:6e:18:b5:d4:e8:10:8d:
5e:8b:c3:7c:26:0e:33:52:df:d6:09:1f:08:9f:81:56:51:0b:
60:7c:8a:d0:17:99:26:0a:da:86:5f:87:1b:53:e5:8c:72:5a:
d5:70:d4:83:0a:52:89:c1:77:cd:c9:a2:ba:a4:fc:dc:df:42:
3f:b9:ad:f7:c7:68:e5:e2:b5:12:aa:5c:e0:1d:4d:cf:e1:b2:
70:39:b9:a8:39:9f:f6:0b:fa:ce:90:f0:2e:60:6e:93:9e:e0:
20:11:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:55 2025 by rpki-client