Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/EaMbwJPDmdbyAhwyFhTCwA5LRF4.roa
File: EaMbwJPDmdbyAhwyFhTCwA5LRF4.roa (raw, json)
Hash identifier: IZGr/vTtQJS75UUVN2lxw+YUEmBOek2PZpQinZmczAs=
Subject key identifier: 11:A3:1B:C0:93:C3:99:D6:F2:02:1C:32:16:14:C2:C0:0E:4B:44:5E
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 01867EAC21857B29B7097CE0F09898C9B1AE
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/EaMbwJPDmdbyAhwyFhTCwA5LRF4.roa
Signing time: Thu 23 Feb 2023 14:27:35 +0000
ROA not before: Thu 23 Feb 2023 14:27:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201612
IP address blocks: 194.0.24.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
193.46.128.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:ac:21:85:7b:29:b7:09:7c:e0:f0:98:98:c9:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Feb 23 14:27:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a31bc093c399d6f2021c321614c2c00e4b445e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:f9:a8:a3:ed:1c:61:50:bc:62:09:0c:5b:
b2:d1:d2:22:5b:3b:7f:86:e1:c7:6d:03:b0:38:5e:
7a:ec:c6:13:93:26:b1:82:dd:a4:f7:ee:a7:37:81:
29:bf:35:bc:4b:f8:31:41:53:5b:80:02:8b:9e:cb:
69:01:d2:a3:bc:4f:ac:c7:4a:5a:03:98:18:79:0d:
74:a7:e9:1a:d0:5f:bc:8e:59:bc:4b:f4:73:d5:08:
ec:52:0e:ae:9e:fd:9a:85:1f:6f:f0:08:c5:6d:74:
f9:d2:a5:9c:78:86:99:96:a6:a7:6f:35:69:dd:b4:
39:98:46:ff:a2:16:43:cb:46:b0:fd:35:5c:81:66:
f0:38:13:f0:5d:0a:00:3f:4b:43:c0:ea:c2:e7:f1:
f7:2d:02:b7:89:56:af:c7:f6:80:b3:b0:a7:95:bf:
7c:e0:6a:cc:cd:52:3a:94:ec:aa:e3:ec:81:61:b5:
4a:b6:b3:66:c4:d9:66:4d:27:3d:48:1a:ce:ac:b9:
2f:06:ca:4c:64:be:45:c9:ad:f4:1f:f9:6a:d4:47:
3f:92:e0:0c:e3:b0:14:4a:c8:c9:8d:af:02:dd:da:
53:51:18:08:22:c0:8a:8f:44:92:d9:0a:b5:34:a2:
3e:e7:37:88:07:8c:c3:29:c2:68:2f:13:26:34:d0:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:1B:C0:93:C3:99:D6:F2:02:1C:32:16:14:C2:C0:0E:4B:44:5E
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/EaMbwJPDmdbyAhwyFhTCwA5LRF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.128.0/24
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
79:06:ad:ce:85:0c:04:d3:3d:35:66:61:2e:96:aa:32:33:41:
42:fd:bc:75:d6:c7:79:49:31:65:00:e8:56:fa:2e:cf:e8:e2:
ec:e7:ef:4a:c3:cc:8a:87:6a:61:01:8b:f6:01:dd:c4:c5:07:
f7:28:7b:a1:d4:b3:54:f9:67:40:5c:86:12:c7:68:e4:e1:15:
70:cd:9b:40:3f:b1:c0:ab:04:55:b1:22:6e:4b:08:3c:3c:c5:
57:a2:91:70:21:80:ed:92:f9:12:b6:bc:d6:15:f0:ea:34:23:
78:2b:6a:f7:ed:06:d3:58:cb:10:74:aa:94:71:08:95:1a:18:
c0:b5:96:b7:3d:80:cd:bb:9b:4d:5b:2e:c8:b0:71:1f:c3:be:
81:1d:fd:f2:23:74:ca:4f:6a:8c:0c:ba:bf:e7:98:1c:74:84:
b7:c5:ad:20:ac:e6:74:1a:09:65:8a:70:2e:57:b5:35:8d:af:
d6:b9:9c:55:01:e5:4d:84:21:05:7a:76:4d:7f:0a:b1:18:ff:
84:0b:3f:96:11:e9:18:0e:81:5c:13:aa:61:a6:ed:73:e8:ac:
43:3e:00:3a:91:47:8c:8f:dc:ef:47:d4:0a:5a:0c:3d:c8:e5:
a3:d8:1a:3f:ef:fc:d7:ae:98:03:9e:13:87:82:f5:6c:57:b2:
c8:1e:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:26:24 2025 by rpki-client