Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/e1H6CQyANzL_9ZeXeRTWQsMJD3E.roa
File: e1H6CQyANzL_9ZeXeRTWQsMJD3E.roa (raw, json)
Hash identifier: W28No4sskNTb0bJ5egx1s5MZUCf+09Tmcc5NGQaStO0=
Subject key identifier: 7B:51:FA:09:0C:80:37:32:FF:F5:97:97:79:14:D6:42:C3:09:0F:71
Certificate issuer: /CN=bc075a22749762ecaaff9cbc217b82f17269e362
Certificate serial: 0187C8191BEEB2C37FB8167517FE5C1595FE
Authority key identifier: BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/e1H6CQyANzL_9ZeXeRTWQsMJD3E.roa
Signing time: Fri 28 Apr 2023 13:41:41 +0000
ROA not before: Fri 28 Apr 2023 13:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210728
IP address blocks: 213.173.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:19:1b:ee:b2:c3:7f:b8:16:75:17:fe:5c:15:95:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc075a22749762ecaaff9cbc217b82f17269e362
Validity
Not Before: Apr 28 13:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b51fa090c803732fff597977914d642c3090f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:71:1a:13:d9:06:6e:7a:f3:92:04:d4:db:
bb:1e:28:27:09:da:e6:4f:ef:d8:20:02:7b:9c:96:
f7:78:08:12:a7:44:b6:c0:9f:fa:e0:89:b9:f9:74:
03:c1:5b:8b:6b:e1:b6:7a:cd:78:d9:a4:1b:a0:6d:
ec:19:bf:e6:8e:ac:dd:b3:a8:2f:3f:a8:a9:0c:91:
04:a1:ca:4b:16:32:17:d1:da:b9:22:60:52:8e:ac:
53:19:0d:c7:81:80:4f:0f:af:59:da:47:82:93:61:
57:45:93:0f:6b:93:68:27:55:9e:d5:38:d9:5e:94:
1a:1e:00:e7:4f:49:c1:06:eb:18:ed:4c:ab:34:4c:
aa:11:21:b5:2e:f8:33:11:69:07:88:b5:c0:1d:6e:
7e:0f:f9:3d:f5:d8:d9:00:db:e7:a7:c7:a4:43:aa:
eb:a5:29:4d:e9:a4:dc:d2:46:fb:cb:dd:36:0b:d8:
7b:a2:f9:88:1f:b3:62:f0:2b:d2:c0:bb:22:d6:31:
44:ce:9f:5b:bf:5c:99:bc:eb:cb:57:e4:4c:23:77:
fc:e7:a3:49:95:12:bf:bd:03:70:71:6a:49:31:98:
5e:e0:77:54:b7:5a:ab:a4:69:b9:c4:8c:73:21:bc:
c4:12:88:d6:d1:9a:a6:aa:17:fe:f4:0a:27:b6:86:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:FA:09:0C:80:37:32:FF:F5:97:97:79:14:D6:42:C3:09:0F:71
X509v3 Authority Key Identifier:
keyid:BC:07:5A:22:74:97:62:EC:AA:FF:9C:BC:21:7B:82:F1:72:69:E3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAdaInSXYuyq_5y8IXuC8XJp42I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/e1H6CQyANzL_9ZeXeRTWQsMJD3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/492c8d-61a9-4804-9b05-c39c2cdc8362/1/vAdaInSXYuyq_5y8IXuC8XJp42I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c9:c3:e5:f5:88:4e:03:3c:65:1f:2c:e6:a8:c8:5a:01:90:
7c:4a:93:0d:31:22:88:a0:ce:11:ed:3d:fd:ee:13:3f:dd:81:
9e:ef:c8:3c:69:9d:fb:dd:59:cc:ac:c1:b9:a1:e7:14:d2:95:
4b:2a:09:1d:8a:5d:aa:29:a5:94:51:aa:ee:1a:8c:ea:f3:ff:
29:d9:06:80:48:c9:d9:58:0d:e8:e5:22:f4:ef:2a:fb:71:16:
56:8a:b2:1c:96:b1:2d:b8:c6:72:a6:eb:6d:fc:c2:a6:0a:81:
e7:0c:ae:79:e5:b1:91:3d:4c:c8:43:9f:4e:1f:da:5d:68:cb:
21:41:47:01:2a:8f:68:88:42:33:e0:29:55:37:3b:43:29:44:
68:3f:66:73:92:5f:01:6f:ef:22:12:92:03:77:82:fe:c4:38:
4d:f5:8d:b9:3c:fc:ec:33:1f:44:38:6f:2e:3a:d8:a7:54:1a:
dd:46:e5:d4:34:9c:3f:01:a9:f2:39:74:03:4c:f6:b9:ec:76:
a0:a5:c1:98:b7:1b:03:e4:4e:5a:ee:f9:10:01:08:12:7a:4c:
14:f1:60:2d:29:ab:a6:7f:79:67:42:35:f3:67:5a:ff:df:ef:
cf:3c:be:84:a0:86:e9:1d:1b:94:8c:15:b5:55:bc:a4:e6:3f:
0a:69:96:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfIGRvussN/uBZ1F/5cFZX+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMDc1YTIyNzQ5NzYyZWNhYWZmOWNiYzIxN2I4MmYxNzI2
OWUzNjIwHhcNMjMwNDI4MTM0MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjUxZmEwOTBjODAzNzMyZmZmNTk3OTc3OTE0ZDY0MmMzMDkwZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq81xGhPZBm5685IE1Nu7HignCdrm
T+/YIAJ7nJb3eAgSp0S2wJ/64Im5+XQDwVuLa+G2es142aQboG3sGb/mjqzds6gv
P6ipDJEEocpLFjIX0dq5ImBSjqxTGQ3HgYBPD69Z2keCk2FXRZMPa5NoJ1We1TjZ
XpQaHgDnT0nBBusY7UyrNEyqESG1LvgzEWkHiLXAHW5+D/k99djZANvnp8ekQ6rr
pSlN6aTc0kb7y902C9h7ovmIH7Ni8CvSwLsi1jFEzp9bv1yZvOvLV+RMI3f856NJ
lRK/vQNwcWpJMZhe4HdUt1qrpGm5xIxzIbzEEojW0Zqmqhf+9AontoYsgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtR+gkMgDcy//WXl3kU1kLDCQ9xMB8GA1UdIwQY
MBaAFLwHWiJ0l2Lsqv+cvCF7gvFyaeNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkFkYUluU1hZdXlxXzV5OElYdUM4WEpwNDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80OTJjOGQtNjFhOS00ODA0LTliMDUt
YzM5YzJjZGM4MzYyLzEvZTFINkNReUFOekxfOVplWGVSVFdRc01KRDNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80OTJjOGQtNjFhOS00ODA0LTliMDUtYzM5YzJjZGM4MzYy
LzEvdkFkYUluU1hZdXlxXzV5OElYdUM4WEpwNDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a0nMA0G
CSqGSIb3DQEBCwUAA4IBAQCtycPl9YhOAzxlHyzmqMhaAZB8SpMNMSKIoM4R7T39
7hM/3YGe78g8aZ373VnMrMG5oecU0pVLKgkdil2qKaWUUaruGozq8/8p2QaASMnZ
WA3o5SL07yr7cRZWirIclrEtuMZyputt/MKmCoHnDK555bGRPUzIQ59OH9pdaMsh
QUcBKo9oiEIz4ClVNztDKURoP2Zzkl8Bb+8iEpIDd4L+xDhN9Y25PPzsMx9EOG8u
OtinVBrdRuXUNJw/AanyOXQDTPa57HagpcGYtxsD5E5a7vkQAQgSekwU8WAtKaum
f3lnQjXzZ1r/3+/PPL6EoIbpHRuUjBW1Vbyk5j8KaZY1
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:51 2025 by rpki-client