Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/EpMP-Fv21HowbqKS-MezyFzK0hw.roa
File: EpMP-Fv21HowbqKS-MezyFzK0hw.roa (raw, json)
Hash identifier: MHVCpFtM1KXmzmeR8+DrPph4ByK7WC8zCmgVALCU2ds=
Subject key identifier: 12:93:0F:F8:5B:F6:D4:7A:30:6E:A2:92:F8:C7:B3:C8:5C:CA:D2:1C
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 01856CEF3AE818CB07B3BBEB17C56A385230
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/EpMP-Fv21HowbqKS-MezyFzK0hw.roa
Signing time: Sun 01 Jan 2023 10:44:55 +0000
ROA not before: Sun 01 Jan 2023 10:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60267
IP address blocks: 185.72.15.0/24 maxlen: 24
193.242.164.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:3a:e8:18:cb:07:b3:bb:eb:17:c5:6a:38:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 1 10:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12930ff85bf6d47a306ea292f8c7b3c85ccad21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:65:a3:03:b7:94:63:35:6c:38:6c:4d:45:
8e:fb:4e:4a:f5:4e:e0:ce:7b:01:ea:1f:e9:37:6e:
50:10:c1:73:ad:8b:c4:f6:19:f5:6a:32:f4:ee:56:
31:1c:50:ec:b5:60:7e:6f:3d:80:41:ea:41:5c:61:
27:9f:74:94:ec:9e:5b:9a:a4:c6:e6:64:2f:15:eb:
aa:a8:72:e9:a3:98:85:9f:9e:be:25:e3:82:18:b8:
c0:87:dc:c3:16:9b:47:ab:4a:49:f0:d0:b7:03:ca:
ea:21:19:f3:b0:33:f1:61:ec:07:b6:83:d4:07:5a:
80:bc:c5:48:e4:6c:eb:48:a0:95:6b:3e:7a:05:8c:
c7:3b:0a:96:98:01:d4:48:d0:02:79:8f:ca:1c:be:
cd:c4:fa:2d:93:c3:ef:48:35:49:3c:09:aa:60:59:
50:90:89:13:75:79:6d:4b:c8:f7:d1:43:87:a0:72:
b0:bf:d8:22:4c:cc:13:b9:a8:44:26:42:1e:c1:31:
98:c4:44:06:66:c0:a2:65:92:19:6b:90:3f:7b:b5:
3f:51:4f:85:b2:8d:00:dc:4c:50:93:bb:96:af:66:
a0:b2:23:36:57:13:ac:18:65:b0:e9:32:10:af:d7:
a1:7e:ed:b9:23:52:8f:21:52:79:66:b8:78:20:1a:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:0F:F8:5B:F6:D4:7A:30:6E:A2:92:F8:C7:B3:C8:5C:CA:D2:1C
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/EpMP-Fv21HowbqKS-MezyFzK0hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.15.0/24
193.242.164.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:64:c4:c6:ef:58:d4:eb:6e:43:a6:67:0a:a8:18:20:e9:f0:
67:a3:f7:11:94:ec:40:91:75:d9:ee:1e:26:9b:c3:60:af:0a:
9d:98:5c:43:6a:41:91:8f:4e:9c:11:3f:8a:80:8a:d8:b3:65:
79:cc:85:e8:53:f1:07:21:d9:68:a9:57:1d:60:da:31:8c:f1:
61:8b:74:63:28:eb:9e:6b:97:82:a5:6b:cf:ef:f1:f7:64:d5:
8c:69:96:b1:1b:e8:3e:90:22:c9:7f:37:45:34:0f:19:58:df:
87:93:ca:e7:0f:b6:34:4d:35:ca:c8:eb:a8:74:42:69:ce:e4:
d5:00:0e:a7:fa:e0:f2:2a:9f:b8:98:95:c2:ca:2e:74:46:b6:
d6:80:00:92:24:55:30:d1:0a:e4:94:41:ca:6f:f8:be:b5:17:
4d:40:2e:6c:86:5b:21:e5:cc:02:74:a6:6a:28:75:31:7c:fd:
22:c2:12:c1:78:69:ff:28:10:9f:bf:43:89:80:ca:a9:f4:a0:
1f:29:b5:55:ac:1d:21:41:aa:81:71:dd:46:d3:bc:08:6d:92:
5e:87:e4:f9:d4:9a:16:76:de:d4:8d:54:11:1b:a6:7d:7f:6d:
d9:ad:2d:92:0c:5e:59:5a:4c:38:a0:43:9d:5d:08:58:12:0b:
fd:33:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:37:31 2025 by rpki-client