Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/eQGet0H_DX4uELsyPSND4VyjTNE.roa
File: eQGet0H_DX4uELsyPSND4VyjTNE.roa (raw, json)
Hash identifier: rrbCKhHtCkFj0+kpwN4WcLIJLf/a5Mq9ri/XxVue7BY=
Subject key identifier: 79:01:9E:B7:41:FF:0D:7E:2E:10:BB:32:3D:23:43:E1:5C:A3:4C:D1
Certificate issuer: /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial: 01856B811747D7D53C10FF77A27120A9CC26
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/eQGet0H_DX4uELsyPSND4VyjTNE.roa
Signing time: Sun 01 Jan 2023 04:05:00 +0000
ROA not before: Sun 01 Jan 2023 04:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198295
IP address blocks: 91.197.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:17:47:d7:d5:3c:10:ff:77:a2:71:20:a9:cc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Validity
Not Before: Jan 1 04:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79019eb741ff0d7e2e10bb323d2343e15ca34cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:65:7d:13:2f:f1:6f:48:54:49:8e:45:63:
62:6c:ce:f5:f4:e9:7f:20:0d:e5:cb:95:1c:e3:b5:
de:b8:f2:79:95:0a:5e:9d:80:d9:41:77:14:50:5e:
8e:f4:ac:fb:b4:fe:e6:9e:77:ef:0f:b8:9e:a5:08:
56:b1:e8:84:7a:be:85:54:a7:d9:47:b4:6f:f6:78:
c3:ef:bc:d4:06:7e:3b:e9:ed:a2:9d:7e:1a:ab:55:
9c:f6:58:50:e9:08:48:e0:70:6b:8f:98:67:fc:c9:
99:b8:16:1f:6c:06:c9:8c:37:01:4a:fc:ae:bf:de:
4c:49:eb:bf:15:b7:a0:0c:35:27:45:2a:fb:5f:60:
9b:0a:be:27:16:c9:d8:bb:77:c1:9c:9c:02:1e:72:
b7:93:73:06:a5:1d:5d:3f:84:70:cf:d0:bd:be:fe:
7e:d4:f6:b1:c6:61:6d:3f:a9:d9:e2:a8:fd:36:62:
49:68:93:c2:de:55:4a:23:03:68:08:8b:1f:53:f9:
e9:5c:73:00:82:ee:51:6e:b4:d4:6e:ae:26:54:99:
1b:ab:62:6e:49:d2:9b:05:db:06:f9:18:15:db:cb:
f7:6f:8b:98:f7:06:b7:ee:f8:0b:ec:49:b8:15:0e:
89:8f:75:79:06:e3:0f:27:59:b3:ef:43:cf:c3:e8:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:9E:B7:41:FF:0D:7E:2E:10:BB:32:3D:23:43:E1:5C:A3:4C:D1
X509v3 Authority Key Identifier:
keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/eQGet0H_DX4uELsyPSND4VyjTNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:3e:a7:e2:4a:69:5d:19:86:d5:95:66:c0:94:8c:cb:da:6c:
a5:d4:2c:e6:0a:51:54:98:88:ff:cb:d0:88:ce:5d:96:75:51:
fc:87:14:2b:1a:3c:01:50:5d:35:94:2d:a6:1e:86:7d:2c:25:
78:ff:fe:fa:2b:5c:b3:4c:2a:bb:48:ff:02:39:a9:0b:83:7e:
b9:f2:8b:f2:1c:3c:69:a8:8a:73:34:5f:3e:7f:50:2c:cd:0c:
30:c3:fb:68:75:ba:5a:9b:57:21:03:b8:23:5f:a8:40:9d:d5:
70:75:57:af:e4:66:89:df:a1:f1:eb:59:d6:5d:e0:7f:67:6e:
99:62:67:a6:18:85:9a:99:39:93:53:2d:36:b8:f0:cb:ae:f0:
17:22:94:f6:95:7e:30:8f:2b:6c:9f:91:cc:60:d3:d2:8d:3a:
86:f9:3a:ba:d6:47:a3:41:ec:90:14:00:6c:43:cd:a1:52:33:
e4:e5:07:58:39:6e:b8:5f:7c:30:29:43:53:be:d3:57:a0:61:
06:a4:33:cc:19:18:49:7e:ee:a5:60:99:04:26:f3:f1:6a:fd:
e8:81:26:29:f4:e9:43:c8:36:29:3f:99:14:ef:bc:1f:66:8c:
17:87:6b:60:e0:6b:c3:07:53:fd:2e:e5:f8:7a:06:8d:d5:0b:
c2:cf:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:22 2025 by rpki-client