Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Eacn6qQHhuT3cnzRvU2FVxTaR_w.roa
File: Eacn6qQHhuT3cnzRvU2FVxTaR_w.roa (raw, json)
Hash identifier: dMQWb4DrmpHrd4yu8uMmNt8HA0NwD8oeCRrP49Jnxko=
Subject key identifier: 11:A7:27:EA:A4:07:86:E4:F7:72:7C:D1:BD:4D:85:57:14:DA:47:FC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0186743F19ABD37C172B207FC831533ECCF6
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Eacn6qQHhuT3cnzRvU2FVxTaR_w.roa
Signing time: Tue 21 Feb 2023 13:52:17 +0000
ROA not before: Tue 21 Feb 2023 13:52:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25038
IP address blocks: 62.132.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:3f:19:ab:d3:7c:17:2b:20:7f:c8:31:53:3e:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Feb 21 13:52:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a727eaa40786e4f7727cd1bd4d855714da47fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:ab:fa:1f:55:5d:70:66:b2:d9:0d:1e:03:
0b:a7:9e:4e:81:98:c4:23:8a:ef:f5:8c:9e:d1:ec:
f4:f4:ba:16:90:08:b3:36:ec:b7:21:00:c7:e6:56:
ee:39:67:6f:70:1a:a7:01:9f:e7:78:93:5c:ee:14:
9a:6a:dc:5c:06:7d:98:46:88:11:3b:6a:ea:f6:69:
c2:ed:74:3a:a8:73:aa:b1:fd:a7:7f:ea:e3:e2:e2:
48:dc:4d:f8:6e:2a:2c:7c:29:1d:32:e2:55:08:73:
85:40:c9:87:37:ed:82:de:1f:cb:4a:9f:bb:0f:07:
0c:59:fb:c7:a9:9d:1a:c9:e9:e9:3d:fa:d5:a7:f3:
70:da:76:e4:d4:50:83:66:c3:8c:e5:9f:39:21:8f:
7c:f7:ae:05:30:ef:a3:95:1c:aa:b1:d8:a6:5f:54:
3d:b6:93:7d:d7:62:16:03:59:0f:53:9c:5c:27:85:
74:b3:fb:70:28:33:f9:56:75:89:75:fd:ef:3c:36:
5b:15:bd:4a:d1:c8:3b:e3:a5:c4:ad:19:d0:d2:17:
ac:85:70:24:06:e8:fd:b2:8e:c4:ed:ab:12:6c:f1:
6d:7e:b9:72:ae:4d:64:bf:24:b2:3f:0f:32:e3:d4:
50:04:fb:ff:ae:5e:cb:c1:9d:ae:0d:3d:f8:a7:98:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:27:EA:A4:07:86:E4:F7:72:7C:D1:BD:4D:85:57:14:DA:47:FC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Eacn6qQHhuT3cnzRvU2FVxTaR_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.115.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ec:45:e3:16:b7:b7:6b:e1:8a:1d:80:0f:46:d3:17:b9:12:
86:09:5a:d1:49:fc:f6:e9:c8:87:b0:db:2c:c8:3d:0c:39:6d:
60:a9:20:17:e8:cc:47:eb:57:0a:55:ce:29:aa:2a:e5:cc:1b:
7f:a8:29:6a:c3:f6:ec:b1:40:a3:41:4b:7d:64:11:de:56:36:
c6:0f:67:8a:db:46:53:9a:d4:5f:5d:81:16:4f:f3:ab:4f:e0:
3b:18:64:f0:90:39:0c:25:a3:96:6c:96:8d:9e:78:4e:7e:45:
85:c6:3d:a6:81:a9:c8:3c:4e:15:c9:c9:76:84:d7:d6:cf:c9:
e8:ef:ae:a0:19:47:aa:a5:9b:02:a2:02:42:af:e8:ee:26:09:
1a:00:d1:6e:85:4d:d1:d3:20:c0:ed:f7:ab:bc:90:15:18:5d:
ca:58:81:ae:36:29:76:40:d0:ab:e7:00:cd:06:03:59:ce:5b:
6a:7b:bf:77:4c:22:e7:ba:bc:a3:7d:d9:28:e2:b0:87:39:85:
2f:36:3e:67:4b:18:94:7e:f7:27:39:bc:5b:9f:39:73:ce:9d:
7c:43:ea:31:6e:ee:00:94:79:8c:03:7d:ef:61:79:36:95:4f:
47:81:7a:52:69:f5:ae:a5:07:2d:dc:e5:93:cf:e2:d4:20:e4:
4d:de:57:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ0Pxmr03wXKyB/yDFTPsz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjMwMjIxMTM1MjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWE3MjdlYWE0MDc4NmU0Zjc3MjdjZDFiZDRkODU1NzE0ZGE0N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqir+h9VXXBmstkNHgMLp55OgZjE
I4rv9Yye0ez09LoWkAizNuy3IQDH5lbuOWdvcBqnAZ/neJNc7hSaatxcBn2YRogR
O2rq9mnC7XQ6qHOqsf2nf+rj4uJI3E34biosfCkdMuJVCHOFQMmHN+2C3h/LSp+7
DwcMWfvHqZ0ayenpPfrVp/Nw2nbk1FCDZsOM5Z85IY98964FMO+jlRyqsdimX1Q9
tpN912IWA1kPU5xcJ4V0s/twKDP5VnWJdf3vPDZbFb1K0cg746XErRnQ0heshXAk
Buj9so7E7asSbPFtfrlyrk1kvySyPw8y49RQBPv/rl7LwZ2uDT34p5hL0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGnJ+qkB4bk93J80b1NhVcU2kf8MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvRWFjbjZxUUhodVQzY256UnZVMkZWeFRhUl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPoRzMA0G
CSqGSIb3DQEBCwUAA4IBAQBi7EXjFre3a+GKHYAPRtMXuRKGCVrRSfz26ciHsNss
yD0MOW1gqSAX6MxH61cKVc4pqirlzBt/qClqw/bssUCjQUt9ZBHeVjbGD2eK20ZT
mtRfXYEWT/OrT+A7GGTwkDkMJaOWbJaNnnhOfkWFxj2mganIPE4Vycl2hNfWz8no
766gGUeqpZsCogJCr+juJgkaANFuhU3R0yDA7fervJAVGF3KWIGuNil2QNCr5wDN
BgNZzltqe793TCLnuryjfdko4rCHOYUvNj5nSxiUfvcnObxbnzlzzp18Q+oxbu4A
lHmMA33vYXk2lU9HgXpSafWupQct3OWTz+LUIORN3lfw
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:26 2025 by rpki-client