Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/eA8evzmsweCudOwb_k706M7rgKM.roa
File: eA8evzmsweCudOwb_k706M7rgKM.roa (raw, json)
Hash identifier: mSN/jx5YIwMBqHgQpEiwHECoqjFInZLRme/g/KtfgAI=
Subject key identifier: 78:0F:1E:BF:39:AC:C1:E0:AE:74:EC:1B:FE:4E:F4:E8:CE:EB:80:A3
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 01856F0B5B4C12A9A92487ECDB4050AE4A14
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/eA8evzmsweCudOwb_k706M7rgKM.roa
Signing time: Sun 01 Jan 2023 20:34:53 +0000
ROA not before: Sun 01 Jan 2023 20:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 144.41.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:5b:4c:12:a9:a9:24:87:ec:db:40:50:ae:4a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Jan 1 20:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=780f1ebf39acc1e0ae74ec1bfe4ef4e8ceeb80a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:4c:93:0e:7d:58:5c:9e:c1:48:62:b5:8a:
5a:77:78:ef:22:57:07:83:5d:71:5e:da:41:35:46:
8e:77:90:fa:fa:a2:b7:dc:79:43:46:df:5c:27:89:
57:51:27:f2:33:99:27:ff:b6:57:5d:01:13:19:cb:
32:bc:34:d4:27:25:00:c5:74:dc:0b:ae:1b:69:82:
63:75:2f:af:87:2b:51:96:3b:f3:ba:3f:14:60:3f:
e9:de:ef:4c:25:60:2c:7e:8f:e5:95:82:71:2a:80:
dd:9b:9d:18:da:d7:01:dc:f2:33:1c:19:67:fa:da:
4d:3f:8e:4f:4e:c7:bb:38:4c:f3:8b:2e:2c:19:0d:
6d:ca:5a:88:72:96:6b:55:9c:fe:d5:1e:e6:84:f7:
ff:5a:55:f2:85:6c:f1:d1:21:b1:a9:50:56:ed:b6:
97:f3:e8:5c:7c:f5:41:14:6a:35:b8:60:8e:bb:03:
d2:de:0b:4b:c6:6d:e9:7f:c7:56:af:cb:7d:85:a8:
9d:39:d7:1e:b2:8a:28:38:92:c2:4c:f4:63:dc:9b:
1c:73:c5:4e:48:da:49:10:41:dc:d2:09:b1:ea:ef:
21:aa:91:5b:f7:48:a0:76:b8:77:0d:b5:3e:bc:dd:
a9:0e:46:a9:34:85:4c:c0:28:14:72:0e:e5:fd:a9:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:1E:BF:39:AC:C1:E0:AE:74:EC:1B:FE:4E:F4:E8:CE:EB:80:A3
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/eA8evzmsweCudOwb_k706M7rgKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:68:d2:5b:d3:34:ef:ca:22:bb:34:28:e1:a3:e5:18:84:d7:
6b:59:cb:60:ca:b7:c2:b8:a8:27:d8:c7:d8:18:bc:dd:fa:fb:
31:7e:80:78:c4:f2:79:6f:36:27:d1:7e:f7:0d:25:76:e6:eb:
65:ab:ec:3d:1e:db:d2:ba:b8:08:0f:41:3d:4d:72:a7:5b:b3:
bc:94:ba:69:7e:5d:c9:4c:c3:fc:76:6c:81:1e:98:cd:f3:12:
4e:b1:72:12:55:65:dc:c6:47:42:43:22:37:ef:26:ad:dd:b2:
1e:27:9c:65:76:82:60:d5:5d:96:b1:d4:8e:60:74:5c:2f:d4:
03:25:0f:28:15:06:75:0c:d3:1f:0e:ae:6b:f7:ad:67:c2:0e:
91:74:d8:77:0f:53:95:83:b9:93:ba:e0:80:e7:a0:8d:da:94:
b3:58:6a:8e:6b:4d:37:86:1a:52:40:41:9f:44:8e:a1:83:28:
14:77:f7:22:18:c9:4f:2d:9f:e9:e8:a6:b5:2e:b0:02:e6:48:
5c:f8:8a:1f:83:fb:68:ad:0b:e2:fc:af:6a:1a:bb:67:43:0d:
40:73:01:53:05:87:3d:d7:9f:41:98:b5:72:a9:49:ef:c5:44:
f8:f2:6f:42:6e:ab:09:76:c1:c2:08:e7:12:d8:3d:32:7e:fe:
d8:01:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:28 2025 by rpki-client