Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ejKDy3Y5-oeiDuqG975uwL7v8xc.roa
File: ejKDy3Y5-oeiDuqG975uwL7v8xc.roa (raw, json)
Hash identifier: JTycYyKIzAjjxjsLOfwomF6MNoM0XAZKug6NbZaQsfE=
Subject key identifier: 7A:32:83:CB:76:39:FA:87:A2:0E:EA:86:F7:BE:6E:C0:BE:EF:F3:17
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 069E7D22
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ejKDy3Y5-oeiDuqG975uwL7v8xc.roa
Signing time: Sat 01 Jan 2022 11:00:02 +0000
ROA not before: Sat 01 Jan 2022 11:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210567
IP address blocks: 185.163.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111050018 (0x69e7d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jan 1 11:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a3283cb7639fa87a20eea86f7be6ec0beeff317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:5c:b4:c8:76:1d:47:46:3a:63:bc:cc:6e:
7f:89:80:f1:ea:98:d6:d6:33:bc:0b:b8:b2:ec:8c:
0b:8b:43:32:99:70:01:64:73:ed:9d:39:cb:d3:60:
b8:21:04:ed:d0:45:26:43:38:5d:47:61:ea:74:4e:
3d:70:b9:ee:dd:b1:04:7c:50:d2:30:5c:03:9e:05:
63:37:e7:09:05:41:ea:63:2c:f9:d9:4d:e7:8d:23:
71:2b:8d:14:53:93:27:22:5c:9b:3a:3e:c8:44:04:
48:30:1d:91:52:0b:fa:b0:76:27:44:7e:49:54:fe:
b3:21:da:5d:1d:be:77:9c:f5:70:a9:a2:ef:10:2f:
52:49:27:2a:df:79:80:3c:98:2c:78:5e:93:c4:6e:
f4:49:b8:18:49:11:8b:2c:4b:5e:c6:03:3b:b3:c3:
b2:3d:83:58:2e:ec:00:d6:ab:1f:63:f2:c4:c1:58:
6f:50:01:4f:e8:8e:a8:8f:82:15:c5:af:f2:a3:61:
b9:47:c8:da:fe:1c:e8:c1:c8:38:00:c7:94:a9:3d:
0f:43:4e:09:c6:53:64:41:bf:13:24:96:ef:83:a2:
e7:70:6e:17:5c:4a:b3:65:4b:11:65:2a:68:3e:2e:
6e:77:7c:7c:b0:44:ed:77:88:7a:60:a1:bd:b4:26:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:32:83:CB:76:39:FA:87:A2:0E:EA:86:F7:BE:6E:C0:BE:EF:F3:17
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ejKDy3Y5-oeiDuqG975uwL7v8xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.247.0/24
Signature Algorithm: sha256WithRSAEncryption
93:dc:fd:18:ff:9c:a8:8e:49:3e:24:94:fe:a7:8f:c0:4e:77:
18:ca:04:18:4d:f6:d8:31:71:7d:91:d2:92:bb:44:48:a8:75:
bc:ed:13:d6:04:1e:65:e1:27:32:29:74:df:06:2d:77:f8:3b:
48:3b:c2:d4:ad:71:bf:73:e0:ea:38:48:7c:ce:6b:00:3e:8c:
2d:c5:db:ea:40:49:7f:16:1c:e7:53:1a:da:5f:9c:cc:70:d6:
45:18:d1:38:cb:f9:25:6e:c3:35:94:2c:b3:fc:b3:0b:c3:43:
c2:98:0d:2a:2b:7a:ce:eb:4d:6f:df:80:4e:16:9e:43:90:54:
4f:3e:4a:36:f3:a1:6c:ab:e9:cb:c0:c9:1a:0c:20:ae:61:07:
29:e3:36:25:56:68:0f:8b:ab:28:2a:71:9a:61:fd:2c:4a:31:
16:14:79:49:30:14:d5:5a:cf:37:b9:be:13:93:ed:5e:40:a0:
f2:58:a9:bf:6f:2b:bb:b5:74:1d:0e:07:3f:ec:5e:75:ae:2c:
d9:95:f2:d9:47:02:cf:3a:84:38:58:9d:81:fd:aa:be:ce:88:
3b:df:c2:2d:cc:c9:16:3f:ed:38:64:c8:d7:45:fa:e0:fa:66:
0a:b9:25:d8:91:1f:3b:14:34:41:dc:f3:46:10:22:7c:92:81:
fe:1f:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:38 2025 by rpki-client