Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EKityeOaCV_k_VISfJiNOARrmIA.roa
File: EKityeOaCV_k_VISfJiNOARrmIA.roa (raw, json)
Hash identifier: 2EfxBgGSW6LVpqkkR3UvegCaR4+yxv5Mp6QCQKoxjMg=
Subject key identifier: 10:A8:AD:C9:E3:9A:09:5F:E4:FD:52:12:7C:98:8D:38:04:6B:98:80
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0189AB979E8977DBFE0EA8C8E7BB5F5E5ED1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EKityeOaCV_k_VISfJiNOARrmIA.roa
Signing time: Mon 31 Jul 2023 10:56:27 +0000
ROA not before: Mon 31 Jul 2023 10:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197483
IP address blocks: 89.40.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:97:9e:89:77:db:fe:0e:a8:c8:e7:bb:5f:5e:5e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jul 31 10:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a8adc9e39a095fe4fd52127c988d38046b9880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:32:df:36:dd:f3:66:41:8d:7f:93:29:fb:
69:38:23:db:80:fc:13:f9:76:f8:2a:c4:17:2c:87:
80:7c:ae:a8:8d:84:ab:36:1d:0b:00:6d:0b:09:31:
df:19:1f:c9:5e:fa:d5:e6:e8:f1:cb:f0:7d:90:d3:
f0:4d:9f:68:96:99:a9:ec:91:24:28:26:ca:14:82:
2f:b2:75:3a:26:46:fe:1f:df:5e:20:33:ee:e0:c7:
e9:c3:20:19:2c:69:3a:ca:87:04:53:49:c4:13:da:
ce:f6:a3:07:b4:19:9d:a4:6a:4b:53:da:ca:9a:58:
9a:06:4c:e9:68:ad:89:66:be:3c:72:39:27:cc:ab:
9d:92:93:a7:3f:a7:ca:b3:24:db:12:1b:22:fb:08:
9a:36:4a:31:fa:ec:0b:84:f7:6a:5b:41:6e:2d:c4:
de:aa:d9:f2:66:fc:46:a6:ad:7b:63:03:02:d2:7e:
55:fc:68:7c:6a:2a:22:80:81:9c:4b:80:e4:6c:ec:
eb:d8:9a:e8:7b:0a:bc:49:3b:29:42:d0:cf:8d:55:
a2:b9:f4:1b:12:a9:53:9a:75:82:e7:df:fd:41:21:
ee:c7:98:56:91:08:8a:fa:47:51:07:f4:6e:8b:2f:
88:1b:70:02:8a:d7:21:5c:13:63:8d:62:f3:89:bc:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:AD:C9:E3:9A:09:5F:E4:FD:52:12:7C:98:8D:38:04:6B:98:80
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EKityeOaCV_k_VISfJiNOARrmIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7e:13:b4:90:94:27:a0:91:72:35:6f:ff:2a:1f:26:03:97:
b8:d5:84:6e:94:e6:91:d2:e8:11:b5:d7:b1:3e:35:3c:c7:a9:
15:85:c6:2b:1e:55:8b:10:38:0c:17:4a:b0:fa:99:94:54:b4:
37:50:ca:e8:cd:c4:6c:82:05:7d:b3:6c:66:b9:c9:d0:94:5b:
3e:5e:73:7f:88:98:08:d1:51:fd:f3:42:a6:7d:ab:d9:7c:c7:
f4:ba:ba:fe:67:b8:bf:fa:2f:bc:43:3d:a2:df:e8:b1:be:b3:
75:04:b6:d2:4b:14:34:29:9d:01:12:68:84:cd:f2:38:ce:47:
c9:0a:5d:13:c8:7c:6d:e8:93:a0:b2:7c:49:30:a4:ec:ca:36:
e2:b6:0c:18:c3:9e:6d:91:63:22:fe:68:f9:ef:a5:dc:3d:ea:
8a:cd:39:ac:f6:bf:aa:88:3f:26:39:6e:5e:56:ed:61:f1:b7:
bc:07:a2:19:b8:86:7b:2a:66:95:8a:92:2a:b2:6c:00:52:16:
66:fb:ba:b9:94:8c:81:ff:46:94:fe:30:a1:cf:24:b0:f9:f0:
3d:68:6f:fb:cb:60:e5:8a:41:d7:af:d1:3c:19:36:b4:1c:e3:
70:3d:d3:00:66:1f:ba:31:6e:ee:88:71:46:83:52:bb:ae:a3:
36:ee:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:54 2025 by rpki-client