Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eckMuWSPgHm4Xx6IQHaid6qoiPw.roa
File: eckMuWSPgHm4Xx6IQHaid6qoiPw.roa (raw, json)
Hash identifier: blhbgfRcDuDsBLoJPrOqJSPYiIrh7bwKTm+Yt37lqQE=
Subject key identifier: 79:C9:0C:B9:64:8F:80:79:B8:5F:1E:88:40:76:A2:77:AA:A8:88:FC
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F102CB9761D9D0264FA0383882F6A1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eckMuWSPgHm4Xx6IQHaid6qoiPw.roa
Signing time: Mon 02 Jan 2023 10:04:58 +0000
ROA not before: Mon 02 Jan 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202813
IP address blocks: 5.154.6.0/24 maxlen: 24
89.43.85.0/24 maxlen: 24
5.154.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:02:cb:97:61:d9:d0:26:4f:a0:38:38:82:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79c90cb9648f8079b85f1e884076a277aaa888fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:91:d3:c9:3d:73:53:ee:a0:f8:bc:d1:be:
aa:6a:63:92:b1:11:34:01:50:63:d9:d9:23:45:97:
2b:c1:97:23:29:e3:87:90:2f:a0:a3:bf:6e:ff:90:
dd:ea:c4:74:ee:10:c4:a6:88:fc:0e:36:7e:b4:1b:
fd:f4:4c:5f:9e:b9:e3:cb:fe:54:8c:55:e7:be:a5:
08:b4:d8:69:cf:e8:7a:8b:6b:be:a8:7e:f3:51:20:
a6:1f:b6:ab:e4:95:ee:93:c3:8b:89:41:86:49:61:
a8:02:58:dd:76:db:db:31:af:90:79:1c:d9:8b:31:
60:53:1a:52:fd:50:2a:d6:87:a1:26:0d:13:13:1f:
ba:7a:59:e2:7d:cf:a2:d5:59:74:a2:92:dc:3d:50:
aa:e5:8f:c0:a7:14:cc:b8:3f:5a:c5:78:29:12:da:
7a:22:12:2c:be:e7:20:8a:1b:7d:bf:91:b2:b0:4d:
e6:eb:cc:e3:eb:b8:b7:2e:c4:a8:04:e5:11:db:5f:
95:39:e6:d3:dc:0a:06:b5:ff:49:3a:b9:09:26:d3:
cf:c5:49:29:e7:41:6d:a6:5c:d6:8c:80:45:e0:1e:
58:f4:f4:79:ed:f5:08:94:e9:79:a0:f7:30:d1:35:
df:63:4c:1b:25:4a:8f:59:d2:88:6e:f3:ab:73:ed:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C9:0C:B9:64:8F:80:79:B8:5F:1E:88:40:76:A2:77:AA:A8:88:FC
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eckMuWSPgHm4Xx6IQHaid6qoiPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.6.0/24
5.154.69.0/24
89.43.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3b:16:55:84:70:d7:b4:ad:91:c3:e9:35:17:77:bc:6a:cd:
91:53:37:35:95:d3:3c:4d:c5:a1:72:05:6c:b6:b6:5b:5f:67:
c8:88:fd:8d:9a:ab:f9:61:d1:eb:ca:c2:ed:3c:9d:a0:7c:f2:
90:29:88:05:ff:39:bf:9b:a8:28:8f:93:0f:60:1c:23:9e:d1:
f4:e3:69:6e:13:39:47:ec:9e:69:73:16:f6:ff:ff:ba:93:fe:
b7:8f:8b:8e:0b:84:ca:53:c0:00:17:25:6b:6c:75:66:df:fb:
c2:42:d0:0b:dc:3d:b8:70:da:85:4d:4d:c4:bd:bc:d8:d3:d7:
68:e8:1e:91:a1:a7:04:4b:84:c6:09:cf:61:4b:4b:38:55:d4:
11:da:f1:f4:af:27:57:5e:49:a2:1c:39:c2:63:ec:fa:50:73:
f0:d5:20:c1:1b:6e:8e:a6:16:c5:c5:73:5d:02:c3:e5:e9:8e:
94:40:b8:52:e5:c8:84:9e:4f:e9:3d:f2:08:10:81:d1:1e:57:
97:91:61:b9:29:c9:3d:7f:2f:88:eb:3e:a4:ec:f4:31:c2:03:
ae:33:c8:91:38:c7:ba:3e:c9:e1:85:5f:2c:a3:81:f7:7c:ad:
5f:16:44:14:27:60:c8:55:77:91:d9:c8:91:7a:ef:b9:8a:33:
df:7e:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:53 2025 by rpki-client