Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6ewkjqCeRtinNLJKJviIKZuolLQ.roa
File: 6ewkjqCeRtinNLJKJviIKZuolLQ.roa (raw, json)
Hash identifier: mvZPCl2V4ZzFLRU/JRPVRmGsMrfV6JSVK9angEvNoNA=
Subject key identifier: E9:EC:24:8E:A0:9E:46:D8:A7:34:B2:4A:26:F8:88:29:9B:A8:94:B4
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018940767286484821E04754B1FA494AF76A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6ewkjqCeRtinNLJKJviIKZuolLQ.roa
Signing time: Mon 10 Jul 2023 15:40:51 +0000
ROA not before: Mon 10 Jul 2023 15:40:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:76:72:86:48:48:21:e0:47:54:b1:fa:49:4a:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jul 10 15:40:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9ec248ea09e46d8a734b24a26f888299ba894b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:5b:cd:90:ba:b0:5c:af:b5:91:95:95:43:
c6:e1:bd:81:77:00:39:9f:3e:6c:4f:8e:77:7b:19:
92:83:e5:51:fd:60:95:b9:bc:d1:14:9f:63:06:ac:
9f:e5:c8:56:0c:2c:1b:25:35:b3:2e:8c:38:25:ab:
3d:54:d9:75:0b:d0:43:c1:74:9f:1c:36:d4:bd:87:
d6:02:a5:52:f9:b3:aa:bc:61:e9:8c:29:e1:4a:ed:
8e:cd:f7:08:2e:18:31:86:b1:05:76:6e:12:80:02:
55:30:d5:f5:a4:78:ac:81:5b:16:c5:95:60:14:ec:
26:4d:3a:df:fb:21:39:79:76:9b:9a:31:d9:ce:21:
85:81:c4:b1:1d:2e:15:4a:68:ee:49:26:e5:c9:ba:
de:ff:d5:c1:9a:5a:44:57:8b:43:d4:34:0e:e3:c6:
2b:a2:85:15:4a:57:65:f9:d3:15:e7:d4:27:5d:1e:
dc:cd:16:cc:af:40:dd:11:d0:b8:db:1c:91:4c:de:
a6:dc:be:0d:7c:77:cb:db:c0:ee:0e:97:d0:03:91:
e4:98:94:07:82:03:4e:c0:84:70:b5:85:b3:09:ca:
c6:bc:4d:1b:8b:76:01:ed:b8:2c:83:06:d0:5d:a7:
c9:cb:f4:52:21:e8:22:d4:3b:d9:ed:25:e9:3a:cc:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:24:8E:A0:9E:46:D8:A7:34:B2:4A:26:F8:88:29:9B:A8:94:B4
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6ewkjqCeRtinNLJKJviIKZuolLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
22:2e:e2:94:65:e8:ea:b9:fb:f1:67:20:15:da:14:a8:ae:9e:
ef:8a:19:0c:ed:cf:b2:07:43:2f:2e:24:f6:bd:89:4f:72:34:
8a:a5:f7:ec:eb:8d:f1:8e:b8:71:3b:e8:07:f2:1d:15:9e:a0:
2c:30:03:05:1f:6c:b3:83:82:5c:f6:c1:f8:b2:05:93:56:9b:
78:3b:5e:f5:cd:7f:74:71:d2:17:56:8f:1c:d5:a5:0f:79:1f:
72:d4:d5:19:5e:cd:65:cb:37:8a:16:aa:20:14:28:c5:1b:e8:
ba:d6:bb:89:37:1e:d8:cb:72:17:65:05:0b:a0:37:fb:bf:be:
36:e3:47:29:0f:23:0d:54:33:7a:33:6e:0b:07:ff:31:ce:ce:
41:08:ec:0a:d7:05:24:4f:93:10:88:0f:41:d5:93:aa:c2:68:
81:02:88:f4:be:8d:62:51:47:86:f5:a0:e9:bb:cc:1e:fe:b0:
ed:53:a4:fe:2f:fb:24:de:ff:7a:73:f8:70:8c:f3:ab:42:35:
d7:91:4b:0d:d4:c4:eb:0d:db:38:b5:1b:af:88:f3:50:21:6d:
91:d3:24:ff:37:9e:66:12:9a:23:c2:61:7e:1f:a1:27:54:bd:
8e:a9:c0:78:a5:6a:f6:c9:eb:76:40:84:1f:29:fe:cd:96:e5:
92:7d:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:38:31 2025 by rpki-client