Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/EBPhJk-G81W9oszQeUHOI_5e7Fo.roa
File: EBPhJk-G81W9oszQeUHOI_5e7Fo.roa (raw, json)
Hash identifier: q9WFq6JAXQHzmO+9Lu3d0QMqkiqTQ1Vp/PRKc6bJxGE=
Subject key identifier: 10:13:E1:26:4F:86:F3:55:BD:A2:CC:D0:79:41:CE:23:FE:5E:EC:5A
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 01856F94A2C0EB9A3E1249B4250630851926
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/EBPhJk-G81W9oszQeUHOI_5e7Fo.roa
Signing time: Sun 01 Jan 2023 23:04:50 +0000
ROA not before: Sun 01 Jan 2023 23:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21436
IP address blocks: 193.108.165.0/24 maxlen: 24
2001:67c:17b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:a2:c0:eb:9a:3e:12:49:b4:25:06:30:85:19:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Jan 1 23:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1013e1264f86f355bda2ccd07941ce23fe5eec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:29:2c:b6:cd:9b:8f:56:22:b1:ce:bd:15:
57:cb:c2:f0:45:4c:07:85:bd:db:8e:5f:2c:ab:10:
73:8b:74:44:bf:0e:c3:2f:f1:f9:9b:fe:ef:50:e4:
b1:3e:ad:4a:e0:9d:4e:46:44:e5:1c:06:20:ba:4b:
f0:03:7b:08:bb:14:01:44:ad:d6:8f:9d:e2:3a:20:
fe:93:6e:b3:76:57:48:92:b9:39:75:01:3d:93:19:
31:a1:2f:fb:60:19:25:73:4a:a9:16:c3:6c:5d:91:
67:aa:a3:06:93:f3:dd:08:cc:86:82:35:2d:82:88:
87:8f:30:3a:d8:a6:8d:bc:78:cb:4c:09:77:31:81:
c4:4c:64:7d:43:d7:47:5d:64:63:5a:10:4a:15:e6:
d3:a6:8f:9f:b6:e3:bd:eb:62:ed:95:47:5a:73:b8:
e1:89:0e:18:36:46:37:28:e5:81:56:9b:91:e2:f2:
39:da:96:26:0d:fe:74:e2:6b:cd:7d:60:e7:d6:55:
08:c8:06:b4:77:23:17:83:62:0b:cc:ce:28:7f:aa:
98:63:d5:18:61:8b:1c:c9:2e:e1:78:59:00:96:d6:
2a:16:35:eb:77:95:9f:c8:88:6a:e6:4f:e9:d9:b1:
f1:c0:6a:75:09:bc:56:3d:cb:b2:2e:e6:71:7e:9d:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:13:E1:26:4F:86:F3:55:BD:A2:CC:D0:79:41:CE:23:FE:5E:EC:5A
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/EBPhJk-G81W9oszQeUHOI_5e7Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.165.0/24
IPv6:
2001:67c:17b0::/48
Signature Algorithm: sha256WithRSAEncryption
68:a3:30:5b:56:61:ea:a4:8c:9b:b4:78:8c:e2:bd:ff:83:d5:
e4:4f:d6:e1:66:02:34:40:1b:ce:46:5c:30:d2:1b:67:f1:96:
bd:b5:9e:17:a4:1a:f1:15:0c:60:ef:7b:61:0c:43:c8:fc:65:
ad:99:e8:69:2a:4d:c4:4b:a3:a4:e9:83:46:01:e5:16:02:1b:
aa:b8:8b:f3:0e:73:a3:07:ed:b9:d4:cb:51:60:50:e6:34:f7:
be:df:ae:00:e2:64:83:c6:8e:2a:2a:7c:52:68:f5:1f:27:e3:
d3:8e:3c:a5:b4:4d:b8:9b:80:28:92:e1:35:2c:1e:22:f4:3d:
1e:27:4c:ca:f5:33:bb:07:59:74:21:35:0a:b2:01:52:a3:be:
0f:00:91:8f:4b:b1:e0:6a:e3:56:87:c5:4a:51:fa:63:00:4f:
49:f0:b9:ca:dd:8f:89:77:d2:6b:6d:40:21:5a:1a:7f:9d:c8:
53:7a:c1:fd:65:03:dc:2f:ee:76:3a:44:70:51:9b:e1:2a:c3:
c8:0a:a1:32:23:62:9b:42:e1:4c:9b:42:03:8b:7e:5e:95:e7:
a5:a6:f6:3f:60:33:29:1f:b4:c7:88:57:be:ee:49:b1:e3:f1:
88:69:3b:42:08:ee:21:8a:53:2b:39:ed:91:4d:4d:d5:16:d9:
73:8e:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:42 2025 by rpki-client