Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/EJRf1Pvjr8Uac-6F2IN1Kk45fqg.roa
File: EJRf1Pvjr8Uac-6F2IN1Kk45fqg.roa (raw, json)
Hash identifier: lGJXi8eE5C4TPDGyeY5YCeM7A9beG6CWzmhYDNW7KgM=
Subject key identifier: 10:94:5F:D4:FB:E3:AF:C5:1A:73:EE:85:D8:83:75:2A:4E:39:7E:A8
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03FE4D0A
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/EJRf1Pvjr8Uac-6F2IN1Kk45fqg.roa
Signing time: Sat 01 Jan 2022 01:52:27 +0000
ROA not before: Sat 01 Jan 2022 01:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47647
IP address blocks: 78.130.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66997514 (0x3fe4d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10945fd4fbe3afc51a73ee85d883752a4e397ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:f3:bb:6f:bc:3a:f8:43:08:06:62:fc:45:
b7:51:3f:bd:51:bc:0a:77:15:8a:6f:98:79:d4:4c:
2a:14:97:93:10:37:ed:6f:f9:43:9d:69:79:54:8c:
3d:72:6b:a8:a5:3b:51:0f:85:0b:b5:7a:a0:31:dd:
81:7c:42:30:d2:cc:06:d2:23:1b:a1:ff:0f:4d:a1:
5d:d5:e3:bb:84:20:d6:8d:84:e2:3f:39:ca:f6:84:
a4:73:03:e5:01:b5:6c:0e:ae:a8:01:c7:73:de:f4:
49:5c:42:19:74:19:f9:99:f8:4f:1c:dc:73:f3:c1:
65:61:b0:bf:26:44:99:06:35:2c:b6:4e:e9:cd:35:
5c:55:31:6b:7d:b5:8a:d9:ba:29:64:61:cc:0d:1f:
8c:eb:97:30:77:ea:84:f7:22:af:a6:79:71:41:ad:
69:17:f3:c0:2b:bf:b6:42:99:8b:51:5c:cd:12:3b:
fa:2d:08:43:ca:eb:dc:ab:44:bb:e8:da:02:28:63:
69:bc:03:5d:e4:4e:c7:27:62:18:b2:6b:ce:7a:82:
45:56:c1:c6:bc:a2:03:97:68:56:43:a2:37:00:ed:
bf:43:e2:3a:f5:b2:45:de:04:44:10:1e:1e:28:4e:
79:44:b5:4d:ca:50:6c:9e:de:44:24:30:bd:d4:51:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:5F:D4:FB:E3:AF:C5:1A:73:EE:85:D8:83:75:2A:4E:39:7E:A8
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/EJRf1Pvjr8Uac-6F2IN1Kk45fqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f0:20:ff:24:48:95:13:a5:d0:63:e7:27:d0:67:96:de:8f:
06:3f:ee:80:f1:01:dc:2f:c0:f6:8d:26:d2:5d:ea:50:50:6a:
f4:73:65:cf:5e:40:e1:af:8a:a7:80:ab:7a:0f:af:28:ad:91:
13:80:36:40:14:c0:3d:a7:f9:c8:21:a4:12:75:88:bd:b0:c6:
8c:b3:c1:ac:fa:93:75:55:4b:3d:b3:12:50:96:2b:7d:06:cf:
aa:ae:74:53:e0:5d:9c:96:ac:24:ed:f4:50:14:36:df:1e:4e:
1b:3e:77:77:a0:a5:6b:df:40:97:95:23:68:49:27:9d:c4:98:
d3:5b:c5:bd:87:4a:5e:f3:1f:1d:80:c6:c2:5f:87:ee:27:95:
3b:26:c3:61:d1:18:3a:58:2c:59:13:bc:7e:ac:47:26:59:7a:
4f:17:bb:72:72:87:07:bd:b0:77:bb:19:71:49:32:f0:17:54:
94:33:24:56:76:fd:df:36:e6:1c:e9:f4:c7:0e:cb:cc:56:f5:
c1:89:4d:56:1f:81:18:79:f8:48:cb:6a:a1:a3:17:d1:b9:12:
f3:66:53:06:c1:87:0c:f6:79:bd:00:35:1c:41:57:a1:68:30:
aa:a4:fc:e1:fc:84:d7:d0:c2:ad:2d:40:33:15:87:97:bf:5b:
d7:97:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:48 2025 by rpki-client