Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/EsGgDTljqc8nIyBLRrp3XmrCKIk.roa
File: EsGgDTljqc8nIyBLRrp3XmrCKIk.roa (raw, json)
Hash identifier: zC/d0g+h5nRD6FCYkRKYXAkyqV1Qnt6w0HlFU3YBSl4=
Subject key identifier: 12:C1:A0:0D:39:63:A9:CF:27:23:20:4B:46:BA:77:5E:6A:C2:28:89
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 01856DB8926F3E138AB90D20530FA8314DBB
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/EsGgDTljqc8nIyBLRrp3XmrCKIk.roa
Signing time: Sun 01 Jan 2023 14:24:50 +0000
ROA not before: Sun 01 Jan 2023 14:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49517
IP address blocks: 31.184.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:92:6f:3e:13:8a:b9:0d:20:53:0f:a8:31:4d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 14:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12c1a00d3963a9cf2723204b46ba775e6ac22889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:81:7c:a3:7a:70:d7:0a:65:09:35:f5:84:
37:42:a2:a5:e4:db:be:fd:8e:9d:f8:1c:30:f2:ed:
67:f8:6d:3f:65:80:23:d9:4a:3f:ce:a3:73:b8:5b:
fa:f5:a5:b0:9a:04:a9:40:51:57:7f:e8:99:23:a3:
94:78:1a:d9:32:6f:27:d5:8b:9c:29:4d:0e:a0:ea:
28:c1:46:c1:d7:e4:cf:de:c3:84:14:c0:ab:8a:b9:
9e:88:30:75:17:0b:62:0f:46:2c:fd:cc:f3:58:13:
12:ed:aa:99:ff:60:a0:b8:92:21:bb:af:00:41:9c:
9d:6a:f6:59:78:a6:8b:10:3b:43:6c:4a:9a:99:02:
f7:9c:ef:30:d8:ff:e4:f9:10:e8:53:db:5a:86:a0:
74:bf:a6:c8:38:b0:4d:47:e7:42:d9:e0:e4:d0:a4:
c5:33:5f:b7:41:a7:8e:fe:bf:01:23:60:a4:62:69:
9d:fe:25:74:b2:8a:ef:ea:c3:7e:ae:68:73:01:df:
c4:d0:15:ad:34:8a:2b:cd:4f:47:5e:e0:74:f6:b1:
41:14:4d:b8:e6:87:57:03:e1:02:9c:60:68:ee:df:
1b:80:dd:23:e9:4c:7e:2e:63:cd:9c:04:c2:f7:cf:
e9:0b:bd:dd:1c:f3:63:9e:b7:bb:58:be:a0:72:21:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:A0:0D:39:63:A9:CF:27:23:20:4B:46:BA:77:5E:6A:C2:28:89
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/EsGgDTljqc8nIyBLRrp3XmrCKIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bf:ec:9a:72:77:fd:e0:4f:49:d7:ca:af:2d:b0:43:96:59:
02:28:a6:e8:66:93:29:fd:40:28:17:de:9c:5d:e8:30:75:87:
1d:ec:09:db:0b:3b:5a:1e:19:e9:eb:c5:eb:24:33:da:36:8f:
44:50:ba:1f:d5:66:8c:e8:7d:d9:07:7b:7f:a3:ef:f7:b6:9b:
ee:50:67:bc:e8:5f:83:a3:9d:4f:1e:16:9c:97:06:3a:6c:f0:
61:10:a3:13:b8:b9:49:0e:a5:4b:46:1b:67:2f:0b:cd:89:cf:
86:9d:37:b2:6c:dd:46:da:df:35:ee:9b:fd:2d:a9:b6:a0:31:
f1:a0:ec:e8:0d:50:f5:0d:7c:b4:9e:7a:85:22:38:3a:dd:b1:
78:1d:62:b7:98:67:36:1d:c3:45:6e:45:85:c5:1f:06:da:12:
71:43:1d:86:c7:94:60:d6:9e:0d:9e:c6:fb:a8:df:f8:7f:03:
ad:d4:c5:f5:ad:24:c5:97:8a:39:74:78:3d:3c:47:7e:92:41:
86:59:40:05:b7:75:11:35:3c:54:9b:34:85:a7:de:fa:d1:95:
8a:34:52:08:56:50:9b:3a:ae:00:15:22:ad:44:15:bb:fc:3f:
22:ef:27:03:62:69:46:d1:b3:8f:c3:ee:e0:30:b2:01:9c:52:
4a:81:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:26 2025 by rpki-client