Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/E7CPewb-5p60EzVpSMGPJkhpXC0.roa
File: E7CPewb-5p60EzVpSMGPJkhpXC0.roa (raw, json)
Hash identifier: 4IDB8G2begrGHB1+vTj+iOudnU8RB1C6aKANnsU5rlk=
Subject key identifier: 13:B0:8F:7B:06:FE:E6:9E:B4:13:35:69:48:C1:8F:26:48:69:5C:2D
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 01856DA63E713E641E4F3CFEE2BE1164933E
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/E7CPewb-5p60EzVpSMGPJkhpXC0.roa
Signing time: Sun 01 Jan 2023 14:04:49 +0000
ROA not before: Sun 01 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50939
IP address blocks: 195.88.81.0/24 maxlen: 24
195.88.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:3e:71:3e:64:1e:4f:3c:fe:e2:be:11:64:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Jan 1 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13b08f7b06fee69eb413356948c18f2648695c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:15:d4:eb:11:b3:1c:49:08:2f:5d:76:26:
78:fa:e3:76:6d:d4:7a:ce:7d:79:0f:b9:b6:02:23:
d3:74:1f:f6:ef:99:bd:5f:0a:24:00:7e:f5:9d:56:
c1:a8:68:c3:60:6b:00:89:5b:55:93:7a:87:0c:fc:
b4:e0:8b:25:d0:43:c9:d1:ae:50:b5:10:6b:e4:e7:
df:b9:26:df:dd:9a:52:3e:01:f6:5f:b5:2a:3f:03:
0a:51:05:2d:77:41:28:9b:da:21:80:87:8f:10:d2:
74:2e:01:bf:b6:20:34:33:e3:48:1c:05:bd:83:20:
24:0d:d0:79:f9:53:f8:41:09:b4:13:ce:43:81:90:
a7:61:b8:34:1e:98:19:a2:56:c6:86:51:68:f9:09:
43:cf:3a:81:da:44:30:2c:09:d4:1b:a8:74:a4:47:
2d:ed:39:68:ae:20:00:82:ce:37:ad:f2:8a:15:12:
8e:75:f4:57:42:1a:03:bd:a3:7a:80:76:f0:c0:ca:
65:4f:3f:a0:19:be:a6:42:1f:97:23:f7:ab:f8:43:
46:5d:d1:eb:3c:d0:75:a6:c8:41:58:38:ec:a4:c1:
27:f6:ab:1e:88:63:46:dc:8c:ef:a3:a5:fa:e7:44:
20:64:cf:a5:19:98:2d:76:39:79:f3:bf:54:6c:b9:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:8F:7B:06:FE:E6:9E:B4:13:35:69:48:C1:8F:26:48:69:5C:2D
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/E7CPewb-5p60EzVpSMGPJkhpXC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.80.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:aa:36:d7:93:df:51:67:07:ef:a5:d5:f1:77:e4:55:a1:82:
2b:7f:0d:72:98:99:60:a0:b8:a5:fc:f9:ff:f3:05:0d:0f:91:
f1:05:b7:9b:77:1a:63:b7:69:fa:2a:b4:37:67:31:7e:4d:9d:
eb:51:33:89:e6:00:a4:73:29:2c:2a:63:63:e0:be:4d:d7:f5:
de:5d:c0:7b:84:6c:93:5c:cb:73:62:16:fa:b1:ff:85:b4:f4:
30:1d:7d:d8:9a:e5:e7:bb:1d:d2:f6:12:9d:01:e2:06:bf:97:
67:e6:c9:f1:c8:73:c1:60:67:47:7c:c4:03:23:e6:fc:bc:e0:
63:52:5e:5c:ec:fa:f6:b2:c1:38:63:9d:72:a8:df:7c:9e:a3:
ac:bd:81:7f:2a:17:c4:e9:34:1d:4a:0a:f5:dd:a3:47:f6:26:
52:5a:a7:d0:c5:bb:2e:05:e5:43:ed:9d:a5:61:f5:fe:99:1f:
23:48:1c:d3:db:38:8e:3a:ef:c9:a1:98:83:c0:6e:4f:a5:71:
5f:4f:ac:4f:f5:8d:73:06:f5:bb:8b:90:e5:89:98:b3:3b:e6:
37:d1:88:aa:bb:6d:83:56:7c:fa:76:6d:ae:e0:bd:b1:59:60:
04:0f:68:ce:c9:59:8c:3d:41:7e:79:25:1f:90:d7:ca:13:de:
91:be:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:29:53 2025 by rpki-client