Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/EUK2hOx6ZrKt9d_seAF99MKG9Is.roa
File: EUK2hOx6ZrKt9d_seAF99MKG9Is.roa (raw, json)
Hash identifier: LsKB54/taZkIdHZ4nSZrwY2cWaUU1gg/F/SYQ0s0wjs=
Subject key identifier: 11:42:B6:84:EC:7A:66:B2:AD:F5:DF:EC:78:01:7D:F4:C2:86:F4:8B
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 018A2301B675180DDA1273DE67CCDB74A671
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/EUK2hOx6ZrKt9d_seAF99MKG9Is.roa
Signing time: Wed 23 Aug 2023 15:27:09 +0000
ROA not before: Wed 23 Aug 2023 15:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209199
IP address blocks: 185.124.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:01:b6:75:18:0d:da:12:73:de:67:cc:db:74:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Aug 23 15:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1142b684ec7a66b2adf5dfec78017df4c286f48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:5c:36:93:e0:0c:18:96:0f:7a:0b:6c:3f:
6a:19:6e:0b:04:8e:d5:7f:51:52:e4:ef:d5:69:26:
8f:5f:7a:9e:23:bc:3c:3d:b2:54:a7:8b:51:3c:32:
cd:24:c0:28:91:88:ff:fb:25:17:76:b1:22:20:4f:
ed:73:5f:b1:07:bb:5b:e5:00:cf:d7:e0:f5:a6:14:
c1:6e:44:ba:b2:b0:fe:54:6c:55:f4:0e:6a:52:59:
fd:a2:67:e6:cc:94:af:9c:58:f6:f2:6a:05:9d:34:
84:8f:b4:9f:51:a7:87:d8:64:cd:c6:7d:00:c6:d0:
f4:57:00:1c:fd:c6:4e:16:a6:05:b7:7c:fa:29:6a:
dc:02:75:4b:87:1f:b0:1a:3f:9b:4e:d0:d7:61:37:
fa:e2:14:27:4b:80:e3:95:7d:41:a1:12:45:f1:31:
55:7b:94:7b:21:5f:09:c4:a5:ef:e9:74:95:a9:eb:
7e:de:1c:65:e7:44:2e:0f:8d:99:0c:a6:f2:47:a4:
4b:e7:24:f9:24:55:97:44:71:3f:cf:f4:d5:70:0e:
d0:36:df:86:13:c0:75:f8:9f:6d:29:80:06:10:5d:
59:1d:ee:bb:ee:b0:98:e6:6c:f5:ef:70:d9:2d:dd:
47:02:1d:71:d3:af:6c:b8:63:47:dd:d3:68:80:8f:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:B6:84:EC:7A:66:B2:AD:F5:DF:EC:78:01:7D:F4:C2:86:F4:8B
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/EUK2hOx6ZrKt9d_seAF99MKG9Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:32:59:79:37:fb:32:86:bb:79:e3:f9:5f:99:6f:d8:b7:13:
81:f6:ba:ee:01:a5:37:c3:62:46:74:69:91:b9:4e:7f:53:d4:
0b:ac:3c:15:ba:2f:3b:53:b3:64:82:c4:22:00:c7:86:70:09:
96:16:92:80:5a:19:84:51:b7:2e:6f:20:cc:ac:66:3d:46:d0:
4e:1c:a0:23:da:70:e4:f1:4b:45:e5:0b:83:1a:b4:41:0b:d0:
25:f3:ba:a6:48:cc:f8:3c:94:27:dd:3d:85:60:35:5d:d8:35:
a3:b7:36:2f:ef:b9:99:16:67:3b:3c:86:18:cc:18:43:b3:45:
6a:43:04:7c:ac:95:0c:31:f9:ee:59:a6:9d:d7:f3:95:3f:23:
90:74:a6:dd:c5:96:8d:bf:f6:b9:36:9c:ef:b8:e2:bd:ba:c5:
95:06:5c:4a:28:5a:c3:16:1b:7c:a5:88:15:82:f7:69:ab:78:
bb:83:60:35:c0:ad:7c:7e:df:b3:9d:ca:bc:06:68:45:26:43:
07:15:21:b2:41:10:f7:8f:67:21:e8:fd:8f:86:35:d2:67:3d:
86:b7:16:9d:93:a8:35:bb:99:35:32:51:47:c3:51:0f:de:a8:
05:d0:2e:76:38:6c:89:af:c3:bf:d0:4a:c0:bd:32:61:b7:68:
29:32:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:09 2025 by rpki-client