Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/e9JOlts2oyloqosZYsWTEwPWj-U.roa
File: e9JOlts2oyloqosZYsWTEwPWj-U.roa (raw, json)
Hash identifier: axx+IdKWK3VLqjfhkq87dTAV9Mgdfl5IX//Hb3ql4MM=
Subject key identifier: 7B:D2:4E:96:DB:36:A3:29:68:AA:8B:19:62:C5:93:13:03:D6:8F:E5
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01D524
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/e9JOlts2oyloqosZYsWTEwPWj-U.roa
Signing time: Thu 12 May 2022 14:45:01 +0000
ROA not before: Thu 12 May 2022 14:45:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8708
IP address blocks: 194.153.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120100 (0x1d524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: May 12 14:45:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd24e96db36a32968aa8b1962c5931303d68fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:9b:74:9b:56:59:92:37:76:a1:73:13:bc:
6f:9b:a0:d3:1f:ed:06:a4:5b:b7:60:a7:b7:e4:67:
a7:16:75:3a:19:f7:53:77:a1:2f:6c:4a:fa:26:37:
d9:ef:b7:89:65:37:6f:1e:f2:2b:e2:b8:f4:35:24:
67:87:bb:ff:70:63:05:86:9c:f1:4b:6d:b0:66:2a:
2b:a8:8b:8f:0d:53:20:e0:86:1e:55:f8:98:89:4d:
84:f6:e7:15:63:39:e8:ef:e0:b9:cb:46:48:a9:de:
4c:50:d2:51:dc:0f:04:b0:7e:cb:a6:36:56:b7:74:
c2:93:71:12:62:34:78:c8:9c:32:14:a8:42:57:95:
87:2f:b7:6b:5c:af:01:b5:0d:c4:76:22:e6:70:f2:
7e:97:98:b5:cc:7e:d5:bc:7b:e5:b4:64:ad:c0:c2:
31:0d:10:24:4f:ba:12:14:37:68:ca:56:85:d0:87:
fc:72:56:ae:99:ac:4a:f6:64:c4:55:f8:f9:60:b3:
78:02:e4:28:7b:4c:82:f2:92:df:c9:6f:bd:80:75:
38:4a:2c:e5:7a:58:64:f7:2e:c6:98:7a:e4:19:2a:
0f:d6:aa:e5:e2:78:4a:1b:a5:f5:42:c0:24:25:38:
9c:a6:76:60:e4:da:8c:b2:6c:a7:a7:64:69:a3:86:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:4E:96:DB:36:A3:29:68:AA:8B:19:62:C5:93:13:03:D6:8F:E5
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/e9JOlts2oyloqosZYsWTEwPWj-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.248.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bd:7a:8f:51:b8:a1:31:06:5d:27:8c:6a:bc:78:de:9e:23:
1f:e3:37:e2:a9:a7:c7:7a:cd:96:09:9c:16:d4:57:be:cc:2f:
7d:f3:58:c4:dd:9f:87:83:be:d2:6c:9d:b1:78:5c:7f:dc:c9:
c1:9f:b5:ad:9f:23:9e:93:8d:b9:91:69:3b:b0:f1:e5:eb:81:
46:00:60:f0:53:5f:47:88:3f:6e:32:fa:83:d1:93:ac:f0:bb:
81:76:5d:5e:75:ff:72:7f:cd:80:bf:37:92:d7:96:07:47:b5:
c7:11:86:f3:c1:10:37:9d:6c:c2:a5:70:36:5a:a0:9a:06:84:
8c:42:cc:96:0a:0a:0e:3a:7e:62:09:3f:47:18:6e:1f:b9:d9:
9d:49:cc:6c:86:80:74:86:b9:e5:b5:00:b0:1d:12:22:14:5a:
33:3a:66:1e:c8:54:f2:71:b3:1d:10:46:51:2d:de:fc:ee:97:
44:c6:ea:94:ef:2f:76:70:5a:fa:39:d1:8a:cd:c9:b1:c6:c5:
b1:ca:08:78:8c:c2:f0:ef:ab:a9:da:35:ee:33:c9:b4:c7:68:
47:93:78:66:4c:2b:62:0c:70:ff:af:c9:28:34:6e:bd:b3:3c:
86:75:9e:f4:e8:30:39:4c:36:d0:ac:70:de:37:2b:b3:a2:91:
06:c1:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:29 2025 by rpki-client