Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/eqf_rQqyRW2XfUsEVQ5AJWQMGe8.roa
File: eqf_rQqyRW2XfUsEVQ5AJWQMGe8.roa (raw, json)
Hash identifier: BkpV/M4Sl0iMyuKwLmwymgcEWlAJgZmlFQdNr0udjm8=
Subject key identifier: 7A:A7:FF:AD:0A:B2:45:6D:97:7D:4B:04:55:0E:40:25:64:0C:19:EF
Certificate issuer: /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Certificate serial: 0188F8AD260EEBD8B2E393BB59A18DB98753
Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/eqf_rQqyRW2XfUsEVQ5AJWQMGe8.roa
Signing time: Mon 26 Jun 2023 17:07:56 +0000
ROA not before: Mon 26 Jun 2023 17:07:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7117502
IP address blocks: 185.210.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:ad:26:0e:eb:d8:b2:e3:93:bb:59:a1:8d:b9:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Validity
Not Before: Jun 26 17:07:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aa7ffad0ab2456d977d4b04550e4025640c19ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:b9:10:98:4e:cd:10:2f:85:ec:52:8e:31:
aa:a1:73:22:5e:0a:89:3d:db:19:41:f6:30:24:8d:
c2:62:f3:76:b7:d5:09:36:67:ca:13:92:96:d0:20:
08:8d:e3:13:27:9e:af:e9:86:27:ed:ca:46:23:a1:
b7:76:bd:3b:a1:3c:d7:0e:7a:44:6f:b0:0a:bc:8c:
77:c6:a8:c7:b3:2f:19:b2:fb:f2:80:22:dd:1f:8f:
3d:e7:2c:64:79:a5:b5:17:4a:f0:fe:eb:c5:33:96:
ae:8f:21:68:e9:69:77:e4:18:11:0a:b4:50:fc:e8:
ea:13:b9:fe:aa:29:cc:df:e8:37:d3:b2:e7:e7:f7:
53:8a:a8:99:f7:4d:9d:6a:e7:92:0f:62:e9:2b:c1:
21:75:0f:f1:24:26:db:d5:2f:fb:79:f8:b3:91:3d:
74:f2:a2:f1:44:0f:d6:04:87:ff:78:d6:c5:a4:6a:
af:e0:11:53:f0:96:a0:6a:b2:6f:ad:3b:c6:e7:9b:
f1:ea:28:19:f5:91:3b:86:0e:db:0a:48:80:d5:55:
a1:85:8c:f3:1f:a4:9c:10:d5:ea:f4:49:22:31:c7:
77:98:b0:4b:25:d2:63:fc:c4:e5:fc:b9:3f:ce:67:
45:ca:9f:5a:25:48:ae:ed:56:c6:ca:fd:71:5e:68:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:FF:AD:0A:B2:45:6D:97:7D:4B:04:55:0E:40:25:64:0C:19:EF
X509v3 Authority Key Identifier:
keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/eqf_rQqyRW2XfUsEVQ5AJWQMGe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dd:3a:ce:ff:08:ed:59:e7:0c:79:64:fc:7a:c4:56:95:27:
1c:9a:22:43:78:d6:55:1b:29:2e:60:0c:80:65:d5:4e:1c:5b:
96:cd:9d:64:e9:7a:7e:b2:92:8e:a7:f8:e8:d5:2a:8d:f0:09:
d5:0b:8a:4b:17:df:ac:f6:99:5e:f5:a1:4e:e4:ce:a8:86:77:
fe:c9:fc:82:b9:89:9a:84:67:ba:d0:53:5b:49:92:95:0f:5e:
e4:fb:b0:6a:79:f0:53:ed:f3:c9:cb:5c:1d:89:72:45:93:ee:
a8:5e:4f:d4:14:04:f1:65:cb:e1:81:eb:fb:67:28:2f:4f:8a:
0d:b3:52:56:bc:bd:14:aa:f0:52:19:a6:14:78:46:be:11:7d:
2c:76:06:0c:f8:e7:a0:8d:f1:5d:41:7e:b7:a5:2c:83:c0:21:
c9:42:b4:ab:db:4f:57:60:71:4a:a9:78:d1:83:fa:0b:9b:9f:
99:dc:b6:af:87:03:c7:74:d2:96:5c:78:23:f9:1e:27:ad:20:
e1:21:35:aa:2c:7a:01:d6:a6:6d:86:c9:03:36:a9:39:48:aa:
89:36:41:27:c3:89:76:76:e8:43:76:fd:be:ae:19:88:a6:41:
17:a5:64:04:d6:e0:89:63:8f:14:f2:44:43:79:6a:8b:74:91:
d7:5d:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:02 2025 by rpki-client