Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/EasZNFiOk7gN1PPBKiLLoXcdkDk.roa
File: EasZNFiOk7gN1PPBKiLLoXcdkDk.roa (raw, json)
Hash identifier: NIGjVDS+dl+isVuvfwo6qS+VLZrRIohqxnnegLiP4Ts=
Subject key identifier: 11:AB:19:34:58:8E:93:B8:0D:D4:F3:C1:2A:22:CB:A1:77:1D:90:39
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 01856E01CCBEDF7F0C1281A3CC0F1B74164A
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/EasZNFiOk7gN1PPBKiLLoXcdkDk.roa
Signing time: Sun 01 Jan 2023 15:44:49 +0000
ROA not before: Sun 01 Jan 2023 15:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3344
IP address blocks: 82.136.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:cc:be:df:7f:0c:12:81:a3:cc:0f:1b:74:16:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 15:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ab1934588e93b80dd4f3c12a22cba1771d9039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:68:00:e2:f0:c4:97:68:e4:98:be:2d:d9:
83:38:67:36:6e:88:75:e4:7c:ee:04:30:58:50:d1:
32:f6:34:87:d1:69:6e:f2:49:61:ca:cc:99:c5:12:
4b:8e:d5:66:e9:b5:55:ee:a2:a5:59:57:f6:3d:72:
56:34:05:fe:1c:96:56:df:0d:fb:c2:cc:3b:83:34:
38:8e:ab:03:86:6a:0d:e4:c8:d0:49:cd:08:dc:cd:
dd:2a:fd:48:43:27:58:68:3c:e9:c1:a5:24:bb:ee:
0b:96:c4:1c:61:15:2a:60:43:3e:e8:9b:3c:1f:c8:
16:b7:19:45:07:63:1f:3a:56:c9:ca:5c:a9:98:a1:
3d:4f:c9:b9:5f:a3:c0:17:5a:74:1b:fb:cc:07:34:
68:97:f2:f1:ce:86:c3:36:07:55:ef:4d:3e:94:1d:
7f:c3:a9:f7:e5:1c:43:eb:ea:8a:3c:a6:72:73:52:
33:c7:32:67:69:1a:7c:d5:26:75:1f:bb:b8:34:9e:
7a:df:f2:d3:39:a7:fb:38:ff:f4:48:15:7c:08:60:
c5:6b:aa:10:51:92:4e:bb:a0:83:b9:93:99:d2:0f:
a7:86:96:f4:f3:f6:11:21:26:50:a9:f5:9e:c7:04:
b5:4a:69:d9:12:10:56:e6:31:bc:25:d1:38:d2:1a:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:19:34:58:8E:93:B8:0D:D4:F3:C1:2A:22:CB:A1:77:1D:90:39
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/EasZNFiOk7gN1PPBKiLLoXcdkDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.136.8.0/22
Signature Algorithm: sha256WithRSAEncryption
30:93:2c:06:25:95:3c:1a:19:a0:70:d2:b2:36:32:07:d3:be:
58:a8:c2:24:aa:fd:26:5e:ff:a2:9f:1a:9a:cb:54:97:bc:d7:
e4:a6:b0:5f:28:36:69:fa:5f:f0:bf:4e:36:c9:6c:aa:cd:3b:
41:dd:67:56:24:1c:be:86:f5:2d:07:64:f1:1c:97:05:fc:f8:
78:7e:60:78:3c:a1:13:92:78:fe:52:ec:1d:4a:72:d0:9a:94:
ac:d9:d2:6e:03:eb:0f:46:3a:81:00:49:37:3b:19:8a:f0:09:
ef:80:5c:16:57:2f:3e:59:d6:02:4b:02:38:d7:c9:8e:46:b0:
01:1e:e1:88:20:de:61:e6:cf:a0:0c:99:37:6b:7d:f1:ea:ac:
08:0f:1a:68:29:4e:28:ed:5e:0a:0b:1b:c8:0e:1c:06:d2:9e:
8a:a1:41:80:ad:54:ca:51:2e:16:ab:d6:61:c7:40:76:bf:a6:
53:1c:37:76:4f:b3:f7:e2:af:e4:bc:b6:9f:72:df:5d:97:76:
8e:0e:e7:f9:23:bd:5c:79:2a:72:96:97:31:cb:cc:87:83:ba:
cf:b5:83:d7:e9:75:5a:e5:7a:f9:51:bf:7d:e5:af:cc:07:d5:
32:9a:c5:58:67:59:3e:12:d6:55:96:73:b6:5d:a1:1c:95:07:
47:11:63:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:14 2025 by rpki-client