Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EKbW3bAXXFx8nSzjGB17QDrW-A4.roa
File: EKbW3bAXXFx8nSzjGB17QDrW-A4.roa (raw, json)
Hash identifier: XeYBrAvCNH855ZmeUcCPGLiPD/5rfvrstNbqXn4pkMw=
Subject key identifier: 10:A6:D6:DD:B0:17:5C:5C:7C:9D:2C:E3:18:1D:7B:40:3A:D6:F8:0E
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A9C68A951FAD7A9A2941956D65F4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EKbW3bAXXFx8nSzjGB17QDrW-A4.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50830
IP address blocks: 82.177.17.0/24 maxlen: 24
81.15.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a9:c6:8a:95:1f:ad:7a:9a:29:41:95:6d:65:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a6d6ddb0175c5c7c9d2ce3181d7b403ad6f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:8d:b0:17:99:be:5c:8e:e0:2d:02:8d:7b:
f7:34:1b:65:f7:7e:86:55:96:b5:35:e6:73:a4:68:
37:f8:f2:e4:91:bd:25:9e:f7:a6:6e:c6:cf:9d:d4:
81:01:cc:8f:67:f3:86:91:72:2b:d7:68:2a:23:61:
32:b3:d1:3a:6b:96:91:10:e7:6e:02:b7:96:16:4a:
7e:79:38:5c:90:1f:e9:fd:9b:9c:2a:34:66:46:5b:
f6:f0:c5:59:c6:f3:6b:d8:c2:d5:fd:d2:cf:40:ec:
24:e1:1d:41:34:ec:6a:b3:ef:c6:06:ba:e3:af:8a:
f8:05:f7:36:fa:d2:ab:a7:41:0c:dd:75:88:81:3b:
d3:b1:19:e8:fe:53:de:5f:69:76:91:f4:5f:50:16:
32:9d:b8:fa:f8:cd:e5:05:4c:6e:2a:62:8d:4a:80:
20:bd:e3:89:92:70:64:bc:e6:82:aa:ba:3b:2c:08:
55:05:cd:f2:4d:06:88:b4:97:73:1e:c2:da:72:1b:
88:76:71:27:d0:14:4b:28:64:c7:9b:4c:bf:11:2d:
40:36:cc:45:92:b9:90:93:91:d1:35:86:8e:19:07:
bc:09:70:93:c7:be:f5:d5:64:08:35:09:ed:3d:08:
40:b1:07:60:c2:81:5c:14:fe:7d:55:c9:a2:ca:db:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A6:D6:DD:B0:17:5C:5C:7C:9D:2C:E3:18:1D:7B:40:3A:D6:F8:0E
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EKbW3bAXXFx8nSzjGB17QDrW-A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.243.0/24
82.177.17.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:cd:6b:a5:28:51:43:f6:e0:a7:6d:ca:5c:9e:28:93:29:fe:
ef:5c:e9:16:bf:ae:fb:5a:e0:0e:ff:8c:e7:34:31:0a:0d:f2:
7d:74:e0:a3:91:04:7a:a4:85:7b:16:2e:d3:6d:90:db:74:1f:
f4:87:64:ea:d8:52:6d:88:0d:18:f0:5a:cb:30:7d:1d:97:a3:
36:ed:c2:aa:33:71:9d:9f:fb:3e:f9:c4:ea:36:b3:c8:c0:ae:
76:8c:5e:2f:ab:e7:5c:b2:f7:dd:77:53:b3:d1:72:47:db:cc:
e5:90:5a:a3:0d:68:a9:2d:0e:fa:26:7e:18:0b:2c:c7:77:35:
2d:f7:99:a0:a8:68:18:a9:0d:01:d9:fd:2c:d9:64:9b:84:59:
5c:77:ae:41:b2:22:63:ae:4b:f5:52:e2:5a:96:5c:86:25:e7:
3a:b1:35:54:5d:2d:dc:b5:a8:d8:67:0f:f1:2c:c0:f0:0c:bd:
b3:4a:47:65:ca:5d:8f:18:89:bd:07:8d:ee:f8:e7:1b:2b:ab:
de:99:66:4b:d9:e6:f1:82:a6:65:36:f2:a2:a8:37:04:43:1d:
b8:9b:52:73:95:90:19:47:bc:c0:bf:0f:a7:5c:c7:e5:10:5d:
6e:ac:41:95:06:f8:da:99:5a:d6:5e:65:71:70:2d:eb:39:8a:
cb:4b:a5:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw8KnGipUfrXqaKUGVbWX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGE2ZDZkZGIwMTc1YzVjN2M5ZDJjZTMxODFkN2I0MDNhZDZmODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UyNsBeZvlyO4C0CjXv3NBtl936G
VZa1NeZzpGg3+PLkkb0lnvembsbPndSBAcyPZ/OGkXIr12gqI2Eys9E6a5aREOdu
AreWFkp+eThckB/p/ZucKjRmRlv28MVZxvNr2MLV/dLPQOwk4R1BNOxqs+/GBrrj
r4r4Bfc2+tKrp0EM3XWIgTvTsRno/lPeX2l2kfRfUBYynbj6+M3lBUxuKmKNSoAg
veOJknBkvOaCqro7LAhVBc3yTQaItJdzHsLachuIdnEn0BRLKGTHm0y/ES1ANsxF
krmQk5HRNYaOGQe8CXCTx7711WQINQntPQhAsQdgwoFcFP59VcmiytvzZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBCm1t2wF1xcfJ0s4xgde0A61vgOMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvRUtiVzNiQVhYRng4blN6akdCMTdRRHJXLUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQ/zAwQA
UrERMA0GCSqGSIb3DQEBCwUAA4IBAQDBzWulKFFD9uCnbcpcniiTKf7vXOkWv677
WuAO/4znNDEKDfJ9dOCjkQR6pIV7Fi7TbZDbdB/0h2Tq2FJtiA0Y8FrLMH0dl6M2
7cKqM3Gdn/s++cTqNrPIwK52jF4vq+dcsvfdd1Oz0XJH28zlkFqjDWipLQ76Jn4Y
CyzHdzUt95mgqGgYqQ0B2f0s2WSbhFlcd65BsiJjrkv1UuJallyGJec6sTVUXS3c
tajYZw/xLMDwDL2zSkdlyl2PGIm9B43u+OcbK6vemWZL2ebxgqZlNvKiqDcEQx24
m1JzlZAZR7zAvw+nXMflEF1urEGVBvjamVrWXmVxcC3rOYrLS6WJ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:57 2025 by rpki-client