Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/eobRyhKyaOUObOxiy_QGy3BHK3I.roa
File: eobRyhKyaOUObOxiy_QGy3BHK3I.roa (raw, json)
Hash identifier: x+N/qs3TuY3QLn5pKeh0380g9nCXe4sbid9OpfTtQ5A=
Subject key identifier: 7A:86:D1:CA:12:B2:68:E5:0E:6C:EC:62:CB:F4:06:CB:70:47:2B:72
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 01856B2EA12B4627A2869692805708CA7023
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/eobRyhKyaOUObOxiy_QGy3BHK3I.roa
Signing time: Sun 01 Jan 2023 02:34:55 +0000
ROA not before: Sun 01 Jan 2023 02:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202730
IP address blocks: 185.142.112.0/24 maxlen: 24
2a07:2d00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2e:a1:2b:46:27:a2:86:96:92:80:57:08:ca:70:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Jan 1 02:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a86d1ca12b268e50e6cec62cbf406cb70472b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:4b:5f:65:39:e4:cf:ad:b1:31:a0:f7:33:
41:d8:09:4f:2b:e7:c3:15:70:7b:c8:1e:ad:15:1a:
72:2f:c8:37:b2:4f:77:60:e5:0d:17:d2:57:6d:c3:
82:67:86:fb:fc:ab:25:63:d0:9e:b2:4f:20:a0:45:
d7:34:4c:8c:30:20:c8:f1:44:37:fe:b5:38:17:b3:
a7:1d:e4:10:08:37:5e:ec:3d:09:51:c3:c8:0b:a2:
6b:8f:de:43:77:9e:47:cc:0f:d3:85:16:5f:ba:0a:
47:fd:15:d5:8a:6d:e4:7f:cb:c7:1c:18:58:ed:51:
5f:19:5c:59:18:64:af:42:89:e3:87:1a:b0:d1:8e:
93:a6:be:27:f3:70:45:9b:b3:52:5a:df:8a:5d:bc:
81:96:e8:12:c2:fe:38:53:c5:53:2e:8e:ed:2f:80:
b1:29:93:0a:fa:cd:43:01:21:0f:e3:e4:56:fe:0a:
a3:26:52:48:a8:e5:70:03:dd:b8:c2:a4:18:14:de:
b9:04:03:c8:55:60:a0:03:ca:4c:cd:1d:81:c5:1b:
8b:66:ab:27:88:05:db:7f:a7:10:78:7a:ca:32:32:
ce:70:7b:4c:ad:69:2c:5b:e7:0e:c8:df:e0:37:6b:
46:c0:93:1a:a1:37:06:2b:77:ec:e1:5c:ed:3b:6a:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:D1:CA:12:B2:68:E5:0E:6C:EC:62:CB:F4:06:CB:70:47:2B:72
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/eobRyhKyaOUObOxiy_QGy3BHK3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.112.0/24
IPv6:
2a07:2d00::/48
Signature Algorithm: sha256WithRSAEncryption
92:c0:09:9f:cc:1c:56:bd:57:1b:54:53:de:3b:5a:81:cd:54:
ca:48:90:ab:d6:d0:a9:03:fb:39:fe:a5:82:4e:67:0d:cf:f3:
d7:e1:f8:a2:01:61:ee:41:57:3b:94:37:df:16:6e:27:77:ee:
9c:8e:4a:5a:85:ad:b5:08:60:2b:04:e6:51:71:68:a2:28:4e:
4e:0e:62:98:a8:12:0b:95:e8:cd:5b:f0:34:b4:15:ac:a4:c8:
6b:d4:57:8b:30:5d:e7:47:15:7e:31:5b:f4:a7:03:1c:25:46:
71:73:ad:73:b4:95:9b:4c:2a:9f:bd:0d:08:b1:3f:c8:59:ab:
46:9d:8d:fa:e6:d5:8e:e6:de:a4:db:c5:db:35:10:2f:dc:3e:
4c:94:44:b3:c4:71:8c:05:18:8a:92:bc:09:48:d5:5b:ea:21:
e9:f0:c0:4f:5f:e4:2c:80:6a:2f:41:e2:a8:44:ac:a0:b6:d5:
11:2d:c2:67:94:c2:24:33:97:30:91:f9:3e:47:fa:82:09:ff:
05:77:44:04:3d:53:6e:4d:96:de:f1:4c:fd:43:3b:f7:b4:2e:
4e:90:1e:d3:ab:8f:8d:da:36:e4:60:bd:ce:a5:ab:b1:f3:ed:
a6:ae:99:e0:34:41:4b:6a:80:c7:3a:54:57:0e:18:1f:33:76:
50:67:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:45 2025 by rpki-client