Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/eUVjZk-s_PT9PffDUvTdjEmDFMg.roa
File: eUVjZk-s_PT9PffDUvTdjEmDFMg.roa (raw, json)
Hash identifier: XMLgFBrjnKjbo5tkdF383CVnYCbPxtaVm4LTPNd70J4=
Subject key identifier: 79:45:63:66:4F:AC:FC:F4:FD:3D:F7:C3:52:F4:DD:8C:49:83:14:C8
Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial: 01872DCAA9E125C868B60CA650CAC98BF843
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/eUVjZk-s_PT9PffDUvTdjEmDFMg.roa
Signing time: Wed 29 Mar 2023 14:34:29 +0000
ROA not before: Wed 29 Mar 2023 14:34:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35260
IP address blocks: 217.26.112.0/20 maxlen: 20
2a00:1ac0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:ca:a9:e1:25:c8:68:b6:0c:a6:50:ca:c9:8b:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
Validity
Not Before: Mar 29 14:34:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=794563664facfcf4fd3df7c352f4dd8c498314c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:5d:a7:9a:58:f3:77:a7:0b:31:00:a5:af:
6a:62:6a:5e:66:0f:94:7d:89:03:5c:c5:9e:3d:6e:
2d:d1:ba:9c:a7:82:cd:e8:90:43:9e:ca:53:13:4f:
d0:93:41:84:01:47:8c:4d:35:b5:ad:90:05:80:ef:
cf:44:cf:47:39:39:0e:a8:e3:bb:89:ea:f8:8e:87:
df:78:86:ac:ab:b0:e3:bf:7a:99:2e:eb:65:b9:91:
af:49:1f:11:7e:2d:2b:14:9c:6c:25:dc:52:42:b4:
c0:8a:e3:5d:bf:9e:33:31:34:4a:08:29:6c:57:d3:
7c:b7:3e:69:a3:d1:15:ef:51:b1:d7:cd:df:46:31:
f7:99:f4:75:33:ec:72:17:be:4c:12:d0:55:65:b1:
8e:3e:bc:de:34:8c:9b:52:b1:bb:e0:ee:4b:da:a7:
97:a3:aa:b5:a7:39:34:96:56:b0:7b:9c:36:6f:f2:
d7:fe:01:21:b0:d8:27:9a:ef:32:c1:0d:a8:3a:1c:
b8:ab:3f:a9:4c:e1:50:45:b2:7a:29:b4:03:ec:5f:
d4:d3:54:3b:61:b6:d3:52:d1:40:2f:74:2c:a9:66:
70:e9:93:bd:e5:3e:1c:df:c6:bd:07:0b:e1:07:fc:
e0:a9:0c:7e:eb:8f:1f:e9:63:d3:a4:5f:20:0c:cd:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:63:66:4F:AC:FC:F4:FD:3D:F7:C3:52:F4:DD:8C:49:83:14:C8
X509v3 Authority Key Identifier:
keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/eUVjZk-s_PT9PffDUvTdjEmDFMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.112.0/20
IPv6:
2a00:1ac0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:ec:d6:55:3e:af:37:c8:80:45:f7:a1:4c:31:7b:41:e0:fb:
6d:f8:88:5e:8e:12:8b:ea:44:5d:9d:5a:07:bb:ba:55:13:c4:
ed:ac:f3:e1:ee:e5:18:ed:07:bf:52:9e:99:8f:d1:29:a6:81:
94:7f:d7:a2:ee:26:81:3c:64:08:eb:ac:ad:59:a5:de:d6:95:
95:33:03:0a:2e:26:3f:49:5f:41:fd:7a:f1:b4:fa:eb:3a:c9:
8b:5d:6b:91:62:51:a5:5b:2e:1b:4b:72:20:cd:3e:a2:17:0f:
7a:6c:72:08:5f:8d:94:9e:54:2b:25:f4:08:72:6a:46:ae:bb:
52:05:eb:fb:ad:5e:3b:dd:54:09:1d:7b:fe:97:4d:a1:07:62:
e0:78:40:4d:05:c1:92:45:0e:1a:ca:a1:80:9b:e5:8e:4d:94:
13:a6:95:8f:dc:1f:65:e0:ee:e9:1b:0e:8a:57:c2:5d:e3:df:
39:38:9d:4e:c5:bb:3e:ff:11:32:83:f9:a1:96:97:23:1e:64:
e4:36:14:54:97:0e:5d:40:6f:72:b4:0f:8b:98:c9:57:56:c9:
84:71:e4:53:b9:2b:ca:f7:40:df:84:ad:1e:e9:ef:71:3e:45:
73:c3:19:24:b2:2e:32:8f:6c:8a:e2:6d:38:b1:ea:18:0d:e6:
56:cb:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:25 2025 by rpki-client