Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/Ey3Ke45B5bv3ZQap7XWspaE-MT8.roa
File: Ey3Ke45B5bv3ZQap7XWspaE-MT8.roa (raw, json)
Hash identifier: 6rhrlim8lRXApufYGu4AJmnP1/XN4MlWuqJuS1MErIs=
Subject key identifier: 13:2D:CA:7B:8E:41:E5:BB:F7:65:06:A9:ED:75:AC:A5:A1:3E:31:3F
Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial: 6DFB6E
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/Ey3Ke45B5bv3ZQap7XWspaE-MT8.roa
Signing time: Sat 01 Jan 2022 01:00:38 +0000
ROA not before: Sat 01 Jan 2022 01:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 146.19.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7207790 (0x6dfb6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Validity
Not Before: Jan 1 01:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=132dca7b8e41e5bbf76506a9ed75aca5a13e313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:d3:7e:db:5b:38:80:12:85:96:2d:f5:66:
4c:88:5d:89:44:53:59:c5:05:a3:3d:73:ff:95:79:
2e:8d:23:ab:23:4f:56:52:94:f4:e6:bd:2d:17:12:
d4:e8:34:d5:ec:fc:f7:e2:66:59:d1:9c:e1:eb:e6:
34:59:74:f5:a0:66:8e:f2:d9:13:d1:8e:c5:2a:3d:
64:44:68:fe:5e:30:b0:4e:f2:4e:cd:1a:f8:80:fc:
24:3d:ec:c7:88:cf:e8:42:2b:b0:bc:0a:bc:4f:8b:
2a:bb:5c:8d:ca:80:5b:c8:24:e8:95:63:9c:78:17:
9f:9e:11:5b:11:df:18:6e:dc:73:15:6d:82:79:4c:
d8:c6:4f:22:b3:4e:0b:7f:fa:fb:a6:d9:a6:99:48:
7c:57:92:a4:91:31:51:eb:51:1c:c7:00:a1:53:e4:
7b:12:83:5b:ab:9e:d3:fa:eb:76:a6:02:14:48:ef:
65:cd:8b:b4:23:7c:39:8c:24:76:68:53:0f:59:fb:
46:d9:f7:36:14:9e:3e:80:c4:2f:8e:f8:06:ea:65:
ef:49:7e:c8:dc:c2:1c:ca:8f:94:71:32:fc:5c:c5:
8a:6a:22:43:b5:a9:6c:0b:29:73:97:7c:8c:18:23:
18:4b:9c:2e:92:70:c0:00:69:de:50:9b:e4:28:ec:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2D:CA:7B:8E:41:E5:BB:F7:65:06:A9:ED:75:AC:A5:A1:3E:31:3F
X509v3 Authority Key Identifier:
keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/Ey3Ke45B5bv3ZQap7XWspaE-MT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.103.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:20:1b:fb:8e:07:91:68:83:08:0f:93:ac:97:c2:79:bb:12:
e6:92:05:30:28:ed:36:ee:73:0f:4a:10:3f:9a:db:fa:52:60:
df:e7:9e:36:74:10:d7:dc:96:f5:14:3a:07:c4:8c:69:ae:04:
db:25:98:22:7b:58:b6:35:23:0a:4f:87:8a:6e:74:4d:b1:64:
bf:4c:fc:f4:9c:88:b3:41:25:9f:34:72:a0:87:d0:e2:78:76:
c5:24:7e:e5:db:ab:e1:5b:fe:3e:76:a7:df:44:af:85:4b:2b:
bb:f5:33:81:ce:78:23:7b:94:17:bc:2f:c5:ae:35:14:7e:b3:
2d:24:f1:9d:a2:65:55:cf:cc:a6:82:07:91:54:86:93:aa:7d:
e6:ab:85:e9:e2:39:4a:2f:47:b3:a0:29:15:f5:42:5a:5a:41:
aa:fe:0f:a9:75:19:a2:f7:8e:ab:15:5f:2c:2e:10:76:18:11:
0e:44:0d:93:51:32:15:a4:7e:48:a3:63:7e:e5:87:77:be:d8:
b3:d3:e2:19:2a:be:30:71:95:5f:86:73:1d:0d:72:1e:bd:40:
a1:6d:f8:53:e1:1a:9e:0a:41:de:34:ea:f3:d3:e5:ec:99:62:
79:bc:6f:19:fd:8c:70:33:ac:2d:2a:bc:53:c8:fc:d6:0f:6b:
90:54:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:23 2025 by rpki-client