Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/ebrU3YPG_olUhpIeVDESW0fZCxg.roa
File: ebrU3YPG_olUhpIeVDESW0fZCxg.roa (raw, json)
Hash identifier: rn92rZVbxjwQfmImZvZsZ+7TazAFQW+AXv5nbkEAGyQ=
Subject key identifier: 79:BA:D4:DD:83:C6:FE:89:54:86:92:1E:54:31:12:5B:47:D9:0B:18
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 01856EB9228E7D95477F7A1E6567A880E160
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/ebrU3YPG_olUhpIeVDESW0fZCxg.roa
Signing time: Sun 01 Jan 2023 19:05:04 +0000
ROA not before: Sun 01 Jan 2023 19:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48786
IP address blocks: 91.212.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:22:8e:7d:95:47:7f:7a:1e:65:67:a8:80:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Jan 1 19:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79bad4dd83c6fe895486921e5431125b47d90b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:be:2c:50:38:2f:40:a6:d7:e3:ae:c5:dc:
0c:14:83:7b:75:58:49:60:38:0b:f4:a4:fe:76:72:
f2:7d:3f:59:71:5c:4c:ef:f6:dc:a6:f8:bb:fe:02:
40:42:6a:0e:69:0f:6c:02:f7:3a:3f:bc:15:c5:e6:
78:fe:b0:58:7a:f8:53:c3:bf:77:f1:5b:0c:97:4a:
b2:08:4c:4a:3e:08:94:90:a5:94:c1:97:12:61:f4:
6d:eb:03:5e:0f:a7:ea:e1:fc:b2:2b:40:06:ab:c8:
25:48:ad:d1:7b:64:40:fd:8c:ef:de:26:02:b5:03:
8b:8b:c8:89:db:cd:8a:d4:d0:8d:87:fc:8e:b5:71:
e3:a2:1a:24:1d:11:c1:f7:5a:b5:f7:79:60:73:59:
c0:a2:f1:a0:9f:9d:9c:18:f0:e5:76:fd:d5:7f:ba:
63:fc:78:4d:f0:96:84:75:17:d0:f9:25:7d:2e:a6:
1f:05:97:5e:c1:a9:da:ca:2b:39:ba:61:09:2f:9e:
68:dd:59:36:59:d2:c3:eb:76:6e:ca:06:14:bf:28:
05:47:7b:cd:7c:6c:5a:c2:73:fd:41:21:96:93:9b:
32:fe:4c:b4:7d:47:14:dc:48:be:ad:1f:98:3f:72:
db:d1:21:a8:09:e7:13:5e:b7:c0:82:d6:27:e8:91:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:D4:DD:83:C6:FE:89:54:86:92:1E:54:31:12:5B:47:D9:0B:18
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/ebrU3YPG_olUhpIeVDESW0fZCxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.35.0/24
Signature Algorithm: sha256WithRSAEncryption
12:94:3d:a1:51:e9:b3:d3:d3:5a:ae:aa:a4:cf:24:61:fd:5d:
e9:04:fe:0a:22:65:64:36:da:66:5f:d1:3b:85:0d:af:82:6f:
f3:ab:e8:61:c9:dc:d3:3c:49:26:89:b5:ee:5e:32:3b:b1:a2:
f9:65:0a:28:92:81:3a:e4:d6:b4:51:35:52:b3:20:7e:33:54:
08:70:db:10:38:84:ca:4e:54:d8:c9:3c:bd:5e:d1:e6:75:b5:
01:48:2a:7b:78:a9:9a:54:1f:ce:91:d9:26:32:c3:ea:65:5f:
3b:24:cf:7a:c7:ee:ab:13:d1:6e:54:5a:35:86:0b:00:3a:bf:
a6:d3:ab:ca:7c:11:09:ce:f0:3c:23:0b:01:63:6d:9a:09:aa:
c7:3f:b5:d4:7a:7a:dc:59:be:67:a8:4a:ea:ce:75:ea:fa:f4:
f7:db:7d:ec:b5:74:33:8b:2d:2d:cf:20:56:2a:2c:ae:78:59:
dc:40:92:66:74:ff:ce:24:7d:ee:d1:2c:cc:68:a4:6c:2c:57:
07:fd:ae:02:4d:22:0e:6b:0b:ff:04:50:63:a2:eb:df:c7:5a:
47:a1:4a:95:b1:91:72:9a:2c:19:99:a7:97:7e:89:82:05:25:
99:2c:dd:5f:ad:43:9c:fb:50:12:7c:c8:17:c8:99:ce:59:e8:
e5:6d:dc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:35:59 2025 by rpki-client