Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E2X62WFvlYNo-4ejXnA0-jtjv_U.roa
File: E2X62WFvlYNo-4ejXnA0-jtjv_U.roa (raw, json)
Hash identifier: 4BESRa0lEQlOjZLYQAHq9JZVgVnzjuJ0zHwwsEDmSyY=
Subject key identifier: 13:65:FA:D9:61:6F:95:83:68:FB:87:A3:5E:70:34:FA:3B:63:BF:F5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD528E1DB6D973F2E49D82945EA4651
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E2X62WFvlYNo-4ejXnA0-jtjv_U.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49948
IP address blocks: 86.104.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:28:e1:db:6d:97:3f:2e:49:d8:29:45:ea:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1365fad9616f958368fb87a35e7034fa3b63bff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:04:5e:7a:cd:d0:d6:c8:38:a5:71:2b:9e:
93:f1:59:ed:4e:54:7c:6b:2b:ac:34:c7:ae:2b:45:
1f:22:07:fe:7d:d8:ba:84:46:7b:62:3d:a4:00:c0:
8f:7c:3a:f7:43:b5:03:fb:5b:4b:0d:f3:ce:f0:fb:
ad:3b:0b:ab:fa:cd:ee:54:02:0d:bd:b3:1a:0f:a3:
d8:91:88:4a:fd:4f:2a:35:10:6d:f8:a1:c3:53:40:
ad:e0:e7:9c:be:49:36:ab:bc:3a:ff:00:a4:e8:98:
47:f3:28:40:90:f9:88:51:94:db:80:9d:75:23:57:
46:70:09:9e:0b:f4:0d:be:23:72:c6:21:4a:ff:ad:
d6:4e:97:b6:b1:f9:be:b2:fd:b8:fd:a0:40:fe:a0:
dd:10:b5:a7:3d:29:83:fe:aa:6a:a7:99:9c:39:b2:
5d:64:43:e4:e2:20:0f:d8:78:2e:d3:51:25:f3:49:
89:31:29:d9:20:ca:17:3f:a7:7e:ac:1d:91:be:20:
85:0b:8b:be:8b:25:de:f7:70:4e:4d:47:87:d0:11:
ac:6f:24:4f:98:36:3c:6d:d8:f7:32:c8:c9:50:8d:
0d:0a:3b:51:ff:7d:2c:ce:30:e2:08:ea:14:a7:b6:
1c:4f:da:ee:fa:41:2e:ea:e2:5d:bc:f0:fa:8b:59:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:FA:D9:61:6F:95:83:68:FB:87:A3:5E:70:34:FA:3B:63:BF:F5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/E2X62WFvlYNo-4ejXnA0-jtjv_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.230.0/24
Signature Algorithm: sha256WithRSAEncryption
f3:af:87:20:8e:f9:ed:01:a6:d8:0a:26:ea:ce:d6:25:6c:49:
ea:b4:48:f1:50:2f:da:28:b6:06:ac:85:53:38:49:a4:56:65:
80:41:b2:c6:e9:97:a2:73:2b:67:71:ad:16:ae:8e:ef:94:14:
93:b6:49:ba:7d:49:73:0d:ca:7d:39:fd:eb:b3:5d:7b:b4:85:
6f:8a:bd:25:86:04:6e:9a:73:22:e1:1a:cf:56:44:2b:a1:76:
71:3e:5c:64:f8:97:0d:db:62:cc:e1:52:57:22:9c:60:07:e6:
13:a3:37:e7:9e:f1:74:10:31:9b:5c:3d:30:fb:e3:0b:01:07:
bc:a5:fd:51:cd:2c:1f:4a:63:70:54:9f:96:4e:5e:d5:81:4a:
62:8f:e0:1a:d7:93:d5:c1:25:5d:ea:72:28:10:37:a3:46:7a:
b1:42:06:a8:2a:b9:a7:a4:a7:9b:08:cf:44:04:17:54:e0:10:
68:e2:03:ec:98:c8:3b:40:53:dc:7c:11:da:d4:75:b4:a3:62:
e3:12:b7:1e:6b:3e:cb:88:3f:ff:8a:f4:c4:72:02:d0:2d:2b:
10:32:4a:1a:03:6c:67:d9:25:76:41:5b:89:95:5c:e6:4a:5e:
be:cc:f4:0a:ef:a4:eb:e7:48:fc:0e:ba:1f:a4:10:44:99:75:
88:86:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:20 2025 by rpki-client