Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/EgwyLmFUzdor3G4krHijEwj8LBA.roa
File: EgwyLmFUzdor3G4krHijEwj8LBA.roa (raw, json)
Hash identifier: r+EmPYZZ683tEwggSZmjk85WP8i0fQ+KbIgteNaxLp0=
Subject key identifier: 12:0C:32:2E:61:54:CD:DA:2B:DC:6E:24:AC:78:A3:13:08:FC:2C:10
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01856E66734B5EEFA69E0AD09B5F943C93F4
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/EgwyLmFUzdor3G4krHijEwj8LBA.roa
Signing time: Sun 01 Jan 2023 17:34:45 +0000
ROA not before: Sun 01 Jan 2023 17:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35432
IP address blocks: 213.169.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:73:4b:5e:ef:a6:9e:0a:d0:9b:5f:94:3c:93:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 17:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=120c322e6154cdda2bdc6e24ac78a31308fc2c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:ef:45:5a:ab:48:bd:cd:d8:9c:a8:15:30:
a1:6c:16:91:90:02:60:a4:32:4e:b9:57:41:8b:77:
d2:4e:49:7e:a4:ad:03:5c:2d:d2:27:43:e4:d7:4d:
25:28:5a:4d:2c:d1:0a:da:ca:5e:ae:b4:90:fd:24:
5f:5f:5a:12:4a:e5:c0:e4:88:39:4c:d6:9a:19:3b:
e3:f6:74:fe:b7:58:87:88:9c:30:6f:60:2f:d1:6f:
96:6c:f0:6e:74:23:ff:a6:54:6a:09:f5:ea:a7:90:
a5:3d:47:76:bf:da:1b:f6:1a:ac:2e:39:50:1e:6b:
17:75:09:95:cb:53:92:33:47:57:92:f7:f5:09:0c:
5c:6c:85:3a:bb:46:7a:93:39:7d:b9:3f:10:ad:7a:
76:4b:38:46:f9:08:12:9d:f1:1b:72:15:89:41:fc:
51:80:32:8d:a3:df:b3:56:cc:55:2d:28:9b:e1:77:
17:85:b1:f6:04:04:4b:fb:f5:bb:b9:1a:8c:19:f3:
e8:f7:05:d3:d0:7b:80:a1:b6:79:7e:66:cb:5e:9a:
d9:39:23:ae:17:8d:4d:ee:e6:6f:bd:5b:e1:3a:e5:
1f:37:2a:0c:c1:00:d3:e8:cc:78:8b:c7:30:0b:a4:
fa:c6:2b:6f:49:9d:38:b2:6c:e9:82:a8:eb:79:a2:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:32:2E:61:54:CD:DA:2B:DC:6E:24:AC:78:A3:13:08:FC:2C:10
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/EgwyLmFUzdor3G4krHijEwj8LBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.149.0/24
Signature Algorithm: sha256WithRSAEncryption
57:46:3f:72:b3:27:d6:59:87:1a:81:7a:5e:3f:34:8f:ba:c6:
d4:dd:fa:09:60:cb:51:24:d0:c6:28:2e:b7:a7:4a:e5:94:04:
cf:1a:20:68:a3:3e:26:e1:0b:b2:3f:1e:9c:c5:b2:c2:ba:27:
a6:e2:81:6a:a1:28:d4:9b:3f:93:09:de:40:6c:fd:c9:a0:1d:
67:ae:d3:88:10:be:4f:e3:c0:86:00:48:45:d4:ab:71:c0:41:
f3:ab:a3:c7:1a:c0:e5:d6:fb:4f:e8:23:e0:0f:1f:8f:c3:0c:
40:32:e9:0a:af:ba:84:fa:ba:a2:ac:13:cb:8e:1b:3d:d8:ef:
ab:5b:59:9c:17:68:c4:a7:a7:4a:36:8d:36:6b:bd:36:03:bb:
27:cf:98:87:c9:e0:bd:d2:68:72:b7:d2:c9:be:41:75:18:49:
42:cd:0d:e7:1a:90:ef:ec:76:7b:37:d8:00:64:58:f7:c0:db:
93:78:53:f4:79:05:e6:18:57:1c:9d:d3:1e:d2:a9:db:0b:1e:
ef:f4:74:e7:5b:15:4d:e3:99:e1:b5:98:36:03:87:4f:49:a5:
f6:b2:de:d3:fa:f4:1d:63:18:d3:70:e1:cb:4d:ef:6b:30:26:
ba:ae:cd:94:93:d4:c3:fc:1d:49:00:a1:ff:48:ce:02:0d:73:
4f:22:c2:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuZnNLXu+mngrQm1+UPJP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjMwMTAxMTczNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjBjMzIyZTYxNTRjZGRhMmJkYzZlMjRhYzc4YTMxMzA4ZmMyYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL7vRVqrSL3N2JyoFTChbBaRkAJg
pDJOuVdBi3fSTkl+pK0DXC3SJ0Pk100lKFpNLNEK2sperrSQ/SRfX1oSSuXA5Ig5
TNaaGTvj9nT+t1iHiJwwb2Av0W+WbPBudCP/plRqCfXqp5ClPUd2v9ob9hqsLjlQ
HmsXdQmVy1OSM0dXkvf1CQxcbIU6u0Z6kzl9uT8QrXp2SzhG+QgSnfEbchWJQfxR
gDKNo9+zVsxVLSib4XcXhbH2BARL+/W7uRqMGfPo9wXT0HuAobZ5fmbLXprZOSOu
F41N7uZvvVvhOuUfNyoMwQDT6Mx4i8cwC6T6xitvSZ04smzpgqjreaJ/HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIMMi5hVM3aK9xuJKx4oxMI/CwQMB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvRWd3eUxtRlV6ZG9yM0c0a3JIaWpFd2o4TEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1amVMA0G
CSqGSIb3DQEBCwUAA4IBAQBXRj9ysyfWWYcagXpePzSPusbU3foJYMtRJNDGKC63
p0rllATPGiBooz4m4QuyPx6cxbLCuiem4oFqoSjUmz+TCd5AbP3JoB1nrtOIEL5P
48CGAEhF1KtxwEHzq6PHGsDl1vtP6CPgDx+PwwxAMukKr7qE+rqirBPLjhs92O+r
W1mcF2jEp6dKNo02a702A7snz5iHyeC90mhyt9LJvkF1GElCzQ3nGpDv7HZ7N9gA
ZFj3wNuTeFP0eQXmGFccndMe0qnbCx7v9HTnWxVN45nhtZg2A4dPSaX2st7T+vQd
YxjTcOHLTe9rMCa6rs2Uk9TD/B1JAKH/SM4CDXNPIsKH
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:15 2025 by rpki-client