Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ebGWsHxrhzkVBlXzboZ_c_-OyAU.roa
File: ebGWsHxrhzkVBlXzboZ_c_-OyAU.roa (raw, json)
Hash identifier: YBgVU1l9BS7O8ZFSmDu3f4MiXwfor6mmvM9WZ6Zra5E=
Subject key identifier: 79:B1:96:B0:7C:6B:87:39:15:06:55:F3:6E:86:7F:73:FF:8E:C8:05
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 018A90324C93DE3503EDA98D19B18CB88BF9
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ebGWsHxrhzkVBlXzboZ_c_-OyAU.roa
Signing time: Wed 13 Sep 2023 20:18:50 +0000
ROA not before: Wed 13 Sep 2023 20:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 176.126.163.0/24 maxlen: 24
185.39.30.0/24 maxlen: 24
185.237.224.0/23 maxlen: 23
91.210.164.0/23 maxlen: 23
91.210.167.0/24 maxlen: 24
91.90.195.0/24 maxlen: 24
91.90.193.0/24 maxlen: 24
92.118.151.0/24 maxlen: 24
92.118.150.0/24 maxlen: 24
92.118.149.0/24 maxlen: 24
185.253.44.0/23 maxlen: 23
185.253.46.0/23 maxlen: 23
2a0a:8c44::/32 maxlen: 32
2a0a:8c45::/32 maxlen: 32
2a0a:8c43::/32 maxlen: 32
2a0a:8c42::/32 maxlen: 32
2a0a:8c47::/32 maxlen: 32
2a0a:8c41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:32:4c:93:de:35:03:ed:a9:8d:19:b1:8c:b8:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Sep 13 20:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b196b07c6b8739150655f36e867f73ff8ec805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:47:e7:9d:2f:e1:8c:e7:dd:31:1b:10:e7:
ab:69:3c:04:01:52:eb:a4:5e:29:54:51:e6:2b:33:
56:c4:74:97:9b:30:46:3f:21:4a:66:f3:04:cf:b9:
6b:28:a3:ea:34:44:fb:c1:64:0a:45:88:32:ed:e3:
46:db:26:6d:e4:1a:b5:36:94:fa:73:f7:09:32:08:
5f:2c:0a:73:15:56:a0:75:1b:59:3c:1c:1d:19:94:
30:dc:ab:b3:ac:82:7a:fa:14:79:09:54:f5:44:5e:
19:e5:15:ae:5b:64:a8:da:c3:a3:8a:bc:8e:a9:18:
2d:fc:0d:d7:1a:09:1a:f1:99:80:c3:9a:4f:18:ef:
35:d5:a1:74:0f:60:87:39:83:a1:30:91:0b:da:64:
86:0e:cc:ed:c9:e9:47:6f:36:f9:88:f9:ca:d3:22:
cf:09:80:d9:91:ed:b0:65:59:e3:8e:7d:fd:f2:9a:
dc:5c:50:16:0e:74:f4:c1:37:67:c1:e3:6f:db:f4:
5f:c0:8a:19:d1:0b:d3:1c:ee:6c:62:fc:f3:0f:81:
07:7f:ef:77:05:67:e6:b9:7a:42:67:80:83:45:18:
c8:bf:e7:cf:0d:63:89:36:76:d8:fa:44:3b:f5:d5:
e2:21:e9:a3:00:92:3f:91:a1:ca:4d:1a:99:63:66:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:96:B0:7C:6B:87:39:15:06:55:F3:6E:86:7F:73:FF:8E:C8:05
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/ebGWsHxrhzkVBlXzboZ_c_-OyAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.193.0/24
91.90.195.0/24
91.210.164.0/23
91.210.167.0/24
92.118.149.0-92.118.151.255
176.126.163.0/24
185.39.30.0/24
185.237.224.0/23
185.253.44.0/22
IPv6:
2a0a:8c41::-2a0a:8c45:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:8c47::/32
Signature Algorithm: sha256WithRSAEncryption
20:55:ae:2c:9a:fd:4d:d2:43:5d:18:37:e4:72:65:d7:d4:e1:
f3:68:a4:b0:56:4b:9a:8c:2f:60:6a:0f:82:55:41:44:67:eb:
d4:cb:63:94:20:c9:55:3b:d9:a4:15:16:77:de:1b:eb:8b:a2:
cc:93:f9:69:57:a5:cc:99:10:c0:1b:9e:8c:e9:9a:88:a8:25:
39:b8:a7:49:2f:db:f0:65:26:e3:9d:48:b2:78:3a:4e:10:e1:
b1:27:20:20:cf:f7:83:1f:65:6c:65:1f:b7:d4:b0:8a:f7:43:
fe:48:91:e7:8f:42:6f:5d:35:9b:47:a7:50:b1:3d:e2:b7:2d:
73:76:53:71:75:2a:9a:01:f5:a9:e7:07:4e:85:d6:a5:06:5d:
fe:5e:28:e0:1e:25:d3:1b:28:a1:90:94:32:ca:f2:c4:44:88:
a9:31:1c:f1:d3:75:d6:35:00:06:ef:5e:5f:c4:71:9f:d6:a6:
ab:33:67:68:32:24:00:ca:14:97:ad:e5:4e:46:0d:17:67:43:
b0:c2:d1:2a:c7:45:38:09:50:8c:3e:1a:43:ba:5f:56:cb:fa:
43:71:8d:55:3b:77:12:db:e2:ea:71:b3:b5:1f:6f:f6:5c:44:
ff:05:08:a4:29:72:1e:14:24:aa:96:62:32:6a:22:3b:70:4f:
9d:24:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:17:44 2025 by rpki-client