Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/eEvWsKo9ZZngKgthTQymuoIIS3k.roa
File: eEvWsKo9ZZngKgthTQymuoIIS3k.roa (raw, json)
Hash identifier: tDaJbuaV5XTbELHlaoJBmTvpc+7gT4wucou4Vos6xVY=
Subject key identifier: 78:4B:D6:B0:AA:3D:65:99:E0:2A:0B:61:4D:0C:A6:BA:82:08:4B:79
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 07A7CA77
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/eEvWsKo9ZZngKgthTQymuoIIS3k.roa
Signing time: Sat 01 Jan 2022 10:01:58 +0000
ROA not before: Sat 01 Jan 2022 10:01:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30758
IP address blocks: 185.48.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128436855 (0x7a7ca77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 1 10:01:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=784bd6b0aa3d6599e02a0b614d0ca6ba82084b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a3:bf:31:a5:00:bf:20:06:78:f2:1b:2b:d1:
df:8f:fd:a2:fd:91:71:5a:0d:80:16:20:ea:cd:8b:
4b:98:f3:d3:6d:06:75:f9:56:d1:cf:87:60:b3:9d:
b7:34:5e:db:c0:71:35:a3:38:04:17:75:17:a5:44:
d5:e5:9f:7e:f8:b3:5e:69:5d:c7:ed:68:d6:e5:1c:
fa:df:c7:28:1b:9b:f2:e5:d2:5f:ab:f4:14:02:84:
1f:c6:0c:7e:6a:0b:12:a6:d0:11:7e:d0:1d:15:4d:
8d:72:cd:8d:df:6d:6f:08:ed:c9:3d:4c:d5:8b:89:
08:16:a1:33:a2:d9:75:5b:21:91:07:54:c5:e1:cb:
de:3c:75:5d:7c:50:35:9f:ea:14:27:4b:3c:05:be:
60:2c:e1:01:e8:dc:3e:16:37:73:c9:31:52:5b:5b:
44:e0:d8:e4:22:35:71:9a:c9:d4:c8:8d:95:f6:a4:
6a:fe:86:13:5f:ae:bd:e0:ca:6e:7b:ce:8c:ce:df:
ac:01:0c:e6:c4:02:19:ef:d2:ba:12:60:2b:d1:75:
09:c4:b5:0f:de:86:9d:fe:34:be:9b:ce:95:53:50:
95:41:6d:da:6c:23:76:96:73:a3:90:eb:12:45:42:
41:9c:b6:f6:85:98:5d:f9:fd:9b:b8:8a:9d:0d:49:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:D6:B0:AA:3D:65:99:E0:2A:0B:61:4D:0C:A6:BA:82:08:4B:79
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/eEvWsKo9ZZngKgthTQymuoIIS3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.25.0/24
Signature Algorithm: sha256WithRSAEncryption
74:51:f5:06:8d:98:16:56:49:5b:a1:3b:60:0b:95:58:3e:8e:
ed:37:ce:df:b7:67:3a:40:fc:f8:ae:08:f3:aa:5d:f7:86:72:
7b:54:4e:96:4a:b3:9a:bb:c7:41:cd:cb:aa:0d:b1:f6:28:ef:
35:a3:fb:e3:ca:4c:50:73:e6:e5:40:75:a3:46:b3:4f:08:d9:
c3:79:40:c7:54:9c:5a:09:48:01:72:bd:1f:a2:1b:b7:1d:09:
82:d2:2c:ab:5b:26:20:dc:cf:70:f8:b4:61:46:4d:53:a7:c5:
93:86:b8:8b:74:29:f6:cb:07:e6:7f:24:92:1c:a8:05:13:aa:
a8:a8:57:f5:9c:5d:e4:0d:9e:ea:23:25:b8:1a:d7:67:0b:24:
9e:b0:62:db:10:44:0d:06:b2:11:90:b8:87:80:2d:36:5f:a8:
13:22:7e:7f:d7:dc:75:96:36:fb:bf:50:99:93:20:7d:25:13:
87:6a:f2:86:9a:c1:d6:5d:ee:30:8e:35:36:40:75:98:5d:ef:
19:88:35:d3:8c:00:8b:f5:03:95:f9:43:f4:9d:d5:a8:19:d7:
c6:af:a9:f1:db:f7:db:6f:be:41:6b:83:03:e2:0f:10:4d:c5:
0e:13:e2:0a:e7:4e:f4:53:dd:40:21:b3:7f:c3:92:ad:b9:d5:
88:ed:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:21 2025 by rpki-client