Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaGrG_kVC0t6kDdfbm23U8uAieo.roa
File: EaGrG_kVC0t6kDdfbm23U8uAieo.roa (raw, json)
Hash identifier: zXQyfdZXXgcr5P50DFguIKkPGyCNsPBElD9oOrmhDQM=
Subject key identifier: 11:A1:AB:1B:F9:15:0B:4B:7A:90:37:5F:6E:6D:B7:53:CB:80:89:EA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0185C07A4FAA8D5E47543229EF0E81AE89F4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaGrG_kVC0t6kDdfbm23U8uAieo.roa
Signing time: Tue 17 Jan 2023 16:05:19 +0000
ROA not before: Tue 17 Jan 2023 16:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 81.168.116.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
81.168.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:7a:4f:aa:8d:5e:47:54:32:29:ef:0e:81:ae:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 17 16:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a1ab1bf9150b4b7a90375f6e6db753cb8089ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:0c:da:54:b0:a0:ff:85:00:50:c4:90:4c:
9d:b1:b5:bf:ff:85:4b:09:02:81:9d:77:b5:e1:4c:
5f:73:66:21:81:83:d6:ef:b4:f1:05:95:40:b9:df:
f8:de:e8:4c:88:1a:5a:36:97:11:61:75:fd:2a:37:
ed:b0:c1:93:a2:48:b1:1e:03:64:74:74:d0:d7:f3:
ee:dd:f2:ca:1e:14:9f:13:6b:fb:14:d7:89:20:5c:
87:30:d9:76:3f:f4:5b:19:6b:38:17:cb:ad:31:69:
20:12:39:fd:d2:7b:87:6d:a2:8a:e9:5c:09:ff:29:
08:a7:1f:31:77:8d:94:db:d7:52:66:74:f6:a2:1c:
fe:81:11:44:bb:14:d4:41:5e:9a:84:d3:12:b9:f5:
4a:6d:42:00:55:1a:53:ae:59:dd:e2:2f:1e:58:ba:
a0:be:e0:46:cf:7f:6a:b4:73:0d:07:f6:be:0a:47:
d3:74:66:bf:d5:1f:23:0d:3b:10:38:84:fd:ca:6c:
d6:73:70:d4:3a:b6:40:df:db:bf:dc:fe:b9:8a:56:
5d:11:22:5f:64:32:c4:aa:53:9d:ae:e9:d9:06:8e:
ec:fb:88:18:8d:7b:ee:ab:a4:3f:c4:12:64:7b:91:
97:31:e2:2a:92:97:d9:25:e2:ee:5d:97:7d:ea:2e:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A1:AB:1B:F9:15:0B:4B:7A:90:37:5F:6E:6D:B7:53:CB:80:89:EA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaGrG_kVC0t6kDdfbm23U8uAieo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.35.0/24
81.168.116.0/24
82.153.79.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e8:f3:b5:b6:58:68:c3:fd:5d:a4:ed:d1:66:c7:a6:95:b1:
23:f0:df:8a:b0:18:1c:20:0f:e6:b4:9b:a6:fa:5e:68:9f:b7:
2a:11:ad:6b:47:88:b9:d3:1f:d4:c5:84:bc:52:b7:7d:ac:1b:
3f:03:3c:82:89:59:f7:50:dc:ac:5c:27:cc:77:c4:5e:f9:58:
72:67:df:64:5c:b8:f6:4f:71:2f:f9:4f:6e:4a:2a:9d:a7:31:
fa:57:92:54:08:b7:a5:cc:8e:45:51:80:26:26:76:a5:92:7d:
bb:d7:d2:1f:7e:ef:59:20:09:2a:77:5a:12:1a:a0:ca:a9:ff:
c9:f8:45:f7:80:b7:dd:d5:5e:f7:97:bb:d6:71:c1:e1:e6:4b:
88:76:0b:a4:95:2b:a4:fc:7e:39:b2:ac:f9:c5:87:b1:82:bd:
ab:26:bd:c0:92:75:1b:e3:d3:ca:c2:2c:17:6d:b0:29:f9:45:
20:e0:7e:5a:ef:89:1f:03:06:e2:15:62:38:66:72:d0:fc:1c:
8d:6c:0c:00:58:ca:f9:96:ff:3f:e5:74:5a:70:ef:0d:62:97:
8a:23:d2:33:58:0b:e2:f0:00:28:18:ed:59:3c:a4:26:31:39:
c1:10:28:69:b3:d3:27:e1:c8:e8:f0:f5:58:56:e3:67:67:bc:
7c:1a:71:e4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXAek+qjV5HVDIp7w6Bron0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMwMTE3MTYwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWExYWIxYmY5MTUwYjRiN2E5MDM3NWY2ZTZkYjc1M2NiODA4OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HoM2lSwoP+FAFDEkEydsbW//4VL
CQKBnXe14Uxfc2YhgYPW77TxBZVAud/43uhMiBpaNpcRYXX9KjftsMGTokixHgNk
dHTQ1/Pu3fLKHhSfE2v7FNeJIFyHMNl2P/RbGWs4F8utMWkgEjn90nuHbaKK6VwJ
/ykIpx8xd42U29dSZnT2ohz+gRFEuxTUQV6ahNMSufVKbUIAVRpTrlnd4i8eWLqg
vuBGz39qtHMNB/a+CkfTdGa/1R8jDTsQOIT9ymzWc3DUOrZA39u/3P65ilZdESJf
ZDLEqlOdrunZBo7s+4gYjXvuq6Q/xBJke5GXMeIqkpfZJeLuXZd96i5mxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBGhqxv5FQtLepA3X25tt1PLgInqMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRWFHckdfa1ZDMHQ2a0RkZmJtMjNVOHVBaWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUagjAwQA
Uah0AwQAUplPMA0GCSqGSIb3DQEBCwUAA4IBAQCJ6PO1tlhow/1dpO3RZsemlbEj
8N+KsBgcIA/mtJum+l5on7cqEa1rR4i50x/UxYS8Urd9rBs/AzyCiVn3UNysXCfM
d8Re+VhyZ99kXLj2T3Ev+U9uSiqdpzH6V5JUCLelzI5FUYAmJnalkn2719Iffu9Z
IAkqd1oSGqDKqf/J+EX3gLfd1V73l7vWccHh5kuIdguklSuk/H45sqz5xYexgr2r
Jr3AknUb49PKwiwXbbAp+UUg4H5a74kfAwbiFWI4ZnLQ/ByNbAwAWMr5lv8/5XRa
cO8NYpeKI9IzWAvi8AAoGO1ZPKQmMTnBEChps9Mn4cjo8PVYVuNnZ7x8GnHk
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:30:31 2025 by rpki-client