Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/ElbdOanhtkwFxY-xAEwvUAi0VvY.roa
File: ElbdOanhtkwFxY-xAEwvUAi0VvY.roa (raw, json)
Hash identifier: bg/xWucEqPN0y/rvMsCrB0lQGXRjpxR9L+IvE1XKWMw=
Subject key identifier: 12:56:DD:39:A9:E1:B6:4C:05:C5:8F:B1:00:4C:2F:50:08:B4:56:F6
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018BECAE824DB6C599523FA8DB16496F954C
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/ElbdOanhtkwFxY-xAEwvUAi0VvY.roa
Signing time: Mon 20 Nov 2023 12:22:21 +0000
ROA not before: Mon 20 Nov 2023 12:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50043
IP address blocks: 193.228.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:ae:82:4d:b6:c5:99:52:3f:a8:db:16:49:6f:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Nov 20 12:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1256dd39a9e1b64c05c58fb1004c2f5008b456f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:d0:fe:da:84:f5:81:21:f7:28:c4:e2:04:
75:64:5b:11:46:7b:47:2b:1d:1b:87:4c:43:f6:6a:
9f:6e:b2:9c:fa:27:3f:f5:83:08:e3:a4:91:a2:af:
65:81:d8:9d:88:32:b3:55:63:f0:2d:0a:2c:ae:c8:
43:d9:14:b2:ca:2c:e7:4a:c0:6f:dc:7b:70:8e:ca:
17:36:f9:26:6b:bd:8b:0a:63:4c:83:91:a6:22:2f:
27:13:36:d1:2e:df:d3:14:cf:a6:d7:b9:12:5f:da:
bf:fc:16:7e:4c:a3:86:84:0c:aa:b3:32:1f:d5:63:
fc:09:5f:17:ea:6f:7d:de:98:2b:d6:b3:10:4a:ec:
27:fe:77:01:89:7e:77:f5:de:07:9b:4a:76:da:19:
89:23:ab:01:2e:c9:5a:f0:68:26:c3:ff:ac:ff:35:
d3:65:e4:77:8b:3e:33:bc:2f:f4:9c:b4:72:ff:55:
0a:da:79:b7:e6:1d:d4:18:67:bd:53:18:31:9f:0f:
e2:89:cf:f3:48:60:ce:d7:36:f3:09:75:d4:f1:5c:
14:00:2a:43:99:d9:5d:fa:22:de:17:81:c9:d2:ce:
91:72:bf:78:10:72:2d:4c:1c:c6:cd:77:3a:ea:cb:
55:2b:3a:a9:bc:21:65:6f:7b:3e:56:2c:bc:ef:0e:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:DD:39:A9:E1:B6:4C:05:C5:8F:B1:00:4C:2F:50:08:B4:56:F6
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/ElbdOanhtkwFxY-xAEwvUAi0VvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.125.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8d:c0:32:1f:9f:ef:b2:84:44:88:cf:47:06:c4:92:33:e6:
9a:41:9a:40:01:96:dc:aa:b8:19:23:64:6f:4b:63:d9:70:3d:
d4:68:62:89:1c:3b:b6:1d:85:06:3d:05:bd:7c:8f:c8:d6:58:
71:45:8a:fa:73:e3:f1:34:24:ba:9a:c2:aa:07:e7:f7:79:90:
87:91:a2:c7:e4:10:4e:f7:d0:b9:c7:f6:67:57:0e:2b:66:3b:
a1:6d:6a:af:2c:f3:81:8d:28:5e:89:10:8b:2c:43:7e:d8:bd:
5d:58:5e:c7:b2:f7:0b:27:ea:f5:03:41:99:62:89:3b:f6:66:
6f:ed:57:70:3e:03:a3:fe:20:38:a9:e1:58:ca:2f:30:fc:57:
25:43:12:4b:9e:dd:95:47:cd:be:40:b8:05:1e:69:3a:3c:7f:
0f:f4:8a:aa:c2:93:cc:52:d3:09:38:71:17:b0:7f:4f:c6:02:
27:75:31:92:0b:b4:02:2d:f9:dc:71:c6:4a:5f:28:60:cf:70:
0b:99:b3:79:b0:bd:ec:04:24:bb:fe:2f:3f:ca:14:b1:1e:67:
1f:20:47:a9:13:63:04:07:83:1b:3f:7c:b8:e0:8c:84:02:03:
3b:8b:4a:0a:33:91:96:fe:34:2b:13:5f:03:66:2e:4f:d0:ab:
62:de:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:56:16 2025 by rpki-client