Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/enLEKyaDUXlDs24wbFgE6VKS3Yk.roa
File: enLEKyaDUXlDs24wbFgE6VKS3Yk.roa (raw, json)
Hash identifier: niGHTDLCXEPtBHDoZmMFuEqjF8OB9tbEjfkEDMwaGYE=
Subject key identifier: 7A:72:C4:2B:26:83:51:79:43:B3:6E:30:6C:58:04:E9:52:92:DD:89
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 01856E2F94DA9AF3C9EA6CE3CB02DA72C877
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/enLEKyaDUXlDs24wbFgE6VKS3Yk.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8789
IP address blocks: 90.155.112.0/21 maxlen: 21
90.155.112.0/20 maxlen: 20
90.155.120.0/21 maxlen: 21
90.155.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:94:da:9a:f3:c9:ea:6c:e3:cb:02:da:72:c8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a72c42b2683517943b36e306c5804e95292dd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:a6:f2:b4:44:98:28:29:87:88:67:8b:2f:
b8:ad:0c:6e:58:98:60:33:a4:6c:6f:d4:99:cd:33:
e6:af:43:23:4a:34:2a:3e:99:38:4a:cd:1d:37:2c:
5a:49:64:1e:ca:f8:fa:45:ef:7e:b0:c6:c8:53:55:
09:85:d6:86:5a:20:1b:ed:bf:7f:36:34:bd:43:48:
08:4f:14:42:c0:5b:6c:43:32:7c:09:fd:4a:7e:c4:
01:4c:21:63:55:9d:53:6c:d8:b8:04:07:27:09:52:
5f:5b:d0:99:8b:b7:ab:02:a4:cc:1a:1e:f9:3f:07:
ed:f7:41:3a:4d:84:14:a4:ea:4c:54:98:84:e8:d7:
ba:09:fa:e6:9a:1c:0a:e0:e9:44:72:e7:d5:ef:93:
e7:52:e0:19:b4:05:e7:1c:fb:fc:ff:0a:7c:cb:43:
91:c0:3d:9b:c5:07:08:de:5a:6f:23:77:1b:c3:53:
78:b5:f5:bb:5f:72:73:1a:cc:c0:86:c6:64:aa:da:
65:c9:c1:06:20:97:74:fb:35:98:75:c2:4d:51:d6:
93:2f:34:b3:5c:e5:1b:82:d6:d1:52:2e:21:7d:da:
38:dd:ef:d1:ba:2f:2f:19:ec:6c:9a:5d:3d:51:2d:
82:d7:f3:14:2b:80:ae:6a:ae:21:e9:d3:49:b5:bf:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:72:C4:2B:26:83:51:79:43:B3:6E:30:6C:58:04:E9:52:92:DD:89
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/enLEKyaDUXlDs24wbFgE6VKS3Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.155.112.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:c4:1a:ab:9e:9d:be:61:bd:14:cd:19:11:9a:bf:f7:ba:c1:
e5:6b:c2:98:ec:6e:54:75:0d:95:e2:18:64:c4:7b:a8:eb:07:
57:26:a8:b1:c6:3a:03:71:dc:5f:e0:fd:85:64:43:41:47:c9:
97:45:4e:7d:7d:c2:25:a4:e4:3f:6f:ec:84:1e:76:4d:47:d2:
4d:0b:cc:71:e0:48:78:1c:1e:46:c8:be:f2:79:04:96:c7:59:
dd:6f:2f:f5:63:29:25:b9:02:95:6f:bf:a4:b8:e9:52:89:e3:
c8:13:8e:e4:02:e8:31:ee:f1:cf:47:ed:cc:2f:95:aa:19:c0:
22:97:3c:6c:c7:fd:5e:ba:fd:42:22:0e:23:4f:1f:67:ca:f5:
88:f7:3a:15:e2:d0:ac:66:11:33:5e:a9:b5:8c:a5:5c:e6:44:
14:32:da:5a:80:82:db:af:e6:36:b6:45:49:69:f7:7c:1d:23:
57:96:15:1e:13:b8:c9:e6:ab:da:de:dc:b9:be:2c:ab:d5:f1:
38:41:ba:9f:47:f0:0c:82:1c:04:05:cf:41:90:28:4b:72:cf:
c2:f8:ef:2b:2d:ad:18:2d:67:8b:d2:e4:43:d2:38:ca:1b:4c:
b0:f9:2e:ab:77:c0:14:c8:d3:e3:73:ab:24:36:7d:b1:d2:dc:
53:a1:28:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL5TamvPJ6mzjywLacsh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWIwODk5ZTM4YTk2YjU0ZmM0Y2JjZDEwZWY1MzljNTRl
ZDRkMzgwHhcNMjMwMTAxMTYzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTcyYzQyYjI2ODM1MTc5NDNiMzZlMzA2YzU4MDRlOTUyOTJkZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTWm8rREmCgph4hniy+4rQxuWJhg
M6Rsb9SZzTPmr0MjSjQqPpk4Ss0dNyxaSWQeyvj6Re9+sMbIU1UJhdaGWiAb7b9/
NjS9Q0gITxRCwFtsQzJ8Cf1KfsQBTCFjVZ1TbNi4BAcnCVJfW9CZi7erAqTMGh75
Pwft90E6TYQUpOpMVJiE6Ne6CfrmmhwK4OlEcufV75PnUuAZtAXnHPv8/wp8y0OR
wD2bxQcI3lpvI3cbw1N4tfW7X3JzGszAhsZkqtplycEGIJd0+zWYdcJNUdaTLzSz
XOUbgtbRUi4hfdo43e/Rui8vGexsml09US2C1/MUK4Cuaq4h6dNJtb8vNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpyxCsmg1F5Q7NuMGxYBOlSkt2JMB8GA1UdIwQY
MBaAFO4bCJnjipa1T8TLzRDvU5xU7U04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMt
YWRmNmRhYjg4Yzg0LzEvZW5MRUt5YURVWGxEczI0d2JGZ0U2VktTM1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMtYWRmNmRhYjg4Yzg0
LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWptwMA0G
CSqGSIb3DQEBCwUAA4IBAQB8xBqrnp2+Yb0UzRkRmr/3usHla8KY7G5UdQ2V4hhk
xHuo6wdXJqixxjoDcdxf4P2FZENBR8mXRU59fcIlpOQ/b+yEHnZNR9JNC8xx4Eh4
HB5GyL7yeQSWx1ndby/1YykluQKVb7+kuOlSiePIE47kAugx7vHPR+3ML5WqGcAi
lzxsx/1euv1CIg4jTx9nyvWI9zoV4tCsZhEzXqm1jKVc5kQUMtpagILbr+Y2tkVJ
afd8HSNXlhUeE7jJ5qva3ty5viyr1fE4QbqfR/AMghwEBc9BkChLcs/C+O8rLa0Y
LWeL0uRD0jjKG0yw+S6rd8AUyNPjc6skNn2x0txToSiG
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:25 2025 by rpki-client