Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EMVYEYj17M63J-FB9NlhgZvs29I.roa
File: EMVYEYj17M63J-FB9NlhgZvs29I.roa (raw, json)
Hash identifier: lWESYt0p3KRVuGQG9MmpQjw4diH95QFs0wKtbp6IHIs=
Subject key identifier: 10:C5:58:11:88:F5:EC:CE:B7:27:E1:41:F4:D9:61:81:9B:EC:DB:D2
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018CACB824535E563F2EEEC008FCE5BF368B
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EMVYEYj17M63J-FB9NlhgZvs29I.roa
Signing time: Wed 27 Dec 2023 19:19:58 +0000
ROA not before: Wed 27 Dec 2023 19:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60631
IP address blocks: 185.243.48.0/24 maxlen: 24
178.239.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:b8:24:53:5e:56:3f:2e:ee:c0:08:fc:e5:bf:36:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 27 19:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10c5581188f5ecceb727e141f4d961819becdbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:42:8b:b3:e8:5e:89:4d:bf:22:a0:79:3e:
4a:3f:01:9c:91:09:8b:15:f0:52:01:93:70:b7:e3:
9e:bd:a2:02:a2:cc:d9:fe:5a:a8:a5:98:9e:fc:86:
11:13:80:15:50:98:ea:ae:4f:f2:85:0e:de:71:d0:
17:f9:75:b8:ec:17:8b:70:b6:4d:e0:03:73:3c:5a:
b5:13:2a:5a:be:9d:19:f7:34:4e:e1:ef:b4:8d:d1:
c6:7a:59:37:8b:6c:db:3f:54:43:75:7f:0d:8e:14:
25:a5:a0:da:26:c5:02:1c:e0:dd:27:c6:e2:bf:7b:
4d:1f:5c:b3:c6:8f:3c:25:0c:a0:d5:3c:9c:8b:7e:
c8:c7:28:70:b4:26:97:15:af:34:90:7a:40:f9:af:
81:6c:5b:39:5e:10:df:fb:0f:89:d6:de:d4:6a:02:
2d:8a:21:5b:4d:e5:2b:26:81:b1:c7:ab:95:35:c9:
6c:e9:e0:01:07:01:3c:2f:c1:9e:0e:7a:3a:9d:ea:
1f:b3:19:e0:5f:b8:4e:0a:39:00:35:2f:38:0a:13:
9e:8d:ca:77:cd:f1:16:ac:9d:a1:e8:7e:7a:66:d6:
91:f6:c2:61:bf:cf:6d:9f:2e:b7:4b:23:f1:69:b8:
23:75:f9:49:09:b2:c2:ba:3d:e1:2e:fa:6d:6a:d5:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:58:11:88:F5:EC:CE:B7:27:E1:41:F4:D9:61:81:9B:EC:DB:D2
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EMVYEYj17M63J-FB9NlhgZvs29I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.158.0/24
185.243.48.0/24
Signature Algorithm: sha256WithRSAEncryption
14:91:7d:67:5d:a5:c5:95:4b:93:96:34:10:d5:51:de:0e:db:
4b:31:a7:92:70:a3:55:35:5b:c4:18:9f:a4:3a:1a:37:ae:2a:
53:79:74:3a:bf:94:ac:3e:a8:36:f8:a6:d6:45:37:50:3f:1b:
49:1d:76:d1:b9:1a:da:2c:81:27:00:25:f8:c1:b4:85:4b:01:
47:39:91:37:24:1d:39:e4:27:d5:30:cb:0e:9a:cd:ff:13:13:
64:74:a3:58:cb:98:ca:f8:a9:91:ae:f8:a6:7c:4a:5f:e6:9b:
c8:b2:bc:cd:08:90:f6:9b:10:33:0c:c9:89:dc:c3:26:26:fd:
fd:8f:75:11:cd:2c:b2:96:23:97:31:1f:58:e0:d7:07:e2:b5:
8f:ae:15:1f:c0:61:48:57:d8:6c:32:fb:8e:ae:08:a4:0a:1d:
54:b6:2a:94:4b:78:f2:ec:26:7b:43:9c:34:8b:7d:9e:12:f4:
59:fb:41:44:74:77:bb:96:14:f1:a7:ce:75:d0:5c:6d:3f:e6:
52:9e:fc:c7:f3:4d:aa:0f:12:9e:6a:99:4b:31:01:b6:98:bb:
35:74:00:a9:e1:ef:07:d7:88:29:3c:a6:83:bb:19:22:d8:da:
76:99:82:21:43:48:e2:9f:e4:37:e5:cb:f1:1e:6a:bb:c7:79:
a6:7b:a1:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYysuCRTXlY/Lu7ACPzlvzaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMxMjI3MTkxOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGM1NTgxMTg4ZjVlY2NlYjcyN2UxNDFmNGQ5NjE4MTliZWNkYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2itCi7PoXolNvyKgeT5KPwGckQmL
FfBSAZNwt+OevaICoszZ/lqopZie/IYRE4AVUJjqrk/yhQ7ecdAX+XW47BeLcLZN
4ANzPFq1Eypavp0Z9zRO4e+0jdHGelk3i2zbP1RDdX8NjhQlpaDaJsUCHODdJ8bi
v3tNH1yzxo88JQyg1Tyci37IxyhwtCaXFa80kHpA+a+BbFs5XhDf+w+J1t7UagIt
iiFbTeUrJoGxx6uVNcls6eABBwE8L8GeDno6neofsxngX7hOCjkANS84ChOejcp3
zfEWrJ2h6H56ZtaR9sJhv89tny63SyPxabgjdflJCbLCuj3hLvptatVDhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBDFWBGI9ezOtyfhQfTZYYGb7NvSMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvRU1WWUVZajE3TTYzSi1GQjlObGhnWnZzMjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu+eAwQA
ufMwMA0GCSqGSIb3DQEBCwUAA4IBAQAUkX1nXaXFlUuTljQQ1VHeDttLMaeScKNV
NVvEGJ+kOho3ripTeXQ6v5SsPqg2+KbWRTdQPxtJHXbRuRraLIEnACX4wbSFSwFH
OZE3JB055CfVMMsOms3/ExNkdKNYy5jK+KmRrvimfEpf5pvIsrzNCJD2mxAzDMmJ
3MMmJv39j3URzSyyliOXMR9Y4NcH4rWPrhUfwGFIV9hsMvuOrgikCh1UtiqUS3jy
7CZ7Q5w0i32eEvRZ+0FEdHe7lhTxp8510FxtP+ZSnvzH802qDxKeaplLMQG2mLs1
dACp4e8H14gpPKaDuxki2Np2mYIhQ0jin+Q35cvxHmq7x3mme6Go
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:50 2025 by rpki-client