Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/EWlDwNPDNV3b28DJ1eeluqW8Wng.roa
File: EWlDwNPDNV3b28DJ1eeluqW8Wng.roa (raw, json)
Hash identifier: hjKvTP3AwU6b6GWYOZkT3NA1v0WpvZsH+TNYZRcpl9M=
Subject key identifier: 11:69:43:C0:D3:C3:35:5D:DB:DB:C0:C9:D5:E7:A5:BA:A5:BC:5A:78
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 01856FF01D83ACAFDED736D990055D2FE6C9
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/EWlDwNPDNV3b28DJ1eeluqW8Wng.roa
Signing time: Mon 02 Jan 2023 00:44:45 +0000
ROA not before: Mon 02 Jan 2023 00:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208479
IP address blocks: 45.92.196.0/22 maxlen: 24
2a0e:72c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:1d:83:ac:af:de:d7:36:d9:90:05:5d:2f:e6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Jan 2 00:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116943c0d3c3355ddbdbc0c9d5e7a5baa5bc5a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:9c:55:87:cf:b7:71:32:ec:cd:c2:86:10:
43:48:2b:ee:8d:c7:b6:f2:34:f6:f9:8f:a1:3c:1e:
10:43:97:1e:85:da:f6:7d:65:dc:90:8a:fe:ba:61:
9e:aa:df:d8:a7:21:99:c0:ee:6e:d0:46:6f:99:a4:
4a:bb:16:c6:f8:5e:46:19:f2:29:61:58:3e:48:78:
8e:27:5a:08:80:ca:af:67:2c:3b:fd:18:56:4d:48:
c2:91:4d:30:1c:f0:0c:3e:1f:83:5f:c1:c1:02:bc:
47:d6:07:2b:cc:2a:9d:96:aa:84:a7:f1:fc:65:f5:
fb:9e:af:7d:50:25:ae:29:b1:77:27:29:3d:b2:a3:
93:e1:a5:4c:f3:bc:fb:2d:ce:42:91:2d:0b:dc:f6:
05:96:d6:d6:8c:bb:94:6a:85:c7:1e:da:75:81:65:
a9:b9:b1:fe:2f:42:a9:78:05:46:4f:0a:dd:97:5b:
c8:69:dd:7e:81:e8:d4:1d:77:e4:77:fd:6e:17:80:
06:f3:66:00:c8:1a:75:5e:1b:6f:a5:fb:e2:28:1c:
1e:1c:1a:8e:81:d4:74:4e:ea:21:50:cd:2b:14:20:
38:00:1f:5f:b0:76:a9:d1:8d:fb:73:e1:24:92:dd:
93:f2:98:36:b5:d2:37:85:b0:43:d7:83:17:dc:e1:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:43:C0:D3:C3:35:5D:DB:DB:C0:C9:D5:E7:A5:BA:A5:BC:5A:78
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/EWlDwNPDNV3b28DJ1eeluqW8Wng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.196.0/22
IPv6:
2a0e:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:2b:93:c6:a6:f5:5a:28:4b:66:16:3d:4b:1e:48:b6:e5:f5:
30:8d:49:61:e8:f6:75:99:c4:02:90:4d:99:ff:8a:e4:e5:5e:
24:da:ab:03:70:05:c2:e9:60:dc:76:eb:0e:6d:ba:5d:24:95:
33:c3:06:99:ac:87:91:b7:5c:83:af:da:c5:31:2b:c6:26:b5:
2c:58:f0:d4:57:aa:c8:da:e0:67:fa:09:f8:6d:ac:96:1a:a9:
a9:8a:81:75:03:52:a6:b8:6d:8d:e1:4b:a0:9a:ac:11:49:9d:
16:79:f6:82:1e:a6:f8:b1:35:42:60:6b:f0:ec:71:80:8c:52:
64:f6:c1:87:a7:1f:0b:f5:50:cf:0c:7d:31:60:47:d5:88:54:
5c:cd:64:55:6c:89:4a:77:8b:3b:85:38:52:02:f0:44:fe:5b:
ed:2b:65:ac:34:8b:ef:f1:c4:30:77:03:46:91:58:6c:db:8e:
b8:29:a7:9f:af:62:76:cd:e6:04:bc:9b:af:74:98:d3:66:53:
b3:3d:92:64:87:73:b4:43:cd:5f:d6:1b:7e:52:a0:87:9c:b9:
83:29:2d:3e:5a:aa:a3:56:61:3a:be:02:0a:a4:f5:db:2a:f8:
5d:06:f6:ce:44:9b:18:f5:ce:27:ce:91:d4:45:22:33:80:3b:
0a:f8:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:56 2025 by rpki-client