Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/biEf5kiwWSnpWt-ZBw2Cgm4DAaE.roa
File: biEf5kiwWSnpWt-ZBw2Cgm4DAaE.roa (raw, json)
Hash identifier: JVDbdPRtcTiT650AXINyCWAU3OA/d7vpljw9Uk/WshE=
Subject key identifier: 6E:21:1F:E6:48:B0:59:29:E9:5A:DF:99:07:0D:82:82:6E:03:01:A1
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 018C35114A36451044EEB9814F1888A82178
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/biEf5kiwWSnpWt-ZBw2Cgm4DAaE.roa
Signing time: Mon 04 Dec 2023 13:42:54 +0000
ROA not before: Mon 04 Dec 2023 13:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3301
IP address blocks: 139.58.0.0/16 maxlen: 24
136.163.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:11:4a:36:45:10:44:ee:b9:81:4f:18:88:a8:21:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: Dec 4 13:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e211fe648b05929e95adf99070d82826e0301a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:00:a1:6e:1c:8a:85:ce:bb:86:5c:3b:17:
16:6d:b7:82:1a:82:89:5f:57:3d:75:34:d3:0e:bd:
6d:4b:44:e2:cc:81:a7:07:2f:d9:34:12:a1:2e:22:
24:1d:db:2d:f3:d3:20:15:fa:68:43:bd:5d:60:c6:
18:14:58:d8:74:5f:82:c8:ef:4c:43:82:76:36:1d:
c4:b7:65:a8:80:0b:35:bd:66:9f:88:37:f7:4b:80:
20:40:8e:83:d5:43:7d:97:e9:66:62:28:0a:a6:cd:
b1:35:ca:f3:06:bb:24:60:cc:f1:2a:56:5a:88:86:
b4:2b:24:bb:7b:7e:c0:0f:92:d1:41:f2:6b:e3:39:
be:4d:31:2c:62:f4:73:27:04:08:a2:24:18:13:df:
eb:3e:e4:2b:f8:cf:3b:2c:8c:aa:14:98:32:99:b8:
45:44:d4:b0:b5:91:63:8c:c2:3e:d8:7a:b5:15:8f:
d9:0e:63:73:21:37:8a:ba:77:8f:34:08:63:fe:bb:
33:22:5b:68:ff:0e:fa:fb:30:49:18:6d:43:5d:d4:
8a:50:26:6a:b1:33:16:a6:bf:c2:c9:c2:59:27:5d:
19:8e:ea:c0:c7:54:d0:a1:a3:07:eb:db:d1:67:cd:
78:41:e4:0a:54:a0:ec:85:9f:3e:10:6a:44:28:f8:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:21:1F:E6:48:B0:59:29:E9:5A:DF:99:07:0D:82:82:6E:03:01:A1
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/biEf5kiwWSnpWt-ZBw2Cgm4DAaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.163.0.0/16
139.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:4f:31:67:68:1c:40:db:b2:3d:6d:97:a7:6c:be:75:ba:75:
97:bc:ca:73:5f:40:68:66:3c:f6:12:da:58:19:08:07:70:d1:
2a:d5:ec:6e:c5:aa:82:20:80:16:c3:3d:63:92:3c:01:68:e9:
1a:69:ee:56:a6:7e:8c:52:b1:d1:09:f3:38:e8:6a:87:dd:ac:
c1:57:47:0f:31:24:3e:53:37:8c:5a:3b:54:89:3f:69:eb:0e:
9c:c3:0c:4b:27:23:6a:b8:f9:98:9c:f2:f8:a1:df:c2:43:27:
a4:77:cc:e5:64:91:6f:ca:73:02:be:c7:4d:5c:e4:2b:b7:04:
e0:24:96:4e:7d:eb:81:33:ab:3a:a3:be:a5:e7:5c:ad:80:96:
fa:52:05:09:f3:55:a7:c2:80:93:19:3e:2d:9d:eb:9a:0f:22:
60:bc:60:b1:a7:59:7c:40:ff:ac:c0:a4:7e:5c:65:8e:ad:23:
a9:af:05:fe:7e:b9:ce:02:6b:e5:42:eb:ef:1d:a2:0d:19:c8:
ec:ef:72:4a:cc:33:64:03:c8:fe:d1:47:b1:91:65:48:b9:fa:
8d:6e:89:9e:4f:8b:95:d0:f0:e9:d2:92:a5:f2:5c:e9:71:b2:
f2:f3:5b:8e:a1:f9:03:cb:ba:a5:43:1a:fd:fe:1f:75:45:1d:
80:d6:06:db
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYw1EUo2RRBE7rmBTxiIqCF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNGMzZmMwMTIyZDgzMWZiZWE4YWJiMjBhNGU5YjY1YzU0
MDM5YjIwHhcNMjMxMjA0MTM0MjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTIxMWZlNjQ4YjA1OTI5ZTk1YWRmOTkwNzBkODI4MjZlMDMwMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDMAoW4cioXOu4ZcOxcWbbeCGoKJ
X1c9dTTTDr1tS0TizIGnBy/ZNBKhLiIkHdst89MgFfpoQ71dYMYYFFjYdF+CyO9M
Q4J2Nh3Et2WogAs1vWafiDf3S4AgQI6D1UN9l+lmYigKps2xNcrzBrskYMzxKlZa
iIa0KyS7e37AD5LRQfJr4zm+TTEsYvRzJwQIoiQYE9/rPuQr+M87LIyqFJgymbhF
RNSwtZFjjMI+2Hq1FY/ZDmNzITeKunePNAhj/rszIlto/w76+zBJGG1DXdSKUCZq
sTMWpr/CycJZJ10ZjurAx1TQoaMH69vRZ814QeQKVKDshZ8+EGpEKPhHhwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFG4hH+ZIsFkp6VrfmQcNgoJuAwGhMB8GA1UdIwQY
MBaAFO5MP8ASLYMfvqirsgpOm2XFQDmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjkt
M2FjN2Q5NjIzMjkxLzEvYmlFZjVraXdXU25wV3QtWkJ3MkNnbTREQWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjktM2FjN2Q5NjIzMjkx
LzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAiKMDAwCL
OjANBgkqhkiG9w0BAQsFAAOCAQEAVk8xZ2gcQNuyPW2Xp2y+dbp1l7zKc19AaGY8
9hLaWBkIB3DRKtXsbsWqgiCAFsM9Y5I8AWjpGmnuVqZ+jFKx0QnzOOhqh92swVdH
DzEkPlM3jFo7VIk/aesOnMMMSycjarj5mJzy+KHfwkMnpHfM5WSRb8pzAr7HTVzk
K7cE4CSWTn3rgTOrOqO+pedcrYCW+lIFCfNVp8KAkxk+LZ3rmg8iYLxgsadZfED/
rMCkflxljq0jqa8F/n65zgJr5ULr7x2iDRnI7O9ySswzZAPI/tFHsZFlSLn6jW6J
nk+LldDw6dKSpfJc6XGy8vNbjqH5A8u6pUMa/f4fdUUdgNYG2w==
-----END CERTIFICATE-----
Generated at Sun Apr 13 12:11:31 2025 by rpki-client