Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/eBaOXOck3VZjAt3ckkk94nfhrC8.roa
File: eBaOXOck3VZjAt3ckkk94nfhrC8.roa (raw, json)
Hash identifier: NQOh3dHVtSJtSb9tDhTSrFsAFXnXZRLILUCQOVjrSwg=
Subject key identifier: 78:16:8E:5C:E7:24:DD:56:63:02:DD:DC:92:49:3D:E2:77:E1:AC:2F
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018B60E709DB8F2E7B65350A544E603E2F4D
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/eBaOXOck3VZjAt3ckkk94nfhrC8.roa
Signing time: Tue 24 Oct 2023 08:57:15 +0000
ROA not before: Tue 24 Oct 2023 08:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212939
IP address blocks: 195.238.247.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:e7:09:db:8f:2e:7b:65:35:0a:54:4e:60:3e:2f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Oct 24 08:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78168e5ce724dd566302dddc92493de277e1ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:cc:69:de:d5:8b:eb:77:59:68:04:d7:b5:
bf:77:79:dc:50:4a:ec:23:1c:7a:a6:6f:4a:d7:f5:
60:27:3b:e5:64:bb:1f:a9:9d:ae:e2:a8:1e:a9:21:
a3:06:63:bc:dd:90:d0:e2:b8:8e:b1:b0:fe:21:fb:
38:b5:3e:84:6d:c9:a3:20:f2:22:25:17:71:a4:22:
c5:19:4d:44:f5:b8:04:40:c7:13:36:b3:af:fe:61:
5a:32:b9:54:02:a1:48:a2:ee:3f:35:c8:4e:09:51:
b2:79:32:bf:28:90:ca:f1:3e:47:16:fc:08:71:f2:
3b:1c:fe:03:28:91:5f:be:91:3e:3b:38:b0:ae:62:
3a:51:4f:ce:c4:88:a4:53:e1:c0:d4:de:fa:4a:74:
ae:79:50:0b:74:38:5d:43:e8:0c:b0:2f:1f:ee:12:
9c:ba:f7:b9:ea:21:62:1d:af:9f:71:8f:61:3f:3a:
c3:40:3d:24:f5:e9:43:8f:eb:bd:5a:61:0d:f3:dd:
19:33:ea:48:fa:86:d7:1b:6e:85:1f:ef:ce:7c:00:
f5:ad:09:37:e8:f0:b3:0d:71:f6:ef:c3:28:85:ff:
58:bc:f3:fe:0f:22:05:1a:90:a7:4b:85:56:51:91:
e1:31:e3:15:b2:0f:63:a9:2d:db:79:69:cf:1e:cb:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:8E:5C:E7:24:DD:56:63:02:DD:DC:92:49:3D:E2:77:E1:AC:2F
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/eBaOXOck3VZjAt3ckkk94nfhrC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/24
195.238.231.0/24
195.238.247.0/24
Signature Algorithm: sha256WithRSAEncryption
05:eb:1b:e6:20:a8:af:fa:ab:73:30:40:ea:36:56:f9:db:f8:
81:74:84:d1:ea:79:84:c0:db:d8:c9:4e:bc:a2:b1:7a:8a:1c:
c1:07:29:ad:47:fc:4e:68:cb:d6:23:8e:bb:e2:5e:c0:a0:58:
91:3a:e8:3c:24:78:17:d6:3e:4e:b6:10:af:1b:dc:05:85:ab:
cb:85:aa:15:bb:fa:f5:ba:6b:a1:e7:3c:31:38:3c:c4:ae:f3:
05:f0:73:11:47:f8:24:1e:d4:66:ea:3b:96:ec:42:23:be:34:
1e:5a:d0:36:94:54:d1:e3:f6:3e:40:15:c7:9d:5a:0d:e6:69:
6e:60:2f:92:69:fa:5a:e5:38:e1:1d:5a:aa:c6:c7:03:f0:66:
0f:84:f1:14:0b:48:cb:82:68:08:d5:21:3f:48:b9:ba:5c:fc:
c3:33:f5:2c:44:6c:72:ca:ca:ab:cf:f0:47:3a:59:ae:a5:51:
44:d5:9d:ab:2a:8a:e2:7e:74:5b:47:81:70:31:71:92:20:7a:
3c:ae:d6:5c:49:02:2f:e2:18:99:4b:c0:73:55:9e:cb:89:2a:
b2:b7:eb:ae:d5:73:a4:a4:0b:19:fa:2d:a5:bb:07:f9:8e:b7:
e1:ec:db:09:a9:6e:59:86:63:d2:ce:64:3c:de:ed:cd:08:b2:
d7:3b:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:22 2025 by rpki-client