Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/EbRBg2t-GF3N5IFHuuXU3GZSRVc.roa
File: EbRBg2t-GF3N5IFHuuXU3GZSRVc.roa (raw, json)
Hash identifier: Swkf7xVCn+eeC3TfSd2ng8MD94b9KiEfryaCc5KMIdg=
Subject key identifier: 11:B4:41:83:6B:7E:18:5D:CD:E4:81:47:BA:E5:D4:DC:66:52:45:57
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 018571B0AC6EFB7FAF4E49F6BA0176B1948F
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/EbRBg2t-GF3N5IFHuuXU3GZSRVc.roa
Signing time: Mon 02 Jan 2023 08:54:41 +0000
ROA not before: Mon 02 Jan 2023 08:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205257
IP address blocks: 178.17.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ac:6e:fb:7f:af:4e:49:f6:ba:01:76:b1:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jan 2 08:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b441836b7e185dcde48147bae5d4dc66524557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c6:f2:b3:36:e0:88:6b:b6:db:05:10:c9:f8:
e8:62:cd:b8:5f:54:f0:54:6b:54:c0:5d:d5:bb:a3:
c5:e6:16:92:3d:2b:ed:f4:e1:0c:9f:68:77:97:23:
e4:6d:8a:ce:1f:10:1c:66:cc:29:e1:a3:0f:b8:eb:
7e:a2:6e:36:33:59:dc:bd:b8:ed:de:ef:1d:49:56:
ca:64:91:67:c3:93:ef:42:98:6b:b6:f6:19:ad:f7:
e9:c2:6a:fa:6a:ba:3c:ae:cd:4a:7e:b7:cd:7d:b7:
f6:56:6f:21:3e:e8:70:b8:b7:c5:b7:78:c1:8a:06:
2b:94:7b:10:c4:ac:26:49:91:b5:ac:52:a6:d8:dc:
eb:36:c3:83:e6:40:74:39:87:97:72:c6:c3:47:49:
f8:d7:08:82:88:35:71:3e:6a:14:4b:87:9c:8b:b9:
cf:8c:03:d5:47:98:f2:6a:b9:77:56:83:2b:87:ab:
59:2a:76:b2:52:23:a4:9f:f1:8c:60:79:ae:01:11:
38:24:e1:e7:7c:d8:18:b6:06:b8:51:8a:69:ff:b1:
87:41:b3:ac:f7:e5:2b:f2:12:0a:04:ee:52:e8:40:
06:34:77:d0:e0:4d:71:be:62:a1:6a:ec:10:c8:bf:
86:48:5c:00:8b:08:30:a8:b4:c3:05:d4:db:00:38:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B4:41:83:6B:7E:18:5D:CD:E4:81:47:BA:E5:D4:DC:66:52:45:57
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/EbRBg2t-GF3N5IFHuuXU3GZSRVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.217.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0b:7d:10:f1:42:a1:d4:f2:63:73:f2:42:8b:5c:98:b3:32:
57:b6:bf:0a:0d:b1:5b:b7:c7:42:5e:74:49:c9:5e:52:c8:bb:
f6:65:c2:08:ba:76:0a:7f:b1:31:74:77:c5:71:0e:56:c0:a6:
3b:ac:bb:9b:08:c2:f5:a1:81:91:dc:00:6e:dc:d1:63:db:80:
23:21:77:5a:3b:59:77:be:f1:9a:c1:de:6a:8a:45:92:2d:87:
1b:bf:f3:da:6a:42:5f:5c:ea:8f:21:9a:65:c1:a2:41:a5:48:
36:ed:8c:94:49:a5:62:3c:7f:c4:19:f5:aa:70:14:69:aa:cd:
1c:ae:39:d5:a9:89:87:60:59:8e:29:d3:ab:1d:a9:a1:71:30:
1b:12:d7:88:ce:42:d9:42:8d:40:0e:bd:42:b2:ff:d0:28:38:
d5:69:e9:ef:ab:74:9b:70:68:ad:2e:55:d9:0e:55:95:0c:9f:
4e:3f:91:3d:d7:ac:48:f5:17:52:a5:d9:7f:76:f1:57:b2:06:
fe:1c:9c:c8:65:d4:df:f5:16:06:bf:70:63:06:c4:57:cd:c7:
ed:9d:1d:43:e5:c7:fb:11:4c:1d:64:63:93:2c:d9:02:82:c7:
b7:ba:09:c6:99:2b:ac:ae:fa:5d:8c:75:60:d7:68:7f:e0:9a:
17:29:1c:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxsKxu+3+vTkn2ugF2sZSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi
MzEyZDQwHhcNMjMwMTAyMDg1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWI0NDE4MzZiN2UxODVkY2RlNDgxNDdiYWU1ZDRkYzY2NTI0NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsbyszbgiGu22wUQyfjoYs24X1Tw
VGtUwF3Vu6PF5haSPSvt9OEMn2h3lyPkbYrOHxAcZswp4aMPuOt+om42M1ncvbjt
3u8dSVbKZJFnw5PvQphrtvYZrffpwmr6aro8rs1KfrfNfbf2Vm8hPuhwuLfFt3jB
igYrlHsQxKwmSZG1rFKm2NzrNsOD5kB0OYeXcsbDR0n41wiCiDVxPmoUS4eci7nP
jAPVR5jyarl3VoMrh6tZKnayUiOkn/GMYHmuARE4JOHnfNgYtga4UYpp/7GHQbOs
9+Ur8hIKBO5S6EAGNHfQ4E1xvmKhauwQyL+GSFwAiwgwqLTDBdTbADhxFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBG0QYNrfhhdzeSBR7rl1NxmUkVXMB8GA1UdIwQY
MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt
MzQ4ZjlmZmJkODgzLzEvRWJSQmcydC1HRjNONUlGSHV1WFUzR1pTUlZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz
LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshHZMA0G
CSqGSIb3DQEBCwUAA4IBAQAoC30Q8UKh1PJjc/JCi1yYszJXtr8KDbFbt8dCXnRJ
yV5SyLv2ZcIIunYKf7ExdHfFcQ5WwKY7rLubCML1oYGR3ABu3NFj24AjIXdaO1l3
vvGawd5qikWSLYcbv/PaakJfXOqPIZplwaJBpUg27YyUSaViPH/EGfWqcBRpqs0c
rjnVqYmHYFmOKdOrHamhcTAbEteIzkLZQo1ADr1Csv/QKDjVaenvq3SbcGitLlXZ
DlWVDJ9OP5E916xI9RdSpdl/dvFXsgb+HJzIZdTf9RYGv3BjBsRXzcftnR1D5cf7
EUwdZGOTLNkCgse3ugnGmSusrvpdjHVg12h/4JoXKRzG
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:02 2025 by rpki-client