Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/EAfRPSNydV24CVDyxdO9Qe69HI8.roa
File: EAfRPSNydV24CVDyxdO9Qe69HI8.roa (raw, json)
Hash identifier: KvCCO5IooNZzF6D9z3/I8kveUG6pvdhZdrPf0nlUbwM=
Subject key identifier: 10:07:D1:3D:23:72:75:5D:B8:09:50:F2:C5:D3:BD:41:EE:BD:1C:8F
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 0185A4557EE6787B0F0D0EF6E171EB7922CD
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/EAfRPSNydV24CVDyxdO9Qe69HI8.roa
Signing time: Thu 12 Jan 2023 04:55:44 +0000
ROA not before: Thu 12 Jan 2023 04:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49136
IP address blocks: 109.229.96.0/19 maxlen: 19
94.231.128.0/20 maxlen: 20
94.231.135.0/24 maxlen: 24
94.231.136.0/24 maxlen: 24
81.162.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:55:7e:e6:78:7b:0f:0d:0e:f6:e1:71:eb:79:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Jan 12 04:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1007d13d2372755db80950f2c5d3bd41eebd1c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:32:8e:71:14:73:f0:85:1d:de:d7:ea:cd:
3d:3a:ac:35:2d:86:b3:87:25:f8:cb:7e:f6:14:fd:
20:56:6c:24:fb:77:c4:3d:92:8c:f3:78:4f:bc:6a:
fe:50:76:1d:88:3a:89:6b:b4:61:f1:ac:83:9e:cf:
7f:f6:02:93:73:c7:e3:f3:b1:5c:1b:5b:f9:14:e0:
01:42:7f:2c:b2:78:a3:e9:08:cd:f8:0d:6b:38:36:
ae:26:ce:a2:63:54:f5:1f:2c:00:7d:7b:85:c1:23:
b3:27:83:33:1a:8c:57:d5:49:4d:7c:a4:ca:91:b6:
39:32:7b:4b:65:ca:48:ed:92:84:bd:1b:fb:c5:35:
9c:a0:16:27:6f:37:70:b6:d5:c2:51:56:0b:61:d1:
fa:2d:09:73:b7:82:56:3d:cd:78:bb:34:3c:95:5a:
53:5f:08:b3:5d:06:75:d3:ef:62:bd:68:64:27:79:
78:30:b1:ab:cf:bb:71:66:4c:79:52:27:20:54:af:
38:d6:da:e5:3d:5f:3a:55:7c:96:9b:a7:dc:26:0e:
2a:f7:e7:49:b1:56:87:4c:c7:0e:0a:09:5a:2b:03:
3b:84:1d:79:49:cf:f1:7e:ef:31:94:70:20:9b:36:
06:b8:83:1c:7a:c4:4b:93:bb:eb:58:26:95:e8:32:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:07:D1:3D:23:72:75:5D:B8:09:50:F2:C5:D3:BD:41:EE:BD:1C:8F
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/EAfRPSNydV24CVDyxdO9Qe69HI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.32.0/20
94.231.128.0/20
109.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
78:17:35:0b:72:8a:34:bd:f0:6b:6f:8f:a6:7a:8b:af:55:45:
54:fb:d5:95:23:9c:08:c6:8c:e0:73:28:7b:1e:2e:e7:6d:d5:
69:54:2b:96:b0:f2:3a:61:f9:05:bb:33:90:0f:e6:e1:9b:8a:
fa:32:6d:5b:aa:91:56:7d:8f:07:2e:e9:6f:9b:7b:bf:65:5e:
aa:30:ad:9d:7e:c7:77:fa:e1:c2:19:af:a9:da:0d:1e:bf:b9:
34:7c:dc:1d:de:63:f8:e3:c8:2b:ce:4f:d3:ca:bc:68:fc:63:
7d:e6:8e:7f:99:7e:41:e3:05:cb:ce:c3:e3:99:60:ac:91:21:
01:f8:42:68:53:c7:04:70:dd:4b:cd:25:d5:35:3b:7f:a5:c6:
f9:87:db:f7:28:cb:3b:1d:71:5a:fe:71:f4:6a:67:08:45:e4:
8c:3d:b4:dc:26:fe:1a:db:9e:70:09:99:ca:05:be:5c:63:65:
53:e3:50:fa:9d:71:70:f7:02:ef:e2:cc:ff:f5:33:b5:aa:62:
43:48:34:33:b2:04:45:0f:b5:a4:50:76:0d:36:ef:d3:bc:3f:
cb:0a:ee:21:de:a9:6c:2f:bc:73:c8:e0:d4:24:cb:80:8e:22:
39:ac:6c:34:db:4b:fc:6b:0f:1f:0d:05:a6:8d:6c:28:19:e3:
4f:de:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:40 2025 by rpki-client