Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/Eb5biwd3j4ZX1FgaXHFiXH2xgj4.roa
File: Eb5biwd3j4ZX1FgaXHFiXH2xgj4.roa (raw, json)
Hash identifier: tV8GMj1oZD7A0P0UOSFWp6b6axOwS98qU6UH+p8ISqw=
Subject key identifier: 11:BE:5B:8B:07:77:8F:86:57:D4:58:1A:5C:71:62:5C:7D:B1:82:3E
Certificate issuer: /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial: 09754993
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/Eb5biwd3j4ZX1FgaXHFiXH2xgj4.roa
Signing time: Fri 28 Jan 2022 13:58:58 +0000
ROA not before: Fri 28 Jan 2022 13:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35433
IP address blocks: 84.18.224.0/19 maxlen: 24
85.208.12.0/22 maxlen: 24
91.193.8.0/22 maxlen: 22
2a09:8040::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158681491 (0x9754993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
Validity
Not Before: Jan 28 13:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11be5b8b07778f8657d4581a5c71625c7db1823e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b1:43:15:bb:3c:99:6e:08:50:2c:3b:ec:57:
0b:d3:16:c1:69:fd:50:8b:c0:8e:65:34:cf:40:cf:
7b:19:5f:6e:cc:23:d7:0c:ca:d2:16:66:65:37:53:
be:c5:bd:cf:2c:02:64:92:15:c7:53:09:85:89:29:
d5:c6:10:e3:28:db:63:c6:59:17:96:e0:db:ce:d3:
65:87:f6:1e:15:00:d4:74:24:af:65:c6:81:af:cc:
f2:e0:6a:32:00:76:df:5a:5e:50:b4:5b:84:25:9c:
9a:50:f8:fe:48:e2:d7:93:ab:5d:c0:89:8b:5d:1f:
af:d3:f4:6c:41:a5:34:51:8b:a6:48:61:c2:f6:49:
46:1a:c6:9c:83:14:9f:c2:80:80:74:ed:b9:3a:ee:
3f:b4:b1:df:ea:7f:d4:69:b4:26:a3:06:34:1f:b2:
b5:15:e4:a5:63:81:97:5b:3f:1d:fa:14:d4:26:5a:
09:83:6b:df:c3:40:d2:56:ac:af:89:6f:52:7d:91:
9f:c4:71:c6:f1:d3:d4:4c:6c:d8:02:9e:49:f1:02:
66:55:0b:f5:59:8f:c7:60:4e:27:4b:1f:ed:f5:2b:
94:5c:de:ff:0b:bd:36:c4:d0:8c:61:b8:14:3d:12:
82:e3:c1:ac:b7:18:79:b1:5b:ad:e5:6f:fa:6c:81:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:5B:8B:07:77:8F:86:57:D4:58:1A:5C:71:62:5C:7D:B1:82:3E
X509v3 Authority Key Identifier:
keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/Eb5biwd3j4ZX1FgaXHFiXH2xgj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.224.0/19
85.208.12.0/22
91.193.8.0/22
IPv6:
2a09:8040::/29
Signature Algorithm: sha256WithRSAEncryption
8c:83:55:8f:99:28:ba:a7:b4:1c:28:1c:cd:44:f9:95:88:0a:
e3:6a:86:55:8f:86:5a:20:ff:00:45:c6:c3:94:38:26:32:01:
69:53:44:92:a6:33:09:ae:a1:a1:30:9d:d1:3b:5e:32:9f:70:
76:d0:90:59:1a:49:a7:03:ac:32:f0:dd:f0:d8:39:55:98:2e:
a7:f3:6d:71:63:24:b8:bf:1a:74:e3:2d:b3:ca:f7:26:35:eb:
35:9b:e0:0f:35:fd:00:4c:da:d6:ea:69:5a:03:3c:c9:2b:66:
c3:c4:6d:83:1b:4c:e2:0d:68:c2:30:62:d9:a4:0e:ac:e0:68:
60:83:5d:ed:91:e1:4b:8b:80:88:c7:60:93:38:28:b0:44:01:
66:bc:03:7c:19:18:7f:5d:1a:4d:49:bb:05:e8:1c:d7:83:77:
19:7d:33:d2:0d:8f:94:92:bd:84:9f:46:44:ed:df:b6:11:34:
dd:df:4c:be:18:50:a3:c9:55:fa:d5:55:9a:a4:5c:da:23:00:
f6:4d:ed:77:31:45:2d:cd:63:b1:25:ec:4a:8f:63:7b:dd:68:
17:9f:1c:fc:4c:5f:2d:5a:e8:29:53:27:4f:08:f5:4f:19:b9:
9a:fa:39:d9:4c:b7:98:d8:3b:f2:3c:35:41:c4:5d:80:af:e2:
bf:1f:59:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:49 2025 by rpki-client