Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa
File: EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa (raw, json)
Hash identifier: ZGs965Mg0EIvQgcpkhK/QYQUOJYVteqqCkJ7nuNgaDQ=
Subject key identifier: 10:19:D7:14:7C:73:A5:93:EA:F9:9D:DB:E8:FE:4E:F8:0B:4E:B7:72
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 0185729EF3EDC62894333F16BCB9C05E5D44
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa
Signing time: Mon 02 Jan 2023 13:14:57 +0000
ROA not before: Mon 02 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51519
IP address blocks: 45.132.232.0/22 maxlen: 22
45.132.235.0/24 maxlen: 24
2a0e:73c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:f3:ed:c6:28:94:33:3f:16:bc:b9:c0:5e:5d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Jan 2 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1019d7147c73a593eaf99ddbe8fe4ef80b4eb772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:74:fb:90:2b:11:ca:22:f7:02:63:77:75:
ca:92:07:66:e2:01:89:ba:55:ba:16:ba:20:18:5b:
18:86:56:15:73:5c:86:67:26:84:31:62:f7:7c:d8:
1c:ce:16:7b:28:f9:77:83:cb:35:02:47:9f:8b:af:
be:94:e6:5b:9b:0c:ac:92:ba:20:c9:61:46:f0:d2:
9c:a8:50:76:50:a5:0c:85:bf:7d:24:cb:ca:d7:d1:
e6:35:b6:41:93:23:4a:7d:e5:25:ac:cc:04:83:c1:
ea:4c:2d:df:94:c5:a8:00:46:a1:d2:c2:99:cf:55:
53:7e:8b:8c:bf:1a:4c:c8:35:36:5e:9c:bd:0e:bd:
77:c2:5d:56:11:7c:cb:0e:fe:1b:c9:aa:bb:65:00:
78:c9:be:20:46:df:6c:45:fa:2e:20:84:d0:02:38:
c2:66:59:47:d5:6f:45:30:29:4c:c1:91:4e:0d:5d:
e4:ee:0f:97:9a:db:31:de:7a:76:f8:51:77:0d:9c:
5a:74:1c:49:3a:fe:41:3c:30:9e:35:df:50:3d:52:
83:b7:d5:c1:a2:c7:12:45:bd:8b:27:2e:14:9a:6e:
e6:cf:2d:04:64:49:35:eb:e6:fa:57:d9:c1:74:49:
ad:d4:7f:b0:6d:c5:57:5d:61:b8:2d:70:c6:13:9a:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:D7:14:7C:73:A5:93:EA:F9:9D:DB:E8:FE:4E:F8:0B:4E:B7:72
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.232.0/22
IPv6:
2a0e:73c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:b4:19:70:3f:4f:24:78:21:e8:1c:6b:2e:ed:4f:33:da:a3:
22:4d:85:08:55:e6:81:40:58:21:18:6d:18:e8:41:8c:08:bd:
dc:51:af:a4:66:1f:90:ac:bd:c9:fd:b0:de:4d:53:c7:7c:6c:
2a:6c:c8:cc:5b:66:4f:b6:11:76:18:0e:a2:80:62:27:7f:61:
8d:63:e4:ea:c7:64:93:93:7a:5d:bc:ae:8b:80:2e:30:02:13:
f6:c1:81:d8:59:92:d5:a6:f1:bf:f7:95:4f:c9:6a:33:5b:a8:
8c:07:ec:af:0d:3c:df:ad:26:b2:bd:d7:c3:02:b5:d6:69:3e:
89:ee:74:77:da:7d:e1:c2:b9:74:45:e9:c8:de:bc:ee:86:22:
80:98:4a:9c:16:7a:8e:0c:6c:45:6f:92:84:d3:f2:95:7c:50:
25:15:48:55:4c:17:52:3a:a1:45:32:5e:00:0f:9f:e2:a6:1a:
ca:43:ce:07:ef:6c:21:4c:38:ca:60:fb:38:ef:8a:e9:12:d9:
f4:5c:21:13:bc:aa:d8:d7:f7:87:f3:3c:24:87:41:e2:8f:27:
7d:85:20:28:ff:94:7a:82:e1:d9:01:04:c7:82:12:df:75:3e:
df:83:db:9b:11:d4:f1:1d:9e:d8:7c:f3:97:d4:21:11:d8:0a:
96:7c:28:94
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVynvPtxiiUMz8WvLnAXl1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5
YzE4ZDUwHhcNMjMwMTAyMTMxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDE5ZDcxNDdjNzNhNTkzZWFmOTlkZGJlOGZlNGVmODBiNGViNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDR0+5ArEcoi9wJjd3XKkgdm4gGJ
ulW6FrogGFsYhlYVc1yGZyaEMWL3fNgczhZ7KPl3g8s1Akefi6++lOZbmwyskrog
yWFG8NKcqFB2UKUMhb99JMvK19HmNbZBkyNKfeUlrMwEg8HqTC3flMWoAEah0sKZ
z1VTfouMvxpMyDU2Xpy9Dr13wl1WEXzLDv4byaq7ZQB4yb4gRt9sRfouIITQAjjC
ZllH1W9FMClMwZFODV3k7g+Xmtsx3np2+FF3DZxadBxJOv5BPDCeNd9QPVKDt9XB
oscSRb2LJy4Umm7mzy0EZEk16+b6V9nBdEmt1H+wbcVXXWG4LXDGE5os+wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBAZ1xR8c6WT6vmd2+j+TvgLTrdyMB8GA1UdIwQY
MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt
MzM0MTU5NjdjMjEzLzEvRUJuWEZIeHpwWlBxLVozYjZQNU8tQXRPdDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz
LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYToMA0E
AgACMAcDBQMqDnPAMA0GCSqGSIb3DQEBCwUAA4IBAQA2tBlwP08keCHoHGsu7U8z
2qMiTYUIVeaBQFghGG0Y6EGMCL3cUa+kZh+QrL3J/bDeTVPHfGwqbMjMW2ZPthF2
GA6igGInf2GNY+Tqx2STk3pdvK6LgC4wAhP2wYHYWZLVpvG/95VPyWozW6iMB+yv
DTzfrSayvdfDArXWaT6J7nR32n3hwrl0RenI3rzuhiKAmEqcFnqODGxFb5KE0/KV
fFAlFUhVTBdSOqFFMl4AD5/iphrKQ84H72whTDjKYPs474rpEtn0XCETvKrY1/eH
8zwkh0Hijyd9hSAo/5R6guHZAQTHghLfdT7fg9ubEdTxHZ7YfPOX1CER2AqWfCiU
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:59 2025 by rpki-client