Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ethEM84hR8-ky4yO6ZzXpNRlXlA.roa
File: ethEM84hR8-ky4yO6ZzXpNRlXlA.roa (raw, json)
Hash identifier: lmJkQJR9TXbysb2GSSmzZJzdGBD1ExXLYWO9tqjm/lE=
Subject key identifier: 7A:D8:44:33:CE:21:47:CF:A4:CB:8C:8E:E9:9C:D7:A4:D4:65:5E:50
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAF0B23F77893739D3234E0AA1CD74
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ethEM84hR8-ky4yO6ZzXpNRlXlA.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 45.13.184.0/24 maxlen: 24
84.21.189.0/24 maxlen: 24
84.21.190.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f0:b2:3f:77:89:37:39:d3:23:4e:0a:a1:cd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ad84433ce2147cfa4cb8c8ee99cd7a4d4655e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:cf:a9:86:97:c2:c6:0b:b6:3b:2a:90:e0:
7f:86:80:ff:d3:19:cf:5a:3d:7c:74:7e:11:b5:a4:
f1:08:58:47:db:0a:f8:d6:35:4b:07:55:dd:9c:24:
1c:fe:97:80:0f:4d:0b:1b:50:02:2c:6b:b0:be:91:
46:fd:1c:31:da:04:bd:8d:93:19:8a:e8:22:b4:01:
52:e1:e0:35:4a:d2:69:8c:7f:f8:f5:ca:11:1d:36:
10:51:8c:c5:68:c6:e8:06:26:e1:08:f9:3e:3b:be:
c6:79:1f:54:4c:a0:c3:c0:d2:fe:84:d0:29:60:d7:
0a:8d:93:9d:42:05:eb:03:fc:56:21:f3:f6:09:a4:
70:82:8a:aa:97:7f:1b:f3:e7:45:b5:3d:de:b0:a8:
66:64:60:fc:65:a9:c7:d8:a4:cd:7a:db:be:f8:a3:
64:43:3c:29:51:30:f0:d2:16:af:f6:1f:f2:2d:d4:
1f:07:11:9e:30:70:75:b5:4d:f1:f9:2f:e8:68:d9:
5c:ad:75:7a:93:61:4c:a8:83:a9:cf:25:38:58:69:
ec:22:22:1c:02:c2:1c:20:e7:1b:9a:8a:d6:00:b0:
3c:f7:42:79:5d:40:8c:80:f5:e0:ef:93:aa:00:74:
ba:0b:c0:c5:6c:d9:0b:e5:cf:ad:d5:b5:ca:7e:62:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:44:33:CE:21:47:CF:A4:CB:8C:8E:E9:9C:D7:A4:D4:65:5E:50
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ethEM84hR8-ky4yO6ZzXpNRlXlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.184.0/24
45.128.77.0/24
84.21.189.0-84.21.190.255
185.136.204.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d4:1a:09:37:82:59:2d:1e:9f:c3:a6:52:13:c1:0e:14:28:
9b:04:cb:53:91:b9:ea:c5:44:8a:07:29:8a:63:6b:7e:27:6a:
06:52:13:cb:2e:71:44:0d:bd:6c:9c:60:49:03:14:10:50:b2:
fc:83:6d:7b:e2:0d:5e:9e:b3:37:60:46:57:19:6d:44:64:8c:
d6:c5:c9:b4:91:9c:69:2f:7d:27:51:90:f6:21:2d:07:10:6d:
85:d6:28:d0:17:a9:c8:82:70:e4:cd:52:a2:cf:5e:a6:6f:81:
15:c9:b5:ef:4c:d1:5c:9f:42:cc:ce:05:78:49:75:7d:07:71:
76:fe:10:32:d2:fc:2b:ed:ff:2e:29:ef:37:e7:78:e0:34:b1:
f0:e5:ab:f9:88:d4:2b:63:c2:71:a5:aa:14:a0:cb:66:5c:91:
d6:c3:f7:4a:32:cc:60:7c:5a:bd:61:e5:d1:cc:73:8c:9e:02:
05:f6:42:4f:2e:c7:32:f8:78:3b:d8:32:4c:12:09:6e:d5:c4:
86:cd:c2:2b:04:f4:e3:12:d1:fb:92:54:85:9d:e1:c4:2d:7a:
de:02:71:c8:c5:b7:4e:cd:f6:69:55:b1:8c:d3:30:ed:a9:ed:
a2:6a:6a:f8:3c:5f:29:7d:2f:b0:e3:49:a4:11:34:a3:5e:e8:
7d:bb:6e:df
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVtyvCyP3eJNznTI04Koc10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMTAxMTQ0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWQ4NDQzM2NlMjE0N2NmYTRjYjhjOGVlOTljZDdhNGQ0NjU1ZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7zPqYaXwsYLtjsqkOB/hoD/0xnP
Wj18dH4RtaTxCFhH2wr41jVLB1XdnCQc/peAD00LG1ACLGuwvpFG/Rwx2gS9jZMZ
iugitAFS4eA1StJpjH/49coRHTYQUYzFaMboBibhCPk+O77GeR9UTKDDwNL+hNAp
YNcKjZOdQgXrA/xWIfP2CaRwgoqql38b8+dFtT3esKhmZGD8ZanH2KTNetu++KNk
QzwpUTDw0hav9h/yLdQfBxGeMHB1tU3x+S/oaNlcrXV6k2FMqIOpzyU4WGnsIiIc
AsIcIOcbmorWALA890J5XUCMgPXg75OqAHS6C8DFbNkL5c+t1bXKfmIXUQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFHrYRDPOIUfPpMuMjumc16TUZV5QMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZXRoRU04NGhSOC1reTR5TzZaelhwTlJsWGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALQ24AwQA
LYBNMAwDBABUFb0DBABUFb4DBAC5iMwDBAC51kowDQYJKoZIhvcNAQELBQADggEB
AHPUGgk3glktHp/DplITwQ4UKJsEy1ORuerFRIoHKYpja34nagZSE8sucUQNvWyc
YEkDFBBQsvyDbXviDV6eszdgRlcZbURkjNbFybSRnGkvfSdRkPYhLQcQbYXWKNAX
qciCcOTNUqLPXqZvgRXJte9M0VyfQszOBXhJdX0HcXb+EDLS/Cvt/y4p7zfneOA0
sfDlq/mI1CtjwnGlqhSgy2ZckdbD90oyzGB8Wr1h5dHMc4yeAgX2Qk8uxzL4eDvY
MkwSCW7VxIbNwisE9OMS0fuSVIWd4cQtet4CccjFt07N9mlVsYzTMO2p7aJqavg8
Xyl9L7DjSaQRNKNe6H27bt8=
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:32:06 2025 by rpki-client