Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/EjkYX9lLzMDLLZmvy2KouHeIzes.roa
File: EjkYX9lLzMDLLZmvy2KouHeIzes.roa (raw, json)
Hash identifier: zkIURYibVaXTxp8wwuwRv1EsVOS8ZPMmw+mPOXyLM3A=
Subject key identifier: 12:39:18:5F:D9:4B:CC:C0:CB:2D:99:AF:CB:62:A8:B8:77:88:CD:EB
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01856F42AD80F9A4106FFA69D410E38F879F
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/EjkYX9lLzMDLLZmvy2KouHeIzes.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31287
IP address blocks: 45.15.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ad:80:f9:a4:10:6f:fa:69:d4:10:e3:8f:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1239185fd94bccc0cb2d99afcb62a8b87788cdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:59:f7:ba:5a:6c:8c:e2:2b:11:87:5c:47:
7c:51:a1:8a:df:3f:09:ab:d2:c6:5d:f4:45:9c:60:
17:ba:4d:61:fd:a4:be:e2:0e:5e:4f:b4:88:8b:7b:
05:2d:69:84:f4:f3:80:a2:a5:73:70:e4:f1:9a:cc:
e7:63:1f:0b:64:1b:ac:cb:1e:7e:5f:35:7f:a8:22:
3e:14:6b:8c:f1:58:53:0b:e0:eb:f7:61:fc:b0:30:
16:ab:06:14:8d:fd:47:27:8c:b5:92:e9:55:dd:6c:
65:13:7b:9c:cb:f0:4a:72:ce:4b:4d:5a:c0:20:e0:
cf:24:42:ee:f5:6c:c7:02:5e:f2:af:18:9c:e5:5b:
be:39:a4:57:cc:6c:1b:40:6c:6e:b8:25:28:ef:45:
cb:58:51:81:a7:29:e1:9a:e7:e2:5c:04:a7:f0:8e:
92:a0:b6:f6:72:d3:9e:65:31:8a:15:24:82:7a:40:
38:92:0d:91:a8:23:2c:e6:56:67:81:8a:fa:d7:38:
2a:a7:ae:66:65:44:fe:93:b3:17:e6:b4:2c:a2:22:
18:b5:ae:91:6e:a4:2c:c2:f9:da:3a:24:cb:72:ff:
c7:08:ac:b7:c9:23:0d:42:09:a2:ca:4d:12:e5:6a:
33:6d:e4:7b:9b:fc:d1:75:89:9d:87:bc:95:eb:ef:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:18:5F:D9:4B:CC:C0:CB:2D:99:AF:CB:62:A8:B8:77:88:CD:EB
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/EjkYX9lLzMDLLZmvy2KouHeIzes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e3:45:1f:44:5e:05:f1:cd:84:ce:b1:7c:35:89:00:64:02:
e8:47:9a:1a:58:78:e5:db:c5:31:5c:7d:dc:ae:57:37:de:ea:
0e:6e:c0:94:34:fb:56:6c:fa:93:a0:5f:e6:ab:be:a3:55:37:
27:6b:71:d7:34:1e:f1:b9:c5:be:a5:cb:cc:a2:f5:25:57:b9:
2f:c7:eb:31:d6:53:27:35:51:27:5c:80:4e:5f:58:ea:d6:9d:
47:93:9d:e6:dc:53:f4:ab:c4:22:43:50:8f:da:24:dc:b9:b4:
f7:c0:11:ae:af:e2:b7:18:85:79:8a:e5:a6:a3:7f:b5:9a:39:
ab:c4:17:50:59:01:32:e4:bc:ae:97:c8:58:85:34:a0:a9:44:
1c:32:a5:46:35:1a:48:0d:85:8b:3b:2f:9b:e0:b5:94:b2:97:
bf:f9:e4:df:ed:87:de:de:1a:8c:7c:8e:d3:ef:23:cd:ad:4d:
a8:d6:c5:92:51:0a:e6:0a:1c:db:ec:10:0b:e5:0f:c3:10:6c:
49:5a:77:bd:9b:d9:b2:3c:a9:46:74:ba:16:5e:42:1b:da:9d:
0a:2c:e4:df:16:e3:9e:3c:e7:1f:4b:85:96:a7:ad:a0:18:5a:
40:23:a2:c2:a1:80:f2:a5:be:38:0f:fa:eb:64:0f:2b:b6:ae:
d7:e4:96:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQq2A+aQQb/pp1BDjj4efMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjMwMTAxMjEzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjM5MTg1ZmQ5NGJjY2MwY2IyZDk5YWZjYjYyYThiODc3ODhjZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3JZ97pabIziKxGHXEd8UaGK3z8J
q9LGXfRFnGAXuk1h/aS+4g5eT7SIi3sFLWmE9POAoqVzcOTxmsznYx8LZBusyx5+
XzV/qCI+FGuM8VhTC+Dr92H8sDAWqwYUjf1HJ4y1kulV3WxlE3ucy/BKcs5LTVrA
IODPJELu9WzHAl7yrxic5Vu+OaRXzGwbQGxuuCUo70XLWFGBpynhmufiXASn8I6S
oLb2ctOeZTGKFSSCekA4kg2RqCMs5lZngYr61zgqp65mZUT+k7MX5rQsoiIYta6R
bqQswvnaOiTLcv/HCKy3ySMNQgmiyk0S5WozbeR7m/zRdYmdh7yV6+9qzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBI5GF/ZS8zAyy2Zr8tiqLh3iM3rMB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvRWprWVg5bEx6TURMTFptdnkyS291SGVJemVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+3MA0G
CSqGSIb3DQEBCwUAA4IBAQCg40UfRF4F8c2EzrF8NYkAZALoR5oaWHjl28UxXH3c
rlc33uoObsCUNPtWbPqToF/mq76jVTcna3HXNB7xucW+pcvMovUlV7kvx+sx1lMn
NVEnXIBOX1jq1p1Hk53m3FP0q8QiQ1CP2iTcubT3wBGur+K3GIV5iuWmo3+1mjmr
xBdQWQEy5Lyul8hYhTSgqUQcMqVGNRpIDYWLOy+b4LWUspe/+eTf7Yfe3hqMfI7T
7yPNrU2o1sWSUQrmChzb7BAL5Q/DEGxJWne9m9myPKlGdLoWXkIb2p0KLOTfFuOe
POcfS4WWp62gGFpAI6LCoYDypb44D/rrZA8rtq7X5JYn
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:39 2025 by rpki-client