Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/EIEk0ONqnzyvL0BXZ9ZyxFt78kk.roa
File: EIEk0ONqnzyvL0BXZ9ZyxFt78kk.roa (raw, json)
Hash identifier: t3Ev+WGv91CbjwCnBWtT/xkP6KQr6DLVc5LkYVjbG5w=
Subject key identifier: 10:81:24:D0:E3:6A:9F:3C:AF:2F:40:57:67:D6:72:C4:5B:7B:F2:49
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 0185735601F4E26C6302ED85A6DE52FA905E
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/EIEk0ONqnzyvL0BXZ9ZyxFt78kk.roa
Signing time: Mon 02 Jan 2023 16:34:54 +0000
ROA not before: Mon 02 Jan 2023 16:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48072
IP address blocks: 45.90.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:01:f4:e2:6c:63:02:ed:85:a6:de:52:fa:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jan 2 16:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=108124d0e36a9f3caf2f405767d672c45b7bf249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:62:1f:d4:db:74:f7:c4:11:cb:03:62:91:
49:d5:e2:8b:64:52:08:45:99:27:15:ff:05:96:9e:
4a:b6:c1:a3:e8:56:4b:1b:4d:2a:fb:f9:89:63:bb:
4e:dd:f9:4c:b0:99:26:f2:dd:a6:eb:4e:99:d7:de:
d9:2f:20:3c:b2:1c:74:c2:6e:b6:ca:69:f0:eb:2a:
36:37:75:b4:19:ac:de:95:95:51:4a:eb:52:57:38:
4c:01:97:4d:92:68:9a:5a:be:6e:e7:d9:a7:61:24:
81:fd:74:d4:c6:f8:a3:9a:e7:03:7d:4c:b5:ae:ce:
07:1f:2c:86:bd:02:c3:10:90:6e:96:a3:fb:55:31:
4e:13:80:f6:4b:af:4c:13:1e:bc:db:22:e4:67:b8:
49:9f:b2:06:53:fd:11:07:b2:9d:7b:b6:38:19:22:
a0:be:a1:32:d9:77:5e:01:9e:fd:aa:fe:ab:99:19:
bc:9a:31:41:e3:c5:ea:bc:2e:fd:c8:d6:45:24:9f:
82:3b:82:bf:aa:90:5b:43:b6:40:12:e3:94:c3:56:
d7:a5:ed:ae:94:6f:c8:26:a1:8a:b7:7c:24:b1:d3:
84:b3:b0:80:a7:85:93:30:70:97:0c:0a:f0:67:30:
6e:ce:14:91:26:b4:bb:13:ca:c4:b2:1f:f9:90:9d:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:24:D0:E3:6A:9F:3C:AF:2F:40:57:67:D6:72:C4:5B:7B:F2:49
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/EIEk0ONqnzyvL0BXZ9ZyxFt78kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.194.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:9a:76:28:9b:42:cc:8e:ff:ee:97:b3:12:13:31:36:c9:f0:
06:8e:ef:ed:3c:0a:7c:42:06:e4:14:f4:de:5f:fe:97:72:be:
c1:a9:87:9c:cb:3e:20:00:28:d1:45:e6:e3:e4:f8:6e:e3:83:
9d:1c:ad:18:c3:6c:76:fc:a0:5e:86:79:56:de:28:c9:d3:a7:
83:ce:e7:99:cc:76:b3:d6:83:60:30:a3:c6:ff:1b:9f:5d:a0:
c4:91:24:c6:c1:63:0c:17:47:3d:ff:78:e0:0b:a1:3e:2e:a0:
b3:a9:f4:a6:59:31:1e:ec:55:fe:7f:e3:aa:f0:7e:54:7f:c4:
93:8a:53:76:2f:69:41:28:2b:e0:fe:df:1f:02:5a:ce:03:c0:
2f:22:8b:4a:17:92:ee:1d:01:dd:60:43:cd:33:41:30:22:56:
3c:14:bd:a7:64:94:71:4c:67:ab:f9:67:89:3b:b4:93:b4:57:
cb:29:59:86:3f:36:d6:36:53:fe:8b:75:d5:9b:5d:fd:05:36:
d3:e2:e7:bd:44:fc:5f:9a:6c:35:21:c2:bf:7f:cd:4a:35:48:
ea:68:cb:64:1e:65:da:39:ad:5d:57:dd:58:ff:c7:a6:e4:13:
e7:ef:38:50:93:5d:33:08:62:15:94:b8:05:b4:bb:df:84:7b:
20:c5:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:15 2025 by rpki-client