Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/eaIDFM6m9opz7qsDpPLO1vF4ZKk.roa
File: eaIDFM6m9opz7qsDpPLO1vF4ZKk.roa (raw, json)
Hash identifier: C6I0oT4tyylqxsQagiXf3xuRtC7iZFwIl2GIN4Y8QFg=
Subject key identifier: 79:A2:03:14:CE:A6:F6:8A:73:EE:AB:03:A4:F2:CE:D6:F1:78:64:A9
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 0186FF4D18058BC9AF321C1ED45D7F781ABD
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/eaIDFM6m9opz7qsDpPLO1vF4ZKk.roa
Signing time: Mon 20 Mar 2023 13:54:47 +0000
ROA not before: Mon 20 Mar 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 193.31.7.0/24 maxlen: 24
85.193.79.0/24 maxlen: 24
83.229.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:4d:18:05:8b:c9:af:32:1c:1e:d4:5d:7f:78:1a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Mar 20 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79a20314cea6f68a73eeab03a4f2ced6f17864a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:0d:50:23:7b:23:e5:b5:1c:9a:25:05:0b:
de:c1:d1:05:bb:1e:86:c0:cf:2e:33:4b:45:41:0e:
60:f0:78:7d:18:aa:4d:69:3f:d2:fc:b7:16:cc:a5:
bd:c5:b6:68:ce:aa:91:8e:31:c4:76:cc:8b:17:53:
a6:ac:e9:42:a1:d4:22:f1:70:a3:57:24:2a:cf:1e:
9a:6e:31:50:29:91:0d:9c:e5:d9:1f:21:0b:7b:76:
dc:29:06:36:13:1e:18:e7:4d:2a:38:2a:07:95:5d:
8d:d5:8e:24:d3:8c:98:38:83:c3:2d:4a:6d:bb:82:
57:da:2c:cf:e8:2a:bb:04:4d:28:43:66:a3:f0:51:
f3:83:77:aa:4d:06:f8:a9:15:a0:af:46:5c:a3:bb:
fc:1f:65:00:b5:10:a0:04:0e:f3:77:ba:34:42:a1:
fa:d9:86:5c:17:85:bb:ad:6a:94:9d:f1:7f:01:83:
47:76:b6:b6:da:e8:a8:90:82:eb:2d:65:6d:f0:ef:
49:dd:ee:ba:de:d2:80:ff:c4:92:f4:5e:d3:e8:e2:
a7:a1:67:c8:23:e0:9d:45:05:14:e6:a9:9a:f3:d7:
72:b5:f6:04:46:85:b9:62:9a:c0:25:41:e2:3d:01:
6e:7c:14:0a:ad:8f:a1:ee:9c:2e:a2:2b:46:ee:66:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A2:03:14:CE:A6:F6:8A:73:EE:AB:03:A4:F2:CE:D6:F1:78:64:A9
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/eaIDFM6m9opz7qsDpPLO1vF4ZKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.62.0/24
85.193.79.0/24
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:34:3c:6d:4c:b9:02:46:ed:12:23:15:1d:27:7a:44:8c:16:
46:ba:71:51:6d:a3:f1:a1:55:2e:4e:1e:9b:37:b7:d8:eb:89:
48:59:2c:27:db:53:c4:bd:8e:cf:91:14:cd:9e:63:d8:a8:e4:
8f:e2:41:77:3c:4f:66:ec:fe:7b:77:cc:9f:c6:29:0a:f9:05:
88:8b:60:f4:8d:91:46:52:6d:26:83:ff:85:77:52:be:a9:b2:
c2:0d:a2:32:8f:02:ed:f9:9c:6b:3c:e5:70:09:86:c9:9e:e7:
c5:f9:05:c1:c1:c8:57:13:e2:2c:bd:8e:71:46:5c:bf:9b:f2:
96:97:7e:4b:4c:39:47:4d:d1:0d:7e:c8:a1:ec:bb:44:bf:dc:
54:b7:d8:30:31:25:cf:01:12:32:ce:81:8b:4e:bb:19:69:0d:
5f:b2:8b:2e:2e:b8:07:c0:42:c8:d6:dc:c2:2a:2a:0a:d7:f1:
15:e7:78:45:af:24:a0:88:76:6a:84:ee:c8:92:78:c5:1b:f3:
1c:6c:36:08:0b:be:ff:f0:ed:82:89:c1:9a:af:6a:73:02:ff:
53:06:a1:a5:55:ad:e5:42:bf:ab:7f:74:d7:10:25:ba:7c:7f:
76:90:87:5e:f5:ec:49:9c:8d:a7:89:65:5b:5b:16:ef:22:b3:
80:34:d7:d9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYb/TRgFi8mvMhwe1F1/eBq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjMwMzIwMTM1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWEyMDMxNGNlYTZmNjhhNzNlZWFiMDNhNGYyY2VkNmYxNzg2NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQNUCN7I+W1HJolBQvewdEFux6G
wM8uM0tFQQ5g8Hh9GKpNaT/S/LcWzKW9xbZozqqRjjHEdsyLF1OmrOlCodQi8XCj
VyQqzx6abjFQKZENnOXZHyELe3bcKQY2Ex4Y500qOCoHlV2N1Y4k04yYOIPDLUpt
u4JX2izP6Cq7BE0oQ2aj8FHzg3eqTQb4qRWgr0Zco7v8H2UAtRCgBA7zd7o0QqH6
2YZcF4W7rWqUnfF/AYNHdra22uiokILrLWVt8O9J3e663tKA/8SS9F7T6OKnoWfI
I+CdRQUU5qma89dytfYERoW5YprAJUHiPQFufBQKrY+h7pwuoitG7mZlIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHmiAxTOpvaKc+6rA6TyztbxeGSpMB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvZWFJREZNNm05b3B6N3FzRHBQTE8xdkY0WktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU+U+AwQA
VcFPAwQAwR8HMA0GCSqGSIb3DQEBCwUAA4IBAQBtNDxtTLkCRu0SIxUdJ3pEjBZG
unFRbaPxoVUuTh6bN7fY64lIWSwn21PEvY7PkRTNnmPYqOSP4kF3PE9m7P57d8yf
xikK+QWIi2D0jZFGUm0mg/+Fd1K+qbLCDaIyjwLt+ZxrPOVwCYbJnufF+QXBwchX
E+IsvY5xRly/m/KWl35LTDlHTdENfsih7LtEv9xUt9gwMSXPARIyzoGLTrsZaQ1f
sosuLrgHwELI1tzCKioK1/EV53hFrySgiHZqhO7IknjFG/McbDYIC77/8O2CicGa
r2pzAv9TBqGlVa3lQr+rf3TXECW6fH92kIde9exJnI2niWVbWxbvIrOANNfZ
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:01 2025 by rpki-client