Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/E-GlYzCxKbkSlrCA2l9Xyp3i7p8.roa
File: E-GlYzCxKbkSlrCA2l9Xyp3i7p8.roa (raw, json)
Hash identifier: yZXkMRwLtL55Sn00Qy4Gha5oDEAlM4d/7YCeLU3jjP8=
Subject key identifier: 13:E1:A5:63:30:B1:29:B9:12:96:B0:80:DA:5F:57:CA:9D:E2:EE:9F
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 01857082BF7C4458416AB64CFD85744577BB
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/E-GlYzCxKbkSlrCA2l9Xyp3i7p8.roa
Signing time: Mon 02 Jan 2023 03:24:54 +0000
ROA not before: Mon 02 Jan 2023 03:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47568
IP address blocks: 94.100.36.0/23 maxlen: 23
94.100.32.0/23 maxlen: 23
185.122.24.0/23 maxlen: 23
185.122.27.0/24 maxlen: 24
185.122.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:bf:7c:44:58:41:6a:b6:4c:fd:85:74:45:77:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Jan 2 03:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13e1a56330b129b91296b080da5f57ca9de2ee9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:35:2c:eb:65:10:b6:87:6d:91:2e:f2:46:
08:ec:b1:82:5c:dd:4a:12:1f:bd:67:8d:50:f5:27:
f5:48:71:c7:e9:4a:7e:1d:cd:05:57:c9:3b:a2:c6:
7a:ee:20:27:6f:92:c2:75:2e:09:31:24:8a:af:8e:
a6:e4:85:c0:5d:21:0e:6d:af:15:75:b1:3e:8d:8a:
c9:90:9a:87:b9:82:f0:2d:0d:f9:ed:98:66:ef:01:
9f:7a:f7:64:e7:9d:37:9e:21:62:bc:d6:3a:31:2e:
24:77:3c:8d:b2:5f:7c:2c:bc:7a:a6:cc:94:a2:6f:
b4:37:16:bb:03:6a:4c:3a:a2:9d:c2:46:45:10:8e:
1a:c2:da:8d:3e:3e:6d:98:03:3b:14:0c:a9:5f:17:
f0:38:ea:2d:7e:57:80:0c:56:0c:3e:5e:44:c4:07:
cb:5d:8b:a8:87:31:58:0c:c3:d4:0e:ae:2f:d0:47:
d5:ee:0e:a9:e8:a0:31:ec:7d:c3:a5:17:ed:b8:54:
f9:37:f0:d5:9b:5a:5c:76:f7:c0:43:02:fa:e3:ce:
96:03:48:28:28:1c:de:24:b1:85:21:3f:1f:b0:59:
8b:ba:0a:a0:40:18:e2:81:1b:59:e5:ec:f0:fb:54:
c9:d9:ed:00:23:58:b6:84:44:26:d7:d4:c5:b5:c8:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E1:A5:63:30:B1:29:B9:12:96:B0:80:DA:5F:57:CA:9D:E2:EE:9F
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/E-GlYzCxKbkSlrCA2l9Xyp3i7p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.32.0/23
94.100.36.0/23
185.122.24.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f7:bc:d5:d1:f3:19:31:f5:00:c9:30:0c:08:60:ce:55:4c:
38:0f:1c:32:dd:67:a6:a0:86:67:b2:34:24:b5:77:ea:6d:70:
54:ef:fa:07:3b:96:af:5a:e0:dc:c6:1e:da:97:90:f7:4f:3a:
f4:63:8a:28:88:cf:d7:54:89:bb:17:42:66:75:92:20:77:0c:
c9:a7:ed:fa:cf:5b:24:95:e0:32:41:1f:64:2d:f9:bc:dd:65:
8d:2a:b1:94:cb:94:11:0d:7c:60:53:d7:eb:d0:fb:99:5f:72:
08:24:fc:70:85:1d:1d:c3:53:48:be:13:09:80:39:0f:26:76:
9b:76:b6:c6:bc:22:a9:5d:9b:bb:00:2e:3f:12:e4:5a:65:94:
6f:29:46:e7:e9:bb:01:d7:93:e2:8f:f2:71:e2:18:eb:24:b0:
2f:a7:db:45:ed:98:25:b6:b7:3d:cd:06:a4:59:2c:05:35:fc:
5d:40:42:34:b2:b9:66:fc:e3:0f:35:2d:92:9e:13:bf:e8:24:
bf:7a:bb:c3:2d:74:b5:ea:2c:36:7c:de:35:60:98:d1:b6:dc:
c3:26:67:6d:57:57:d5:0f:1f:9a:74:5e:53:0b:eb:78:74:bc:
c4:cc:3b:ca:d3:e2:fb:3a:04:29:ff:5f:49:fa:5d:44:46:ae:
8b:48:bc:c5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwgr98RFhBarZM/YV0RXe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDJhMTM3MTVmYzU1NzhjZGMwNWFhYWE2OGM2YTQxM2Nk
YmM5ZjUwHhcNMjMwMTAyMDMyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2UxYTU2MzMwYjEyOWI5MTI5NmIwODBkYTVmNTdjYTlkZTJlZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXc1LOtlELaHbZEu8kYI7LGCXN1K
Eh+9Z41Q9Sf1SHHH6Up+Hc0FV8k7osZ67iAnb5LCdS4JMSSKr46m5IXAXSEOba8V
dbE+jYrJkJqHuYLwLQ357Zhm7wGfevdk5503niFivNY6MS4kdzyNsl98LLx6psyU
om+0Nxa7A2pMOqKdwkZFEI4awtqNPj5tmAM7FAypXxfwOOotfleADFYMPl5ExAfL
XYuohzFYDMPUDq4v0EfV7g6p6KAx7H3DpRftuFT5N/DVm1pcdvfAQwL6486WA0go
KBzeJLGFIT8fsFmLugqgQBjigRtZ5ezw+1TJ2e0AI1i2hEQm19TFtcilqQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBPhpWMwsSm5EpawgNpfV8qd4u6fMB8GA1UdIwQY
MBaAFHJCoTcV/FV4zcBaqqaMakE828n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tLaE54WDhWWGpOd0ZxcXBveHFRVHpieWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85MGFhMWUtMDA5OC00ZmRhLTk4Mjkt
YTE1Y2NmNWI0MTNlLzEvRS1HbFl6Q3hLYmtTbHJDQTJsOVh5cDNpN3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85MGFhMWUtMDA5OC00ZmRhLTk4MjktYTE1Y2NmNWI0MTNl
LzEvY2tLaE54WDhWWGpOd0ZxcXBveHFRVHpieWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXmQgAwQB
XmQkAwQCuXoYMA0GCSqGSIb3DQEBCwUAA4IBAQAT97zV0fMZMfUAyTAMCGDOVUw4
Dxwy3WemoIZnsjQktXfqbXBU7/oHO5avWuDcxh7al5D3Tzr0Y4ooiM/XVIm7F0Jm
dZIgdwzJp+36z1skleAyQR9kLfm83WWNKrGUy5QRDXxgU9fr0PuZX3IIJPxwhR0d
w1NIvhMJgDkPJnabdrbGvCKpXZu7AC4/EuRaZZRvKUbn6bsB15Pij/Jx4hjrJLAv
p9tF7Zgltrc9zQakWSwFNfxdQEI0srlm/OMPNS2SnhO/6CS/ervDLXS16iw2fN41
YJjRttzDJmdtV1fVDx+adF5TC+t4dLzEzDvK0+L7OgQp/19J+l1ERq6LSLzF
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:12:20 2025 by rpki-client