Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/0cq-bI7SyBKjevqAGCEVW7kOfIY.roa
File: 0cq-bI7SyBKjevqAGCEVW7kOfIY.roa (raw, json)
Hash identifier: 3hASGY+vLijYsMUWqSWGH3IRMYVBmWzNwLAOay7uLHg=
Subject key identifier: D1:CA:BE:6C:8E:D2:C8:12:A3:7A:FA:80:18:21:15:5B:B9:0E:7C:86
Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial: 018570950EB27532FBA4A1E7656902A9F593
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/0cq-bI7SyBKjevqAGCEVW7kOfIY.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 194.180.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0e:b2:75:32:fb:a4:a1:e7:65:69:02:a9:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1cabe6c8ed2c812a37afa801821155bb90e7c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:92:b2:83:e1:5f:35:a0:82:5c:c7:9d:34:3d:
f7:6d:f9:46:41:37:cb:36:c1:c6:5a:b0:4b:10:ef:
54:78:41:dc:50:8b:43:c1:f3:6c:5c:8d:79:1a:a2:
a3:34:0d:46:c8:10:0e:a5:e1:c6:92:13:d8:8e:31:
f0:78:e5:bd:29:a3:14:8c:10:22:18:4c:bc:4e:4a:
39:83:c6:df:71:d8:76:69:c6:10:91:20:83:75:08:
9e:31:49:0e:16:64:c8:91:dd:bf:fb:62:bc:9b:7e:
42:ad:9a:9a:03:2e:5e:51:4d:98:d3:b0:6b:d9:0c:
c7:f3:8c:c5:29:62:47:8e:5a:aa:4b:68:97:bc:32:
e1:9c:88:5a:73:34:24:2f:8c:97:a4:c0:0f:2f:54:
b9:61:c1:54:8a:c6:ac:5c:b0:40:e0:4f:29:81:a1:
9d:c3:88:df:b7:93:a3:64:ed:c6:c7:82:50:2c:42:
b2:5f:16:87:44:38:b0:9e:48:71:55:38:83:54:85:
1a:4e:9e:83:b6:39:89:55:fa:51:8e:8f:ef:b2:ff:
01:a9:d6:e1:03:03:1f:1e:9f:88:ff:1b:3e:9c:23:
70:c8:01:04:c5:d9:5b:52:b6:36:db:7c:f9:ac:52:
03:ce:aa:38:de:87:45:d4:3b:fc:b7:57:44:b1:96:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CA:BE:6C:8E:D2:C8:12:A3:7A:FA:80:18:21:15:5B:B9:0E:7C:86
X509v3 Authority Key Identifier:
keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/0cq-bI7SyBKjevqAGCEVW7kOfIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e4:06:c3:5a:5c:e4:5f:f1:12:7a:d0:89:4c:62:1e:6c:17:
fd:36:6d:fe:2e:21:0c:f7:96:73:6a:f6:93:aa:95:3f:d0:d7:
bb:1e:86:ba:03:2c:f4:cf:55:2f:12:1d:f3:40:32:f8:24:97:
fa:2c:fc:73:5f:1f:90:f9:e5:5d:3a:71:33:3d:cc:1b:76:c5:
21:41:d7:1e:c6:9c:5f:fc:2b:05:57:e3:17:b3:dd:bb:b8:95:
c9:10:32:9c:4c:be:d4:66:c2:04:e0:da:94:18:f4:69:d8:51:
76:26:0e:ee:1e:35:de:09:41:3a:ed:53:4b:00:cb:55:c9:28:
12:b5:ea:1a:80:96:3c:8f:cd:03:81:d8:1a:19:1f:1a:46:26:
2f:e4:2c:25:05:57:df:b2:85:07:76:c9:87:f7:6e:ec:f4:44:
ed:98:0e:2d:2d:e8:44:43:46:a3:b2:ef:9b:70:02:83:d0:4d:
f1:cc:18:13:72:88:c3:f9:9d:c1:09:3c:63:cb:e4:1c:35:d2:
5a:af:aa:48:77:9f:01:a1:3a:61:df:f6:3f:06:69:94:ab:fa:
a7:a9:6c:d7:3d:28:31:86:93:9e:56:a0:1f:fa:fb:67:36:8f:
17:9e:b8:b7:a5:09:c2:3a:c2:fb:5d:3b:6a:94:94:38:4b:3d:
0b:23:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:15:26 2025 by rpki-client