Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eEJreBNBJEd80avWyrl8fqyqXZU.roa
File: eEJreBNBJEd80avWyrl8fqyqXZU.roa (raw, json)
Hash identifier: 7lfUuQW+d4424mMMSfA3yK59nhZOGaTrZKlWEV0pFSU=
Subject key identifier: 78:42:6B:78:13:41:24:47:7C:D1:AB:D6:CA:B9:7C:7E:AC:AA:5D:95
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0185A1087731EA6230F526F86CAA1D162D60
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eEJreBNBJEd80avWyrl8fqyqXZU.roa
Signing time: Wed 11 Jan 2023 13:32:44 +0000
ROA not before: Wed 11 Jan 2023 13:32:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8473
IP address blocks: 193.181.65.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:08:77:31:ea:62:30:f5:26:f8:6c:aa:1d:16:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 11 13:32:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78426b78134124477cd1abd6cab97c7eacaa5d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:21:df:db:63:42:28:1c:fa:f9:9d:72:b2:
12:da:62:b7:1f:d8:8e:d8:50:82:90:29:bb:3f:b6:
70:bd:e8:d1:62:aa:75:11:0f:d1:ae:f3:b9:e8:ee:
9b:6f:ae:74:9d:54:79:50:8d:c6:1e:51:7c:c4:44:
75:be:88:38:c0:61:71:38:70:56:14:dd:3b:64:80:
3c:fe:78:1a:01:9c:95:d0:bd:d7:09:1b:b7:b0:6f:
57:6a:7e:d8:0a:42:68:dd:97:69:ab:17:e1:92:e9:
a5:5e:3e:f4:56:dc:9c:24:39:fc:89:bb:0b:c7:41:
4c:d6:98:2a:14:d7:72:09:e7:6e:a9:31:0f:6d:1a:
9c:81:2a:b0:26:3c:79:05:a8:83:44:d2:be:39:aa:
ab:74:13:87:d3:61:ec:17:d4:b7:ce:15:39:f5:ca:
b2:1a:f6:b5:0d:fb:2c:b9:0b:b3:90:05:23:67:a3:
d7:55:a2:3c:ae:54:06:55:d1:46:47:a4:59:56:44:
6b:e6:8b:34:7a:c6:13:75:9f:da:a9:71:8a:c5:f2:
17:d9:00:2c:54:fc:05:23:6b:c5:93:7b:19:7c:a8:
d1:a0:54:c4:36:7a:aa:83:eb:64:fa:eb:d0:6c:ae:
22:0e:81:db:c6:99:1c:eb:f7:a6:95:37:0f:e3:ca:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:6B:78:13:41:24:47:7C:D1:AB:D6:CA:B9:7C:7E:AC:AA:5D:95
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eEJreBNBJEd80avWyrl8fqyqXZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.65.0/24
194.71.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b5:46:a5:e4:6e:10:6c:c8:ed:f7:d9:9c:f2:27:9e:77:a9:
58:9a:49:9d:59:1e:f2:bf:41:17:35:1b:b4:c5:36:4f:a7:5d:
12:2c:af:b2:af:8b:7a:a7:42:1c:62:cf:29:0b:b6:58:ff:2e:
2c:86:bf:39:6c:87:31:d9:f9:11:98:dd:29:b0:0f:d0:d0:be:
de:98:42:df:07:04:46:b4:b0:2e:f3:5b:f6:e5:2d:ce:b9:78:
b2:34:4e:e4:1d:86:84:2f:a6:22:46:28:de:8b:4b:0f:88:e9:
6e:51:7f:a1:c7:98:77:72:25:9b:75:65:f1:1f:60:6a:46:df:
d1:fe:8e:8c:17:71:53:9d:3c:3d:97:a9:97:25:ce:cd:e3:41:
73:2a:62:53:ef:c7:8e:a5:b1:3b:1f:2f:f1:af:8f:49:4e:6f:
dc:72:5c:fc:15:de:a4:2b:a0:82:c5:f2:f5:28:85:3f:b8:36:
00:96:9f:de:2e:3a:c3:5d:e8:7e:64:cc:c4:91:11:ba:92:86:
7d:ee:31:ed:e4:92:47:21:bd:be:bb:16:6d:83:48:fa:f3:49:
7c:f8:a3:7e:2f:0a:20:29:c3:a7:22:fb:f7:11:3d:15:7c:69:
2e:69:28:07:a4:01:91:96:85:fd:29:be:c2:36:ac:e3:0d:07:
1d:1c:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:19 2025 by rpki-client