Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eqGQDaNrB-eKwGbULwwpNIBN5hk.roa
File: eqGQDaNrB-eKwGbULwwpNIBN5hk.roa (raw, json)
Hash identifier: S81XU+y/Wlet6UAWyFd+RDF8iljesG6s8jIJBd05yyw=
Subject key identifier: 7A:A1:90:0D:A3:6B:07:E7:8A:C0:66:D4:2F:0C:29:34:80:4D:E6:19
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42966061
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eqGQDaNrB-eKwGbULwwpNIBN5hk.roa
Signing time: Sat 01 Jan 2022 14:03:32 +0000
ROA not before: Sat 01 Jan 2022 14:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210140
IP address blocks: 193.235.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117151329 (0x42966061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7aa1900da36b07e78ac066d42f0c2934804de619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:7c:2d:65:40:96:b8:19:63:1d:2b:55:b9:
11:24:b0:05:49:8c:4f:35:10:4c:5f:9f:37:26:43:
1c:99:46:53:34:7c:ba:10:3e:a4:93:65:45:96:0d:
58:ea:0b:02:3c:cb:85:51:dc:7e:5f:3e:c2:af:b9:
b0:b5:75:57:b0:d2:9d:62:64:1b:bb:85:4c:12:a4:
3f:d0:3c:1f:5f:0a:6d:31:cb:32:fa:9f:e6:1e:c7:
27:96:df:89:04:bc:ba:dc:2e:ce:d6:f9:be:45:4c:
41:f3:16:7f:a7:23:50:db:3d:5d:ab:af:fb:48:af:
63:ec:86:f9:d9:b9:61:c8:33:66:59:c8:65:7a:0b:
7b:96:72:07:7c:3e:24:bf:e7:15:ac:18:18:fd:75:
2b:84:71:27:e3:1c:a2:8f:22:96:f0:8c:81:0a:44:
ed:69:63:de:84:b1:a7:7c:99:58:9c:62:14:83:30:
a4:a8:6d:31:8e:7d:aa:db:f1:43:3a:11:c5:a3:43:
4c:1e:60:e2:47:54:a9:9d:3b:cc:5f:7b:fe:5a:ed:
a2:da:8c:ca:9f:46:68:68:f3:c8:c4:0b:a2:63:b9:
17:e4:f2:03:ec:06:80:19:ce:d4:3f:63:46:b9:54:
cb:18:bc:1b:61:05:0d:a4:95:95:9f:c2:a1:43:ec:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:90:0D:A3:6B:07:E7:8A:C0:66:D4:2F:0C:29:34:80:4D:E6:19
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eqGQDaNrB-eKwGbULwwpNIBN5hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.160.0/19
Signature Algorithm: sha256WithRSAEncryption
74:4c:9c:e4:62:71:61:97:25:bd:de:eb:f7:c3:88:cc:59:cd:
bc:40:8e:07:b6:58:d5:6d:d3:b7:95:d8:6b:28:46:55:04:4d:
2d:48:22:73:21:41:f7:cd:fd:a7:fb:63:d4:09:86:c5:66:ad:
49:eb:1b:2f:80:7e:87:2a:01:a9:4e:03:13:9d:52:f3:4f:8a:
a9:fc:a7:71:7c:9c:8e:eb:02:d7:02:35:c1:cf:9b:a5:93:d9:
e7:e8:c1:03:41:2e:66:45:bf:88:04:7a:96:05:32:b3:ea:2c:
50:c5:40:df:77:36:f6:b9:14:d2:1c:27:83:0d:c0:0e:b6:01:
ef:9b:94:a3:91:35:0b:61:23:7b:75:89:e9:e5:c7:35:17:6e:
51:ce:1d:49:c1:51:cf:31:99:73:4b:e5:75:0b:81:d0:9f:6b:
6b:49:90:c6:c8:43:6f:71:f3:ab:5d:f1:cc:76:86:5d:8a:93:
2a:cf:02:8a:4a:91:cf:5a:33:86:5b:33:42:8b:95:ad:aa:a3:
53:53:57:20:3b:75:50:d7:05:7b:04:c7:59:02:88:9a:d6:c2:
fb:9a:88:69:75:c5:64:47:12:c5:07:a6:22:04:52:8b:33:f0:
88:52:b1:86:cd:0e:02:24:b2:03:6b:fd:08:f3:0b:cc:ee:1d:
a5:05:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:04 2025 by rpki-client