Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/E5xTW1aq0rohx2Io3BKLaLez5xc.roa
File: E5xTW1aq0rohx2Io3BKLaLez5xc.roa (raw, json)
Hash identifier: hEXWSADLXF2NHL183nffpHqD/qzZSriqozWo8ZnuNWQ=
Subject key identifier: 13:9C:53:5B:56:AA:D2:BA:21:C7:62:28:DC:12:8B:68:B7:B3:E7:17
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 01885338B8120C125C7D3A17DD7E72002586
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/E5xTW1aq0rohx2Io3BKLaLez5xc.roa
Signing time: Thu 25 May 2023 14:03:25 +0000
ROA not before: Thu 25 May 2023 14:03:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 92.119.245.0/24 maxlen: 24
92.119.244.0/24 maxlen: 24
92.119.246.0/24 maxlen: 24
92.119.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:38:b8:12:0c:12:5c:7d:3a:17:dd:7e:72:00:25:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: May 25 14:03:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=139c535b56aad2ba21c76228dc128b68b7b3e717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:a5:41:23:41:97:b5:d8:b9:b9:64:a0:42:
ed:72:d5:14:5d:dc:15:8d:f5:69:42:0d:36:88:86:
66:eb:25:b0:92:ac:d5:3f:9a:12:85:4c:d2:03:91:
32:53:5c:42:87:1f:7b:e0:db:2e:dc:59:a5:6e:16:
1c:f1:5d:99:c7:ba:19:8a:5f:87:ac:62:f2:f5:61:
26:79:97:14:c9:10:6d:9a:0c:3b:80:e9:79:c9:7b:
e5:2b:ce:15:dc:31:ed:fa:0c:70:46:c4:2f:68:55:
16:48:3e:47:30:54:ad:8f:24:61:91:50:f5:07:b3:
dc:8c:ab:c9:91:01:29:4f:7b:d8:01:d1:bb:b5:b3:
ae:3f:f7:1c:5e:e9:a5:9a:9f:cd:16:b9:6e:5b:06:
e3:12:9f:85:fb:bd:cd:0c:2b:74:6b:6f:56:e7:e8:
7f:9f:59:a7:f6:b9:06:fd:fd:7f:1d:06:6c:78:d1:
61:41:cb:75:39:5d:e3:78:30:a6:b2:0f:f3:c0:01:
3b:9a:1f:55:09:8a:09:8b:81:95:7a:77:bd:6e:b8:
5e:44:2d:23:04:65:7e:57:36:12:92:01:bb:a5:22:
67:fb:32:d2:32:12:11:8a:c4:fd:30:75:9e:a4:ba:
48:b0:8e:6e:b8:ee:03:ca:be:bc:9d:60:25:01:5e:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:53:5B:56:AA:D2:BA:21:C7:62:28:DC:12:8B:68:B7:B3:E7:17
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/E5xTW1aq0rohx2Io3BKLaLez5xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.244.0/22
Signature Algorithm: sha256WithRSAEncryption
36:14:94:4f:5c:4f:a4:ef:af:1e:ad:4b:7e:3c:57:be:9b:fe:
06:c7:08:b9:51:52:82:f4:3c:b9:76:26:a1:36:a2:56:3b:29:
1d:1b:4e:9e:17:fc:f9:de:4e:04:9a:98:82:cc:69:2f:dc:b8:
57:17:29:5c:96:fc:72:2a:38:f3:8b:6c:f1:0e:a5:78:1d:05:
ca:ee:a5:23:21:ca:3b:d5:14:42:7b:b3:59:48:35:75:41:9e:
06:a4:e1:af:39:14:c5:e9:9f:9f:81:f7:7d:5b:56:7a:50:43:
72:34:0d:3e:44:db:91:dc:6e:4a:04:fa:bc:41:7d:7d:a6:63:
34:db:50:a4:15:fb:01:16:c8:82:79:39:de:c5:fd:f2:d2:61:
c0:6f:ce:aa:2c:e7:ee:cb:a5:bc:83:fd:5c:34:1e:a9:d4:da:
a0:41:8c:26:54:64:90:c0:59:0f:55:3a:c6:be:d7:bc:9a:a6:
f4:f0:8e:ba:9f:97:e6:dc:46:b1:47:5a:65:b7:27:1b:9e:6c:
d2:ee:9d:10:f4:a1:70:c7:65:7c:92:8a:1f:ca:98:65:6a:9c:
00:33:25:f8:08:9e:57:c1:8b:5f:e4:48:fc:ff:52:22:a6:9c:
b2:91:09:ec:44:82:07:58:d8:a7:b3:63:29:2c:2b:14:ab:89:
63:be:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:58 2025 by rpki-client