Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/eWeU1Ls2I8x2dOKVumy--WM_OIo.roa
File: eWeU1Ls2I8x2dOKVumy--WM_OIo.roa (raw, json)
Hash identifier: al67EzlLOSFPAz99lGC6nLIhGVTlvD8qeuU7F7hpRH0=
Subject key identifier: 79:67:94:D4:BB:36:23:CC:76:74:E2:95:BA:6C:BE:F9:63:3F:38:8A
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 01856F94BB3AF23B8413C2DF7A4F97CD241B
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/eWeU1Ls2I8x2dOKVumy--WM_OIo.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 81.173.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:bb:3a:f2:3b:84:13:c2:df:7a:4f:97:cd:24:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=796794d4bb3623cc7674e295ba6cbef9633f388a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:02:d1:24:a5:eb:ea:49:e7:c6:69:61:a9:
dd:b4:b5:5f:44:4a:2c:27:df:02:c7:e0:7e:9d:bd:
17:1f:2f:cb:8b:cd:59:97:19:76:ef:dd:d4:ed:63:
84:b7:c7:a8:c5:32:6e:4b:e3:ee:fa:06:3f:b1:f3:
fb:66:47:76:ac:74:36:be:a4:e1:7b:22:f7:c6:58:
20:4e:a3:fa:0c:c2:74:80:75:b9:d7:ec:07:d1:3c:
88:a9:ba:e7:7d:90:97:85:40:90:8e:67:24:3e:59:
17:3d:cc:a4:e7:1c:1a:d3:e0:c1:9b:ee:3e:42:3d:
29:8a:ab:41:bd:59:27:b4:32:43:16:9d:e0:b8:a1:
61:c1:cc:93:af:7c:7f:d9:26:81:7b:8b:21:e6:23:
08:d4:59:0b:93:f9:4a:42:95:12:a2:27:aa:3d:6e:
25:ee:62:9b:39:df:93:c9:7a:d8:56:a4:ac:d3:59:
b1:0e:75:c1:54:ca:60:e8:88:9e:66:9b:bf:36:83:
8f:0f:74:8f:70:26:1e:03:d6:6b:39:a7:4e:ac:5a:
e8:b8:ac:71:16:bf:46:84:cb:67:9a:03:9d:3a:21:
28:d1:84:fe:29:76:51:8f:63:cd:95:33:5c:64:3f:
c7:43:1a:9b:f8:66:9b:03:9e:41:c9:c8:4d:fd:93:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:94:D4:BB:36:23:CC:76:74:E2:95:BA:6C:BE:F9:63:3F:38:8A
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/eWeU1Ls2I8x2dOKVumy--WM_OIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:1f:a0:11:f9:f5:72:0b:75:70:df:fd:5d:de:5a:09:11:d9:
94:78:79:b6:d1:b0:6b:83:b1:3d:9a:8f:47:8c:1e:25:6b:58:
db:6a:4a:82:ac:c4:8b:ca:71:81:3b:fe:e4:5c:be:69:c5:14:
02:45:7e:4b:70:7b:3e:d4:a1:cf:69:e8:1b:23:2b:89:84:d0:
0c:04:a1:ef:a0:04:af:09:f0:71:5b:2b:a6:7e:03:ac:76:23:
9d:a8:42:1c:67:b2:17:a9:61:3e:7a:8e:1a:cc:f1:a7:09:5f:
41:ec:ec:9f:ea:0c:55:e0:9d:a9:e1:c7:61:fd:0d:aa:2e:10:
df:b1:b6:98:14:4d:43:13:28:e5:81:fa:35:77:c7:ef:4a:2f:
16:1c:92:dc:2e:8a:d4:96:3d:fa:e7:cf:57:29:49:88:ba:f2:
ab:f6:8c:c8:c8:b7:08:95:ff:86:28:ce:c9:37:b4:49:8a:dc:
22:83:1a:d8:6d:e2:40:4b:e5:45:c7:21:ed:8b:3e:a7:3b:f1:
4a:b6:27:83:c5:0d:41:b0:eb:05:e4:b5:e7:07:5b:8c:95:37:
b5:bc:08:ca:ed:f9:7e:05:b7:fc:4c:d1:61:26:b1:b4:78:ff:
63:80:97:9e:2f:b7:27:61:f0:2f:58:8a:ef:2e:b7:79:61:16:
b0:21:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:16 2025 by rpki-client