Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/EkmLyIGn8Ow8E5viiKEe_mTJqwY.roa
File: EkmLyIGn8Ow8E5viiKEe_mTJqwY.roa (raw, json)
Hash identifier: NU+qd4DmA9f948BkVxRZSXeqROFJRQU3q/ps9TXZlt0=
Subject key identifier: 12:49:8B:C8:81:A7:F0:EC:3C:13:9B:E2:88:A1:1E:FE:64:C9:AB:06
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 047BDCA2
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/EkmLyIGn8Ow8E5viiKEe_mTJqwY.roa
Signing time: Sat 01 Jan 2022 06:01:40 +0000
ROA not before: Sat 01 Jan 2022 06:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210237
IP address blocks: 5.181.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75226274 (0x47bdca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Jan 1 06:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12498bc881a7f0ec3c139be288a11efe64c9ab06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:05:91:8c:c1:6b:4f:d4:c7:8c:b6:3f:95:
39:80:6b:6f:8c:82:5f:49:18:cf:e1:13:2d:2b:d9:
88:93:a8:66:ab:78:f3:e6:2c:5f:7b:8b:76:10:81:
ce:05:00:96:4f:32:ae:64:d5:28:fa:13:57:f8:17:
7e:d9:f9:cf:36:58:c6:4d:eb:f7:50:7e:27:84:16:
67:09:ac:c2:6a:ad:a8:de:be:18:cf:0b:36:b0:7d:
c0:0a:c5:0c:b8:02:1e:ca:3c:eb:e6:1c:5e:5a:df:
09:8e:66:6f:ee:e3:d1:b4:33:50:ab:bb:cd:9d:3b:
9d:f7:35:42:5d:0d:90:88:3d:86:de:3a:93:37:19:
e3:c8:ff:60:b6:06:6e:5c:87:2a:fb:78:1e:4d:0d:
01:59:3d:2e:07:b6:75:ca:6b:e7:60:b8:51:40:f2:
c4:d6:b4:f5:1a:0a:92:e0:e8:4b:d3:bc:64:40:8b:
6d:bc:6e:59:50:58:05:6d:3e:6a:3a:8d:02:08:39:
6b:5b:a4:15:c7:84:f9:33:70:65:da:88:d8:3b:94:
a4:b1:2b:87:d1:84:f0:40:08:73:be:b7:98:29:e5:
b7:04:7e:17:58:4e:7a:1e:3b:19:ef:a6:4f:41:7e:
d9:fd:5c:d1:09:fd:34:3a:44:87:0b:7d:e8:c2:9b:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:8B:C8:81:A7:F0:EC:3C:13:9B:E2:88:A1:1E:FE:64:C9:AB:06
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/EkmLyIGn8Ow8E5viiKEe_mTJqwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.228.0/22
Signature Algorithm: sha256WithRSAEncryption
23:b2:98:6a:c0:43:3e:d9:b8:6f:ef:76:80:7b:46:c3:5f:ac:
c7:a6:37:2b:32:00:29:39:25:20:7e:45:80:fe:69:26:43:e1:
31:27:5b:a1:76:b6:5e:55:a7:f1:b3:c7:c1:05:2c:b5:a9:69:
cf:e5:c8:1b:b0:d3:db:01:50:57:3e:17:7e:92:ec:f2:08:fc:
ea:3f:5c:02:a0:c9:fb:c9:5e:cc:ab:ff:95:cd:65:08:fe:0f:
fe:2a:b7:7e:0e:b3:98:3f:ae:23:6e:01:f5:a5:d7:8a:54:b4:
1c:69:60:63:c4:7c:51:9e:c6:dc:94:1b:fa:c3:05:78:a5:41:
ea:cf:91:17:52:08:93:b0:b2:f6:97:cf:02:f1:e8:db:7e:98:
d2:ca:e2:59:68:28:07:29:1f:5c:c2:64:ad:bb:01:da:30:0d:
1e:5b:98:03:d2:bd:13:e7:8d:b6:d8:f1:83:a1:cc:bf:b0:f1:
9e:79:87:90:4d:55:6c:ba:72:79:17:6f:91:70:a9:94:3f:ff:
b2:13:65:11:81:27:2b:aa:dd:fe:ff:6e:4c:1a:87:52:06:9a:
a0:51:4b:61:ee:7d:cb:c2:3c:51:4f:78:44:48:71:14:8e:08:
8c:24:77:20:85:77:d9:b1:6d:81:30:b7:79:65:89:0e:ad:c7:
86:32:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:29 2025 by rpki-client