Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/EWzR8RtmT_MJ_acW7LQyDJ4ojW4.roa
File: EWzR8RtmT_MJ_acW7LQyDJ4ojW4.roa (raw, json)
Hash identifier: 2KwKea027muE7TsMnRfRcNjOGm4MZN+B6HKnSNurtO8=
Subject key identifier: 11:6C:D1:F1:1B:66:4F:F3:09:FD:A7:16:EC:B4:32:0C:9E:28:8D:6E
Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial: 018480188F1590765CF6E87BE2F9C5C562F5
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/EWzR8RtmT_MJ_acW7LQyDJ4ojW4.roa
Signing time: Wed 16 Nov 2022 11:00:03 +0000
ROA not before: Wed 16 Nov 2022 11:00:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 194.146.187.0/24 maxlen: 24
194.146.184.0/24 maxlen: 24
194.146.185.0/24 maxlen: 24
194.146.186.0/24 maxlen: 24
2001:67c:2af4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:18:8f:15:90:76:5c:f6:e8:7b:e2:f9:c5:c5:62:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Validity
Not Before: Nov 16 11:00:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=116cd1f11b664ff309fda716ecb4320c9e288d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:49:dc:c0:3d:f1:64:77:25:cb:8f:78:f9:
0c:73:75:59:2a:fc:e6:49:d2:0b:0f:05:cf:de:34:
e2:c5:7d:f8:b4:19:e5:fc:0c:2b:57:de:78:99:65:
ff:cb:dd:fc:a5:7b:f8:30:d8:58:75:d8:9c:d6:41:
7e:2b:80:3f:46:24:77:4a:26:15:1c:80:25:6b:24:
de:f3:7f:b6:93:11:ff:9a:ec:00:76:44:81:03:d7:
53:23:c7:4b:12:a8:2d:71:1d:84:7f:3b:5b:da:56:
0f:77:17:39:a0:10:26:69:ec:29:67:4f:5b:0a:38:
91:61:0d:11:55:26:e0:e6:e8:73:2a:89:b7:ed:5a:
e7:ad:6f:a5:2d:e0:05:a1:c9:2d:0e:6d:a2:c0:7d:
3b:a6:3d:da:68:90:21:83:d6:94:86:4e:f3:ff:d6:
9a:91:86:67:a8:85:45:9c:cd:c1:84:65:fb:e6:66:
bb:90:48:64:0b:b1:71:cb:3a:60:11:ef:03:02:50:
64:cc:68:0b:e3:8a:48:76:f5:1c:c6:3f:1b:f4:d2:
92:64:60:90:53:97:af:74:bd:dd:fe:e2:52:a4:05:
84:82:0d:5c:2e:ca:6c:c6:af:cb:6d:78:2f:3c:53:
a5:6e:e1:11:b0:00:0e:dd:a1:2b:16:5e:a3:4b:a6:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:D1:F1:1B:66:4F:F3:09:FD:A7:16:EC:B4:32:0C:9E:28:8D:6E
X509v3 Authority Key Identifier:
keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/EWzR8RtmT_MJ_acW7LQyDJ4ojW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.184.0/22
IPv6:
2001:67c:2af4::/48
Signature Algorithm: sha256WithRSAEncryption
dc:8d:ba:78:99:95:dd:4d:bc:11:de:e6:8d:94:6c:6e:c2:62:
fc:30:58:90:bb:5f:99:c4:61:54:63:1b:a2:df:d7:81:11:1a:
9a:a3:e9:d7:81:04:21:a5:1f:1c:6b:64:fe:f4:6f:c5:a2:ef:
a5:a7:3b:7c:2e:e5:bf:ed:77:24:52:f5:9e:db:83:04:ee:71:
bd:96:8b:40:24:ba:b9:62:b0:87:4d:d8:03:a8:9c:99:17:99:
33:04:7c:7e:d2:8b:e7:9e:f9:af:52:68:c5:e2:f9:18:e7:50:
ac:00:6e:7e:37:98:ed:d2:ec:e2:7a:73:36:02:9f:a9:3a:77:
ad:f6:57:e8:51:a3:d7:b1:fe:9f:2b:cc:4e:f5:41:c3:60:b4:
c3:e4:6d:e2:33:e8:7a:8f:95:eb:13:ee:4e:01:9d:b7:79:89:
1f:61:7d:a5:57:c8:ba:38:53:6a:16:13:90:45:08:c8:20:92:
f1:17:1e:ce:1e:b7:8d:5e:ca:e2:9b:37:4d:83:4f:ad:e4:a4:
95:ed:13:3d:f8:b1:15:ab:ac:e6:0d:bc:c2:a0:e7:74:c1:90:
c8:89:86:14:a3:3d:88:49:8b:87:93:a8:d4:15:f4:b1:b5:3b:
dc:2c:7a:0e:2d:75:c0:0f:21:1a:bb:e1:e1:b5:57:03:e8:c7:
19:0d:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:38:54 2025 by rpki-client