Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/EejY_SmFfiuYspf8PanlWgYwEHM.roa
File: EejY_SmFfiuYspf8PanlWgYwEHM.roa (raw, json)
Hash identifier: 5tePj6AZWafmTr7OvxJ464cYD4iuNTx7aPYmCqRDu0g=
Subject key identifier: 11:E8:D8:FD:29:85:7E:2B:98:B2:97:FC:3D:A9:E5:5A:06:30:10:73
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 018AB661100C029757FCD2FAB50B740DB457
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/EejY_SmFfiuYspf8PanlWgYwEHM.roa
Signing time: Thu 21 Sep 2023 06:15:28 +0000
ROA not before: Thu 21 Sep 2023 06:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.145.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:61:10:0c:02:97:57:fc:d2:fa:b5:0b:74:0d:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Sep 21 06:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e8d8fd29857e2b98b297fc3da9e55a06301073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:55:0e:49:1d:b1:e8:4f:55:2b:af:f9:56:
97:46:ca:03:4b:3b:6b:86:49:12:bc:18:63:76:00:
a2:5b:b2:09:a3:72:c5:48:e5:48:3f:81:27:5a:a4:
37:1d:93:24:20:21:8f:63:19:c1:61:57:0c:f3:53:
9e:6a:a2:aa:4e:2f:5e:d2:8b:73:97:ab:87:8e:c6:
d2:c9:c0:0d:d3:51:88:98:b4:aa:ae:42:63:7c:32:
65:a5:02:e6:ea:40:d6:30:2e:3b:eb:f5:7c:5e:76:
70:bb:1e:d2:71:a5:29:ad:02:88:57:59:a7:e4:e6:
cb:b5:db:9b:e7:ac:ca:86:8f:6b:69:28:fd:60:b3:
6e:95:0c:f3:61:c8:b6:03:48:0b:d8:48:42:90:a8:
03:0b:e9:15:2c:00:df:33:29:05:55:c2:61:aa:af:
6f:7f:fb:cb:a2:ea:d9:39:d1:69:28:97:2a:d7:02:
e3:e9:b2:2a:94:bf:bd:7b:28:5a:87:e0:84:bd:1f:
e9:b3:25:59:32:f2:5a:d1:11:fb:4d:14:f1:8d:78:
b6:f8:34:b8:06:37:8c:43:c4:20:32:dd:78:4a:f5:
04:65:1a:4d:7a:9e:0a:5f:4f:b6:53:61:c6:bf:4b:
af:9b:9e:76:b8:7a:82:ba:57:b0:ad:dd:2f:d2:70:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:D8:FD:29:85:7E:2B:98:B2:97:FC:3D:A9:E5:5A:06:30:10:73
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/EejY_SmFfiuYspf8PanlWgYwEHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.144.0-45.156.146.255
Signature Algorithm: sha256WithRSAEncryption
29:73:d5:9b:10:50:08:73:c6:20:3e:c3:8d:a8:62:1b:c8:d8:
1d:63:13:41:7a:44:bd:14:cc:13:a2:f9:66:3e:09:b3:8d:6a:
82:e5:12:37:c7:47:c1:c3:5d:46:bc:e8:5d:06:70:2d:71:a0:
72:c6:ee:d3:7b:3a:99:23:93:0f:a5:30:bd:d2:e3:eb:26:58:
97:20:32:08:80:ea:d6:0a:b1:64:78:62:70:d8:05:1a:ed:68:
09:1c:68:c1:ee:57:af:67:46:c6:55:09:18:c8:a9:b3:97:66:
55:aa:42:fa:22:8d:24:d5:2b:8a:e6:73:4c:3d:d6:18:ff:8b:
d4:fb:f5:b3:56:0c:04:bd:15:8d:76:00:b9:e9:fb:40:8c:1a:
f0:f9:df:aa:82:d2:3e:b4:49:2a:57:0c:6d:3b:83:13:60:87:
56:e3:12:bd:d4:f9:7c:5f:a5:fc:8b:84:4c:11:c5:df:85:7b:
4d:2a:7f:89:75:8e:32:b9:2c:c2:2a:80:e0:b0:0f:46:b3:fa:
0c:81:6a:93:eb:8c:08:9f:7c:de:bb:ce:d9:54:ee:af:3f:b9:
f3:75:e8:8c:b0:85:a9:ed:85:09:9a:05:c9:39:6d:ab:72:9c:
37:20:7c:68:4e:26:43:d9:be:4a:d0:b5:e6:bf:d2:3a:8f:81:
7d:92:45:b6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYq2YRAMApdX/NL6tQt0DbRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjMwOTIxMDYxNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWU4ZDhmZDI5ODU3ZTJiOThiMjk3ZmMzZGE5ZTU1YTA2MzAxMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpxVDkkdsehPVSuv+VaXRsoDSztr
hkkSvBhjdgCiW7IJo3LFSOVIP4EnWqQ3HZMkICGPYxnBYVcM81OeaqKqTi9e0otz
l6uHjsbSycAN01GImLSqrkJjfDJlpQLm6kDWMC476/V8XnZwux7ScaUprQKIV1mn
5ObLtdub56zKho9raSj9YLNulQzzYci2A0gL2EhCkKgDC+kVLADfMykFVcJhqq9v
f/vLourZOdFpKJcq1wLj6bIqlL+9eyhah+CEvR/psyVZMvJa0RH7TRTxjXi2+DS4
BjeMQ8QgMt14SvUEZRpNep4KX0+2U2HGv0uvm552uHqCulewrd0v0nCcwQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBHo2P0phX4rmLKX/D2p5VoGMBBzMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvRWVqWV9TbUZmaXVZc3BmOFBhbmxXZ1l3RUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAAju0MAwD
BAQtnJADBAAtnJIwDQYJKoZIhvcNAQELBQADggEBAClz1ZsQUAhzxiA+w42oYhvI
2B1jE0F6RL0UzBOi+WY+CbONaoLlEjfHR8HDXUa86F0GcC1xoHLG7tN7Opkjkw+l
ML3S4+smWJcgMgiA6tYKsWR4YnDYBRrtaAkcaMHuV69nRsZVCRjIqbOXZlWqQvoi
jSTVK4rmc0w91hj/i9T79bNWDAS9FY12ALnp+0CMGvD536qC0j60SSpXDG07gxNg
h1bjEr3U+XxfpfyLhEwRxd+Fe00qf4l1jjK5LMIqgOCwD0az+gyBapPrjAiffN67
ztlU7q8/ufN16IywhanthQmaBck5batynDcgfGhOJkPZvkrQtea/0jqPgX2SRbY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:34 2025 by rpki-client