Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/eyL6oQULeQXefXS-C8h8IUh3Aws.roa
File: eyL6oQULeQXefXS-C8h8IUh3Aws.roa (raw, json)
Hash identifier: WjW8bAGVDR7KYkxOZlnejrHrBhNcNB0j+itAWqtnVwk=
Subject key identifier: 7B:22:FA:A1:05:0B:79:05:DE:7D:74:BE:0B:C8:7C:21:48:77:03:0B
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 03E042C5
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/eyL6oQULeQXefXS-C8h8IUh3Aws.roa
Signing time: Sat 01 Jan 2022 04:56:46 +0000
ROA not before: Sat 01 Jan 2022 04:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54994
IP address blocks: 151.236.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65028805 (0x3e042c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 1 04:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b22faa1050b7905de7d74be0bc87c214877030b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:2b:01:b2:91:d1:ae:1f:bf:60:e6:38:9c:
ea:e5:c6:97:a9:2b:19:84:c2:56:c2:44:77:1d:c1:
6b:cd:58:0a:a0:4c:59:d2:c6:31:29:40:11:cf:e9:
ca:57:aa:66:79:94:58:3c:a0:5c:be:ea:89:18:a4:
7f:39:3e:fb:12:06:67:d3:77:0f:79:df:36:89:8a:
06:d8:f2:55:a2:50:93:b8:d2:3c:40:55:c3:ae:92:
ec:42:76:7f:5d:77:0e:ed:16:7b:ec:76:18:8d:f6:
f4:53:b5:82:90:dd:c8:ad:d8:48:b1:c6:f5:3e:74:
06:41:4b:a1:b8:64:c3:2f:e6:a7:2a:46:ac:52:ac:
ed:5d:5c:4d:01:a8:5f:e3:e8:45:9b:4b:7a:87:3e:
9a:5e:4a:ee:e2:b2:4f:d3:3a:7e:21:2c:69:87:20:
5b:79:47:25:25:5e:b1:03:99:eb:93:fc:25:19:38:
12:ea:2b:31:99:81:3a:55:fd:a5:f4:5e:2c:77:7f:
08:41:6f:0c:e2:36:77:3e:a0:40:75:c9:fc:e3:2a:
56:83:4e:d4:82:41:e6:1d:e2:db:f6:63:02:11:43:
cb:83:83:28:e2:13:3c:5f:ec:28:31:7f:9b:8b:f5:
c9:02:44:af:98:36:f6:4f:d1:f1:69:84:c9:5a:38:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:22:FA:A1:05:0B:79:05:DE:7D:74:BE:0B:C8:7C:21:48:77:03:0B
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/eyL6oQULeQXefXS-C8h8IUh3Aws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:15:67:f0:ce:16:17:e4:91:23:7f:b4:05:fb:0d:27:6b:d8:
38:9f:8c:3e:20:38:ee:89:80:ed:9b:5b:46:72:14:3d:2e:76:
1b:9f:bd:87:c1:23:e2:4b:80:ef:3a:1b:93:b0:a7:d3:f0:b1:
ca:11:5b:6a:6e:5f:60:1b:a8:aa:c3:8d:19:d3:98:15:02:91:
52:93:43:b7:d6:9b:0a:6d:07:13:fd:25:90:1b:82:9b:f0:18:
d2:95:3d:20:a6:61:cf:7f:e3:18:6c:ac:0a:0b:c3:8d:29:50:
9b:17:7b:2f:04:f6:6d:5e:6d:24:2f:a6:f4:a5:a0:6d:4c:18:
5a:4a:9c:77:f9:c1:44:c4:5c:cc:a2:7f:2a:a6:94:0f:09:20:
d3:5e:cd:fb:81:c9:a8:36:02:05:a6:63:03:6e:e8:fd:62:ae:
9b:d5:b4:5e:f7:da:2f:fb:67:08:ef:60:b5:03:24:01:f2:d8:
34:28:d5:59:a6:13:57:4d:6d:d3:a8:fa:d2:01:60:55:7d:4a:
68:5f:b9:ca:09:fb:83:82:33:35:6b:7a:a0:bc:6a:fd:7c:c7:
6e:bf:ee:52:1f:69:d7:9e:b7:55:5b:5a:4f:a1:c8:63:99:54:
a2:3f:94:9a:fa:cd:6e:b0:fb:4f:84:a1:b3:41:d8:e3:24:3e:
05:39:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:35 2025 by rpki-client