Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/EhofFeFDr5IXr4pF8lMS_IHaaiI.roa
File: EhofFeFDr5IXr4pF8lMS_IHaaiI.roa (raw, json)
Hash identifier: tWVQ2yLQN55Fe2JK9bTuDy17c71drExz8ZvN5gIAeNI=
Subject key identifier: 12:1A:1F:15:E1:43:AF:92:17:AF:8A:45:F2:53:12:FC:81:DA:6A:22
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 018A9322F70F3884798AB258E434B119A875
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/EhofFeFDr5IXr4pF8lMS_IHaaiI.roa
Signing time: Thu 14 Sep 2023 10:00:56 +0000
ROA not before: Thu 14 Sep 2023 10:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58039
IP address blocks: 193.135.15.0/24 maxlen: 24
193.135.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:22:f7:0f:38:84:79:8a:b2:58:e4:34:b1:19:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Sep 14 10:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=121a1f15e143af9217af8a45f25312fc81da6a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:72:3c:ad:cc:10:78:2a:1b:03:a9:70:4f:
1f:a5:ec:2c:3f:b3:dd:09:63:b6:47:63:67:b7:94:
69:df:2e:47:6e:a1:98:b9:84:c2:7f:c9:04:17:96:
a7:bf:ae:14:f9:1b:47:a1:5e:e4:f0:b9:91:79:af:
c2:2b:d7:47:b3:ab:66:d8:e6:2f:ce:23:c9:f6:0f:
5a:6a:13:4d:5c:15:83:df:71:fa:f0:f5:7d:9b:5c:
42:33:1d:cc:36:67:89:7e:89:2c:27:ec:86:55:e3:
f8:1c:da:27:f4:74:13:d9:49:ca:5d:54:cd:ff:72:
74:a9:fa:4b:1b:9e:f5:1f:fc:b9:a5:90:b9:49:e6:
0a:99:ed:ea:d5:f5:bd:1a:6e:46:65:79:c9:eb:5b:
eb:72:5a:5c:d2:8b:0e:1f:23:32:be:21:d2:0a:1d:
8f:e2:61:60:82:76:6e:e0:80:16:72:7f:93:b6:1c:
59:34:38:63:3f:5a:1b:b8:ed:c5:d4:b0:23:bf:0b:
2e:48:f8:16:31:40:a3:cf:4d:2a:61:ed:12:39:4f:
bb:86:eb:3c:46:b7:6d:c1:ec:7b:a8:a9:eb:e6:fb:
6f:e7:8c:42:7a:4f:9c:8a:5b:b0:bc:f5:c0:89:74:
63:fa:d2:06:05:18:76:27:06:ec:8b:11:82:b7:35:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1A:1F:15:E1:43:AF:92:17:AF:8A:45:F2:53:12:FC:81:DA:6A:22
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/EhofFeFDr5IXr4pF8lMS_IHaaiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.15.0/24
193.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a1:20:5e:12:f0:a3:26:86:b4:5f:c2:0b:46:c2:a3:05:92:
cc:2c:ed:11:ac:8b:02:e0:9c:1f:b8:05:e3:01:9b:3f:42:e2:
57:4a:b2:11:bb:22:ca:11:65:0b:1d:47:d6:10:a9:8d:68:5d:
87:92:8b:46:66:70:e1:52:dd:2f:b9:4c:88:21:2c:77:2a:2e:
c6:04:47:df:e1:a1:ea:75:92:fe:c8:ce:cb:0a:03:c1:2e:7e:
9e:12:23:8c:98:68:61:39:3e:fb:e0:3f:1b:96:25:a0:5d:5c:
22:98:5c:3f:46:82:cf:7b:5c:bc:cf:ec:e1:89:81:74:25:6c:
a9:ff:13:3a:19:f6:07:ab:a5:ee:a5:ea:10:c7:28:37:9c:56:
bb:0b:cb:0c:fd:df:7f:94:0e:63:ec:75:b7:0e:89:bd:0d:dc:
f9:90:95:dc:d1:49:cd:f4:d0:26:52:0f:02:5f:e1:51:3d:c2:
2e:a1:c4:0d:e9:8e:24:70:5a:0b:6a:9c:42:6e:49:19:66:d1:
53:02:0d:9a:db:7b:93:58:3c:54:16:3a:96:a3:03:8e:82:c9:
c4:0f:73:3f:15:d1:a6:a6:29:8e:97:91:c1:3b:fb:49:5b:e1:
8d:ed:0c:9d:ce:28:bd:b1:b2:19:aa:e7:2c:07:97:a0:ea:c1:
55:e0:52:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqTIvcPOIR5irJY5DSxGah1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjMwOTE0MTAwMDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjFhMWYxNWUxNDNhZjkyMTdhZjhhNDVmMjUzMTJmYzgxZGE2YTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshZyPK3MEHgqGwOpcE8fpewsP7Pd
CWO2R2Nnt5Rp3y5HbqGYuYTCf8kEF5anv64U+RtHoV7k8LmRea/CK9dHs6tm2OYv
ziPJ9g9aahNNXBWD33H68PV9m1xCMx3MNmeJfoksJ+yGVeP4HNon9HQT2UnKXVTN
/3J0qfpLG571H/y5pZC5SeYKme3q1fW9Gm5GZXnJ61vrclpc0osOHyMyviHSCh2P
4mFggnZu4IAWcn+TthxZNDhjP1obuO3F1LAjvwsuSPgWMUCjz00qYe0SOU+7hus8
Rrdtwex7qKnr5vtv54xCek+ciluwvPXAiXRj+tIGBRh2JwbsixGCtzWZWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBIaHxXhQ6+SF6+KRfJTEvyB2moiMB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvRWhvZkZlRkRyNUlYcjRwRjhsTVNfSUhhYWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwYcPAwQA
wYcYMA0GCSqGSIb3DQEBCwUAA4IBAQAjoSBeEvCjJoa0X8ILRsKjBZLMLO0RrIsC
4JwfuAXjAZs/QuJXSrIRuyLKEWULHUfWEKmNaF2HkotGZnDhUt0vuUyIISx3Ki7G
BEff4aHqdZL+yM7LCgPBLn6eEiOMmGhhOT774D8bliWgXVwimFw/RoLPe1y8z+zh
iYF0JWyp/xM6GfYHq6XupeoQxyg3nFa7C8sM/d9/lA5j7HW3Dom9Ddz5kJXc0UnN
9NAmUg8CX+FRPcIuocQN6Y4kcFoLapxCbkkZZtFTAg2a23uTWDxUFjqWowOOgsnE
D3M/FdGmpimOl5HBO/tJW+GN7Qydzii9sbIZqucsB5eg6sFV4FKx
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:12 2025 by rpki-client