Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/EkEGAK5Iv9biTKv2yeZSsKalOK8.roa
File: EkEGAK5Iv9biTKv2yeZSsKalOK8.roa (raw, json)
Hash identifier: nfA+En3FPGd/ZpTh+G6FP1IPpmh1Uhn7twoeEpS1SQk=
Subject key identifier: 12:41:06:00:AE:48:BF:D6:E2:4C:AB:F6:C9:E6:52:B0:A6:A5:38:AF
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 08238AFB
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/EkEGAK5Iv9biTKv2yeZSsKalOK8.roa
Signing time: Sat 01 Jan 2022 05:54:58 +0000
ROA not before: Sat 01 Jan 2022 05:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43513
IP address blocks: 80.246.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136547067 (0x8238afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 05:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12410600ae48bfd6e24cabf6c9e652b0a6a538af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:c4:6c:09:ef:b0:33:0a:17:32:e9:41:d9:
0c:64:54:52:3c:93:04:3a:35:ce:ae:e9:90:d0:c3:
07:10:e2:fd:06:00:2d:7c:05:43:33:9b:10:62:70:
45:ea:17:20:67:b9:a7:1a:a9:26:0d:2e:5e:a1:a1:
e9:f5:dc:d8:d3:b3:f5:3f:ee:55:43:d7:c8:0c:2b:
c9:c2:fd:a1:14:2a:7e:9b:82:58:46:a9:38:b1:4b:
7a:0b:f8:52:a9:12:e0:03:3f:83:c8:3f:87:96:61:
c1:c4:eb:c8:72:66:d0:5d:f0:55:ab:85:3b:8c:42:
ab:86:d2:10:20:43:c0:a3:bc:81:dc:75:b3:b6:5d:
b2:65:92:ae:3c:44:99:62:8a:ca:ef:d2:4f:a9:aa:
9d:44:29:9f:a4:ea:47:3e:06:a4:31:bf:94:75:fd:
be:0d:e2:73:d1:73:22:f8:2f:7f:0d:73:92:cf:a0:
3e:3d:e4:f1:e4:93:82:e5:e3:45:40:05:26:07:8c:
a8:77:05:6a:8a:3c:b8:9e:3c:ab:cd:df:47:fd:c8:
84:b1:3f:3b:97:23:90:bb:ac:cb:86:8d:a6:91:eb:
73:09:d8:f2:25:97:e5:7e:28:f5:91:9c:d8:58:6a:
81:38:8e:9b:9e:86:22:af:51:30:ff:1f:49:8a:a5:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:41:06:00:AE:48:BF:D6:E2:4C:AB:F6:C9:E6:52:B0:A6:A5:38:AF
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/EkEGAK5Iv9biTKv2yeZSsKalOK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5d:29:ab:5b:5b:a2:9d:27:cb:b0:3a:6a:b1:a4:e8:6f:ae:
be:4d:68:d6:83:28:39:6e:e1:ba:98:6b:39:82:b2:61:97:76:
d0:9d:d6:a3:90:82:84:65:89:b9:64:56:25:85:db:5c:6b:c1:
4b:45:9f:bf:d1:24:a4:d2:39:0f:69:2d:1a:c9:10:23:f0:39:
09:bf:1b:53:b8:d0:24:67:dd:83:36:4a:91:e0:b5:05:48:00:
d0:ba:5d:b5:b8:ce:af:45:4c:9e:c7:84:74:57:74:3b:cd:08:
4a:70:c2:b6:4b:29:ee:a4:1b:5c:31:bb:7c:c6:73:36:b7:9e:
e4:cc:80:a6:78:41:1b:5b:d8:9f:c4:5f:71:b5:85:5d:18:ba:
bc:bc:9a:85:e7:9c:5a:4c:82:96:ec:74:3a:cd:e4:86:13:1a:
0e:97:e0:4e:a1:1e:20:68:93:41:f1:9a:46:de:c7:3f:ca:2e:
2c:fb:ac:4f:b9:1c:02:fb:e6:88:f6:48:54:06:ed:97:e9:1f:
b3:4d:4c:6e:ff:4e:47:d4:56:f8:ac:e5:cf:34:15:7d:e6:c8:
60:34:49:8e:0c:7a:90:d3:ff:e1:b3:ed:7a:2a:49:f3:95:75:
e8:0e:9e:86:1a:76:ef:bf:72:e4:2c:dd:a5:5f:25:ea:fa:fb:
01:0c:7f:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECCOK+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjIyMDhiNDdiNmE4NjRkOWQxZmYzM2UwNmFhODFkMTM4MTlhNzRlMB4XDTIyMDEw
MTA1NTQ1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI0MTA2MDBhZTQ4
YmZkNmUyNGNhYmY2YzllNjUyYjBhNmE1MzhhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPLxGwJ77AzChcy6UHZDGRUUjyTBDo1zq7pkNDDBxDi/QYA
LXwFQzObEGJwReoXIGe5pxqpJg0uXqGh6fXc2NOz9T/uVUPXyAwrycL9oRQqfpuC
WEapOLFLegv4UqkS4AM/g8g/h5ZhwcTryHJm0F3wVauFO4xCq4bSECBDwKO8gdx1
s7ZdsmWSrjxEmWKKyu/ST6mqnUQpn6TqRz4GpDG/lHX9vg3ic9FzIvgvfw1zks+g
Pj3k8eSTguXjRUAFJgeMqHcFaoo8uJ48q83fR/3IhLE/O5cjkLusy4aNppHrcwnY
8iWX5X4o9ZGc2FhqgTiOm56GIq9RMP8fSYqlKb8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQSQQYArki/1uJMq/bJ5lKwpqU4rzAfBgNVHSMEGDAWgBSSIgi0e2qGTZ0f
8z4GqoHROBmnTjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tpSUl0SHRxaGsyZEhfTS1CcXFCMFRnWnAwNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjUvNjk5MGU5LWMzYzAtNDc4YS05OTk3LTk1YjA4ZTM2NjBjZi8x
L0VrRUdBSzVJdjliaVRLdjJ5ZVpTc0thbE9LOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUv
Njk5MGU5LWMzYzAtNDc4YS05OTk3LTk1YjA4ZTM2NjBjZi8xL2tpSUl0SHRxaGsy
ZEhfTS1CcXFCMFRnWnAwNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFD2HzANBgkqhkiG9w0BAQsFAAOC
AQEAL10pq1tbop0ny7A6arGk6G+uvk1o1oMoOW7huphrOYKyYZd20J3Wo5CChGWJ
uWRWJYXbXGvBS0Wfv9EkpNI5D2ktGskQI/A5Cb8bU7jQJGfdgzZKkeC1BUgA0Lpd
tbjOr0VMnseEdFd0O80ISnDCtksp7qQbXDG7fMZzNree5MyApnhBG1vYn8RfcbWF
XRi6vLyaheecWkyClux0Os3khhMaDpfgTqEeIGiTQfGaRt7HP8ouLPusT7kcAvvm
iPZIVAbtl+kfs01Mbv9OR9RW+KzlzzQVfebIYDRJjgx6kNP/4bPteipJ85V16A6e
hhp2779y5CzdpV8l6vr7AQx/0g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:35 2025 by rpki-client