Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/EFrj3B0dWekrlmFpjgqN2CJFAE0.roa
File: EFrj3B0dWekrlmFpjgqN2CJFAE0.roa (raw, json)
Hash identifier: B9eD/pZwxXMXnTm9i1NLJAmrNdTZK84s5XcXd021W18=
Subject key identifier: 10:5A:E3:DC:1D:1D:59:E9:2B:96:61:69:8E:0A:8D:D8:22:45:00:4D
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 01837356A15F177A53A70FB1CE931632F8B0
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/EFrj3B0dWekrlmFpjgqN2CJFAE0.roa
Signing time: Sun 25 Sep 2022 06:30:00 +0000
ROA not before: Sun 25 Sep 2022 06:30:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12897
IP address blocks: 194.147.174.0/23 maxlen: 23
194.147.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:73:56:a1:5f:17:7a:53:a7:0f:b1:ce:93:16:32:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Sep 25 06:30:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=105ae3dc1d1d59e92b9661698e0a8dd82245004d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:27:f5:43:2a:60:07:ae:40:40:de:09:2e:
3b:7d:d2:db:d3:6f:d6:7d:26:1e:d5:3b:ef:c8:ac:
64:8d:b1:f4:5d:f2:26:92:1f:33:0f:72:ba:af:df:
6d:1b:d9:81:d5:a5:84:2f:31:9e:0a:cd:77:46:7b:
04:d9:91:ce:db:6f:62:a1:7f:0f:96:91:05:b0:b2:
2e:5f:5f:cb:bf:06:b1:a0:e8:88:80:bc:16:ac:ef:
96:1b:c6:57:48:e9:ac:c8:48:14:00:ca:47:06:9d:
e8:75:f0:fd:eb:53:0a:bf:43:5d:fe:a8:03:69:50:
5d:4c:4f:f6:a0:97:41:d7:2b:b1:1e:e8:f6:d0:5b:
3e:8b:6a:40:56:51:1d:84:9f:b0:37:7b:33:60:37:
63:6e:c1:7d:5b:63:56:33:9b:8c:d9:a8:a4:7c:98:
73:8c:f4:5d:e4:f3:3a:e9:48:2e:68:6a:8e:8d:40:
df:97:d3:12:fd:6f:4f:4a:6e:55:20:86:c5:c7:09:
17:bc:04:15:bf:36:ec:fd:fa:69:25:11:13:cf:97:
da:1f:b4:12:0f:7d:ea:71:2d:70:a4:73:b0:3a:ac:
01:ca:c4:32:de:59:c9:bb:25:54:37:73:1f:18:95:
86:d5:f2:3c:dd:fd:b4:23:03:d1:58:10:93:84:dd:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5A:E3:DC:1D:1D:59:E9:2B:96:61:69:8E:0A:8D:D8:22:45:00:4D
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/EFrj3B0dWekrlmFpjgqN2CJFAE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.174.0/23
194.147.238.0/23
Signature Algorithm: sha256WithRSAEncryption
37:ef:d7:7d:ee:b9:a6:60:07:40:ee:f5:3a:ec:9c:2a:c6:f8:
b9:cd:50:8f:d0:a0:74:70:08:b3:3d:d4:4a:77:71:53:80:28:
05:de:92:86:5f:34:9f:d8:01:4b:74:45:e4:47:94:d0:e7:a7:
cd:ab:1f:ef:d9:19:b2:d6:23:d0:23:b7:80:ac:f7:61:dc:d4:
b6:8b:18:44:8c:9d:b1:d7:40:c7:db:de:1f:b3:62:f5:23:8c:
3b:65:a3:fb:dd:5b:48:90:2f:9a:d8:03:5f:35:72:28:66:f4:
0f:ee:8f:3f:7a:6e:fb:dd:e4:13:19:96:20:42:4d:1b:92:25:
a9:4a:e8:0c:13:a2:52:f3:54:81:6c:38:fc:25:bd:18:a3:3f:
84:0a:3b:86:b4:9e:c6:27:ed:c1:87:dc:1b:30:d7:f1:16:a4:
74:8a:98:4c:d6:d1:12:65:53:a7:8e:0c:a0:05:6e:05:64:6e:
42:f1:9e:23:ba:e8:9a:2a:48:31:4c:32:08:ff:d7:08:c8:77:
64:64:fa:35:12:b9:90:f2:a6:4a:11:1e:d2:ff:46:ec:23:5d:
92:b2:c1:05:46:6f:75:d1:00:47:fa:c3:d1:d0:de:bb:23:0d:
9e:ac:0c:d2:ac:fc:15:47:e9:0e:70:10:b9:07:6a:c0:ff:ae:
35:93:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:29 2025 by rpki-client