Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/eQDRn_Yw4mcaxMCVkZAcnx4LZMU.roa
File: eQDRn_Yw4mcaxMCVkZAcnx4LZMU.roa (raw, json)
Hash identifier: t7PX9RZ1IJDYaorR//uco/+ddvHkYXRixeY+Nd47lFw=
Subject key identifier: 79:00:D1:9F:F6:30:E2:67:1A:C4:C0:95:91:90:1C:9F:1E:0B:64:C5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0187E69FE8E13FF01F7A57FF5BCF2EA31B67
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/eQDRn_Yw4mcaxMCVkZAcnx4LZMU.roa
Signing time: Thu 04 May 2023 11:57:32 +0000
ROA not before: Thu 04 May 2023 11:57:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 188.209.125.0/24 maxlen: 24
188.209.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:9f:e8:e1:3f:f0:1f:7a:57:ff:5b:cf:2e:a3:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 4 11:57:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7900d19ff630e2671ac4c09591901c9f1e0b64c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:a9:fc:46:94:ed:a5:5d:29:b0:87:39:9a:
d6:bc:26:1c:bf:01:f4:f9:44:ce:39:fb:37:55:03:
ba:22:37:19:f2:0d:a8:83:7f:38:77:cf:6b:b8:61:
ac:a7:85:59:b0:df:8f:b3:ac:e1:21:66:2d:90:98:
43:2f:cf:80:ec:8b:fa:c8:5f:da:c5:fe:24:88:cc:
05:9a:a0:25:62:b2:2f:de:29:8f:f2:4b:4d:7f:e3:
61:c8:c8:45:8c:a4:ae:cf:bf:ef:af:94:54:d8:9f:
a0:af:79:b4:d3:66:80:ae:77:db:41:da:8b:be:7e:
77:b0:d8:ac:0f:1c:06:21:89:82:86:37:86:aa:4a:
e0:4d:ee:d5:07:1f:83:b9:2c:0e:55:17:87:99:e8:
e1:c8:fb:47:33:9c:41:9e:82:ae:54:1f:a2:94:b1:
a5:46:23:6c:7c:c5:8a:25:79:7e:af:4f:d0:38:ac:
e7:48:3c:62:77:a4:97:ce:1d:c6:6e:92:c6:53:b7:
4a:45:1e:26:4c:f6:96:d3:14:83:33:aa:48:94:fe:
ae:d9:ef:0c:2f:be:ad:1e:8e:8b:57:4b:e7:b8:6d:
d9:15:f5:11:18:2f:b5:43:28:7a:b3:ea:fa:85:9c:
7f:fe:8b:c2:cb:13:69:d8:20:36:f9:fe:e2:87:7f:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:D1:9F:F6:30:E2:67:1A:C4:C0:95:91:90:1C:9F:1E:0B:64:C5
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/eQDRn_Yw4mcaxMCVkZAcnx4LZMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.124.0/23
Signature Algorithm: sha256WithRSAEncryption
89:72:75:7e:10:fe:5e:f5:f6:de:c1:5d:1f:44:6a:8c:f2:c0:
a0:2a:df:ee:a6:ae:cc:6e:88:ba:36:60:47:aa:2b:ea:dd:90:
bd:0b:99:4f:fe:28:b8:09:eb:59:a1:45:ee:fa:db:6b:75:77:
83:f6:3f:9f:63:d3:75:6a:db:57:70:ff:d7:62:12:f5:99:1d:
7f:c8:dd:34:6c:15:b9:af:9e:e9:23:bb:e8:2f:9f:5a:39:bb:
17:7f:d5:0f:54:46:b3:95:64:e0:3e:4b:12:7e:bb:53:eb:15:
d1:a6:df:fe:06:b1:8f:c3:4f:f0:18:63:c1:53:ef:3f:72:c8:
67:bb:03:ae:15:69:5f:8b:55:b6:58:20:01:0c:f0:86:0d:66:
3d:0b:e7:f5:34:9d:6f:bd:14:34:b0:21:c8:13:f8:21:7f:10:
99:cf:cb:60:1e:b9:76:d5:5c:8a:13:f9:88:10:34:5a:e5:1d:
83:4f:d5:9d:c6:45:45:01:f4:59:f0:c3:32:1d:30:00:14:6b:
e1:3f:9a:4f:b7:da:03:30:ee:a3:16:b5:7c:ef:81:2a:4d:51:
a2:63:6d:77:f1:5d:0d:9c:e2:fc:c3:ed:b4:35:a6:a3:75:f1:
f8:68:a3:e5:a2:6b:03:7b:3a:3b:96:bc:8d:d0:92:a4:ed:cd:
3e:9c:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:18:44 2025 by rpki-client