Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/eiwpJdgNhxX6jVvxKlYCSnJCfWU.roa
File: eiwpJdgNhxX6jVvxKlYCSnJCfWU.roa (raw, json)
Hash identifier: JMNLrUBOURigSI3pwBCCILFXwrSMXUwUkyVLbw/gyKg=
Subject key identifier: 7A:2C:29:25:D8:0D:87:15:FA:8D:5B:F1:2A:56:02:4A:72:42:7D:65
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 018ADF66A215B2BF8DBDE7501E6DE2AC8AEA
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/eiwpJdgNhxX6jVvxKlYCSnJCfWU.roa
Signing time: Fri 29 Sep 2023 05:25:59 +0000
ROA not before: Fri 29 Sep 2023 05:25:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57822
IP address blocks: 185.54.246.0/24 maxlen: 24
185.54.245.0/24 maxlen: 24
185.54.247.0/24 maxlen: 24
94.247.104.0/24 maxlen: 24
94.247.109.0/24 maxlen: 24
94.247.108.0/24 maxlen: 24
94.247.107.0/24 maxlen: 24
94.247.106.0/24 maxlen: 24
2a02:47a0:4::/48 maxlen: 48
2a02:47a0:203::/48 maxlen: 48
2a02:47a0:3::/48 maxlen: 48
2a02:47a0:201::/48 maxlen: 48
2a02:47a0:202::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:66:a2:15:b2:bf:8d:bd:e7:50:1e:6d:e2:ac:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Sep 29 05:25:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a2c2925d80d8715fa8d5bf12a56024a72427d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:f8:f8:e0:82:07:b3:0b:4b:c5:a8:c8:bd:
70:d9:bd:5e:f6:04:0e:7c:41:7a:f3:2e:42:f5:e6:
32:eb:86:38:da:3b:82:7c:67:b2:1b:da:a0:bb:93:
d4:18:e4:3e:33:d5:28:b1:7f:eb:62:79:4e:e8:f1:
11:8a:c9:54:08:d5:a5:b0:1f:c4:3b:68:f6:c9:c1:
4a:36:f2:02:c0:8e:24:ec:f2:20:38:35:1a:90:c0:
23:0f:06:f5:d2:f7:35:86:88:d1:09:93:1b:8b:05:
90:54:05:73:4c:11:4d:63:d2:21:20:de:49:16:39:
70:19:74:c1:ba:f7:f7:7b:9d:55:b4:ca:3a:80:4c:
e2:33:15:55:b8:bc:94:e5:3c:15:92:b7:09:dc:82:
e8:8c:ff:1c:e6:d0:50:4e:8f:f0:a9:c3:07:9e:f1:
7b:12:aa:75:62:60:ad:24:29:fb:7f:c2:7d:b6:1f:
f2:cf:7a:f7:0c:da:ac:e6:a9:36:a2:1e:0a:ee:ec:
bd:4c:27:0d:6e:18:8d:fb:82:33:53:4d:b7:13:5d:
d8:5a:1f:fb:fb:b2:fb:e0:27:3f:d3:74:10:6c:86:
3e:79:ff:fd:f8:92:be:8f:79:bc:ca:9d:c7:4d:cd:
ce:46:db:84:1a:3a:38:70:95:4d:8e:74:07:41:b1:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:29:25:D8:0D:87:15:FA:8D:5B:F1:2A:56:02:4A:72:42:7D:65
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/eiwpJdgNhxX6jVvxKlYCSnJCfWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.104.0/24
94.247.106.0-94.247.109.255
185.54.245.0-185.54.247.255
IPv6:
2a02:47a0:3::-2a02:47a0:4:ffff:ffff:ffff:ffff:ffff
2a02:47a0:201::-2a02:47a0:203:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:88:c4:55:09:a1:05:cc:e9:d6:c0:60:7d:87:52:34:bf:8d:
6d:70:2c:91:e2:df:c7:1e:d2:0e:01:21:6a:8a:c8:9e:a4:25:
36:d9:be:92:c6:e3:e7:73:af:78:81:b6:a8:e3:66:a7:42:ea:
a6:07:21:24:e7:6e:a1:96:1b:c3:de:87:3b:77:8d:16:06:92:
8d:60:a4:71:ff:18:e0:89:4b:97:51:9e:6e:04:7d:0c:a9:2f:
99:77:ea:a9:cd:c5:ca:de:57:b1:60:25:46:fd:fa:1e:08:45:
04:75:ed:11:31:b5:5b:93:93:b7:4c:ab:bd:9c:0b:00:89:aa:
dc:19:b8:3d:ff:25:5b:6c:e3:ea:aa:4f:e6:b0:05:1b:7e:9a:
51:de:fe:99:b9:b4:65:4f:d4:d5:68:da:f4:4f:1f:5e:40:4d:
67:58:08:fe:c3:cf:aa:27:c4:f4:fe:0f:d7:62:5e:2b:0e:3e:
02:40:20:a6:68:9d:46:7a:47:8f:a5:7e:63:ba:9a:9e:fc:07:
13:d2:df:30:d8:35:72:d7:f2:54:7b:59:ed:4a:dc:54:96:fa:
e8:db:9e:5d:17:b4:32:7b:6a:16:b2:03:13:79:f1:e7:ff:7b:
68:bb:62:6f:d3:73:ad:1a:2d:3d:e6:bd:36:da:6d:59:ff:c4:
f9:7b:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:44:23 2025 by rpki-client