Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/jE2Xw2EoycTvFS5JZ-X4bkeOWCg.roa
File: jE2Xw2EoycTvFS5JZ-X4bkeOWCg.roa (raw, json)
Hash identifier: oeKe4RuBPT++ocp/PtuQegin29Qr1ooya1P11QNo3Hg=
Subject key identifier: 8C:4D:97:C3:61:28:C9:C4:EF:15:2E:49:67:E5:F8:6E:47:8E:58:28
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 018571D7AAECE70EE88E531FCCD158B31DDE
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/jE2Xw2EoycTvFS5JZ-X4bkeOWCg.roa
Signing time: Mon 02 Jan 2023 09:37:17 +0000
ROA not before: Mon 02 Jan 2023 09:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29122
IP address blocks: 82.101.64.0/18 maxlen: 18
217.30.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:aa:ec:e7:0e:e8:8e:53:1f:cc:d1:58:b3:1d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jan 2 09:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c4d97c36128c9c4ef152e4967e5f86e478e5828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:ff:52:43:8e:b9:d7:16:bd:b2:50:9c:36:
4b:0e:16:41:f3:7e:e9:a7:60:88:32:2c:fc:9b:0d:
d6:0f:f6:4e:7d:9c:cf:e2:43:b8:e0:96:ea:55:1c:
81:67:fa:77:c8:2d:bd:c6:83:09:ea:88:df:7d:7a:
27:79:70:19:17:13:4a:f7:6d:5e:64:31:f7:22:d5:
cd:b4:0a:90:de:bb:2f:b9:22:4b:3a:c6:8e:62:a1:
fd:40:e0:56:7f:63:6e:d3:23:af:ec:5b:6a:5c:58:
58:21:7c:12:d2:42:9a:c3:82:bd:97:86:bf:03:f6:
4c:82:6f:3c:18:de:36:f1:49:ce:eb:0b:6b:81:d2:
54:58:bf:66:3e:e6:34:1a:16:43:24:97:46:5f:52:
a8:55:34:21:6f:db:06:af:5d:79:27:97:c2:01:20:
b3:fe:17:a0:03:a6:a2:25:6b:00:b0:87:ff:a2:81:
8d:06:3b:e6:c1:f7:2c:af:69:4e:02:38:d2:4c:63:
84:dd:20:ae:03:17:6c:de:94:5a:5a:c0:c7:b5:67:
87:5c:6b:31:98:f4:13:4e:88:f4:ac:42:d1:41:5e:
13:bb:b6:97:e0:05:76:30:b8:cd:72:ae:87:87:67:
11:c0:00:b3:ac:74:7d:de:c8:71:4f:ba:d9:99:1b:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:97:C3:61:28:C9:C4:EF:15:2E:49:67:E5:F8:6E:47:8E:58:28
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/jE2Xw2EoycTvFS5JZ-X4bkeOWCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.101.64.0/18
217.30.208.0/20
Signature Algorithm: sha256WithRSAEncryption
66:ee:39:2e:99:61:41:7c:7f:74:d8:cd:aa:e7:f5:1d:45:7d:
89:cb:0a:e3:ee:bf:0e:a4:83:3a:4e:07:f8:48:f1:d3:48:a3:
29:4f:3b:b1:04:90:b7:05:9c:62:5d:b3:18:f8:63:62:35:67:
a5:78:68:af:34:5e:51:3c:6d:88:91:70:b6:d4:a9:c1:b0:ba:
2e:ae:57:71:d0:ff:49:4e:01:28:e6:f1:16:ec:c5:a3:5e:16:
89:69:37:f9:e5:93:f2:bb:8a:28:2f:a3:30:9b:33:a2:48:97:
21:69:2b:6f:7e:c7:23:82:db:aa:e4:d8:84:67:13:04:dc:5b:
f8:63:e0:eb:54:66:04:d0:4d:ab:5e:36:a2:a9:5c:c9:2c:92:
c2:e2:56:dd:df:64:5a:70:aa:2c:b4:f9:96:1a:c0:0e:30:8f:
dd:ff:56:62:5e:ed:9c:dd:f4:79:77:02:b3:e9:91:f0:af:18:
8b:0c:e1:1b:4f:f3:eb:c4:4d:0a:a5:6c:b9:b4:5d:ee:dd:1a:
a3:c9:70:22:aa:a0:ad:ec:f0:62:0d:be:de:e2:9a:f0:7a:2a:
be:4a:43:28:db:4f:2f:d0:9b:1c:32:4f:72:a8:fa:2b:98:41:
a7:d1:ed:63:23:27:a7:38:d2:eb:7f:e7:b1:a0:c3:44:40:f0:
6f:89:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:05:12 2025 by rpki-client