Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/EKWJKQZ5SxiSCLdEF5bRyJrzLKM.roa
File: EKWJKQZ5SxiSCLdEF5bRyJrzLKM.roa (raw, json)
Hash identifier: 1oqDKulALigxFJX0uzCg9kuQcgjtC4n8EHQxu2RltBU=
Subject key identifier: 10:A5:89:29:06:79:4B:18:92:08:B7:44:17:96:D1:C8:9A:F3:2C:A3
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A5F8C99C4083BFD62ED6F51B9E7B13DC1
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/EKWJKQZ5SxiSCLdEF5bRyJrzLKM.roa
Signing time: Mon 04 Sep 2023 09:36:04 +0000
ROA not before: Mon 04 Sep 2023 09:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
178.82.0.0/16 maxlen: 16
81.7.240.0/20 maxlen: 20
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
80.219.0.0/16 maxlen: 16
31.10.192.0/18 maxlen: 18
46.127.0.0/16 maxlen: 16
46.140.128.0/17 maxlen: 17
84.20.32.0/21 maxlen: 21
84.20.32.0/20 maxlen: 20
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
84.20.40.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.48.0/21 maxlen: 21
62.2.128.0/17 maxlen: 17
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:8c:99:c4:08:3b:fd:62:ed:6f:51:b9:e7:b1:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 09:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a5892906794b189208b7441796d1c89af32ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:ef:33:95:66:10:c8:78:b7:39:1b:bf:87:
3b:ce:8d:be:bd:cb:1a:09:a5:8d:a1:87:1c:71:ad:
28:c5:77:ae:a0:e0:c0:33:42:94:ff:cf:88:7e:08:
16:6f:9f:d7:b4:15:6e:16:5b:f3:26:a6:00:91:33:
2e:9c:98:cd:0a:07:31:c4:a8:2e:36:91:27:99:64:
27:fc:4b:f4:9a:fb:03:fd:ae:89:c5:13:23:36:2e:
a6:4d:8a:87:00:6a:b8:37:20:1f:d4:a6:a4:f3:52:
77:8f:d8:a7:7b:c1:af:17:7a:01:71:e5:f8:d1:6a:
f3:7b:a5:8e:42:8d:57:0c:d5:45:c9:81:06:8c:60:
3f:80:d6:1d:15:b5:ec:58:cc:08:2e:3d:23:99:5b:
e1:18:e3:3c:23:86:2a:05:47:3f:d7:84:f9:81:56:
04:e9:a4:ee:6c:0a:f9:66:85:79:86:09:77:09:dd:
fb:71:54:d1:51:7f:2a:84:11:7b:b3:da:f3:2b:e8:
5f:ba:85:cd:cf:61:ab:48:5c:f9:97:b8:4b:60:14:
f3:b9:a7:37:be:0b:29:50:ac:23:ce:e3:89:56:c8:
00:9f:7e:8b:f3:97:41:ca:1f:7b:02:be:ee:fa:1f:
f1:a3:43:ea:a8:ee:6c:7f:87:75:ce:76:3e:31:b3:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A5:89:29:06:79:4B:18:92:08:B7:44:17:96:D1:C8:9A:F3:2C:A3
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/EKWJKQZ5SxiSCLdEF5bRyJrzLKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
178.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:56:ba:bb:ba:b0:60:cd:ff:09:ad:e2:31:f0:e1:7e:8a:aa:
70:07:17:e0:18:8b:a6:aa:29:8c:a2:b2:e4:45:d5:e9:73:50:
28:7f:73:ac:5d:39:45:9d:f2:56:7f:b6:cb:7c:c6:08:e4:2c:
b5:7e:74:47:65:47:7e:22:5d:eb:37:bb:60:86:8d:e4:6d:1c:
48:01:1a:61:65:14:64:2f:05:cb:b7:c6:1e:4b:fa:e5:71:26:
dc:df:ce:fc:ed:2f:d1:7f:85:ef:55:12:78:3a:2d:b1:9a:26:
a7:4a:92:d8:5b:81:8a:3d:fa:49:7a:77:a9:87:9d:d0:31:8f:
62:ac:6b:e2:7c:d9:0c:75:d9:cd:f0:ef:63:ab:0f:99:ec:68:
6b:fd:a7:1b:ea:67:62:0e:78:04:09:6a:36:49:ef:20:4e:3b:
f8:d1:c9:ef:b0:b2:66:a9:3c:fb:8f:03:6f:9d:da:ba:c3:c1:
f0:db:fe:b7:de:12:3a:a7:60:16:0d:ce:8d:cb:d3:cc:5c:89:
10:62:03:c0:26:6f:20:13:14:12:01:43:20:60:5c:b7:1f:b7:
7b:c2:03:27:42:11:10:8b:d5:ae:5c:5d:a4:26:1c:3f:a6:3b:
9f:c3:1d:23:24:9e:d9:c7:fe:d0:ad:36:5b:6f:3e:8d:37:04:
03:5e:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:07:28 2025 by rpki-client