Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eWKUqwzFg15TPdXn2uV_en1eK6Q.roa
File: eWKUqwzFg15TPdXn2uV_en1eK6Q.roa (raw, json)
Hash identifier: HJw/4J6FdupOC1WnLMLQ8iwEHa1X4jYtbM4jFdnviBU=
Subject key identifier: 79:62:94:AB:0C:C5:83:5E:53:3D:D5:E7:DA:E5:7F:7A:7D:5E:2B:A4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018870C874A85DC0E1E16C10F07903C94068
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eWKUqwzFg15TPdXn2uV_en1eK6Q.roa
Signing time: Wed 31 May 2023 07:49:25 +0000
ROA not before: Wed 31 May 2023 07:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57169
IP address blocks: 192.71.233.0/24 maxlen: 24
192.36.38.0/24 maxlen: 24
192.121.163.0/24 maxlen: 24
192.36.39.0/24 maxlen: 24
192.36.41.0/24 maxlen: 24
192.71.247.0/24 maxlen: 24
192.121.170.0/24 maxlen: 24
192.36.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:c8:74:a8:5d:c0:e1:e1:6c:10:f0:79:03:c9:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 31 07:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=796294ab0cc5835e533dd5e7dae57f7a7d5e2ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:7d:c4:d6:5a:72:99:74:b1:6b:e5:e7:95:
73:3c:83:dc:cd:b2:cb:a0:f3:2d:9a:91:f1:30:bb:
d2:98:a0:b9:d7:4b:28:53:82:f5:e5:d8:99:dd:e7:
4d:3e:c1:e2:ac:5c:69:48:b4:59:81:ee:ef:c9:2c:
4f:a1:c2:7f:fe:10:4d:eb:21:a3:83:52:d4:6f:d7:
13:1b:f8:0b:e5:15:c1:aa:18:91:1e:bf:65:d4:62:
35:fd:94:8f:f4:b1:0d:99:c0:06:d5:39:f2:de:af:
08:7b:08:d7:b9:44:fe:7f:be:ba:c9:ec:0f:12:99:
2a:fc:dc:dd:1c:ff:29:7d:9a:bc:1d:3f:4d:92:8e:
58:e0:92:d7:60:2b:ed:dd:df:28:52:9d:c8:31:85:
ed:23:56:24:b1:44:e0:b4:a0:93:bf:00:32:f0:76:
a1:b2:11:de:22:f6:cb:04:5a:29:3d:c3:67:b3:87:
06:4d:a9:a8:ee:1a:da:5a:86:47:aa:e5:46:5f:19:
ce:5a:97:1e:69:ce:50:30:bf:69:56:03:f9:ea:be:
3d:8c:5e:9e:a3:92:0d:38:f2:7c:d1:70:13:56:dd:
52:cc:e3:d6:a3:a3:55:69:f0:51:2d:72:c8:83:0b:
29:2f:f5:48:03:00:33:f1:ec:64:ca:22:93:8a:d7:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:94:AB:0C:C5:83:5E:53:3D:D5:E7:DA:E5:7F:7A:7D:5E:2B:A4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eWKUqwzFg15TPdXn2uV_en1eK6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.38.0/23
192.36.41.0/24
192.36.56.0/24
192.71.233.0/24
192.71.247.0/24
192.121.163.0/24
192.121.170.0/24
Signature Algorithm: sha256WithRSAEncryption
32:cd:67:c3:10:e1:1a:e5:bb:d3:12:df:19:63:36:67:87:7e:
7c:0d:a0:cf:80:b4:6b:ef:13:b9:de:64:4f:5c:86:bd:c2:b3:
50:86:be:d5:ba:72:71:3d:a0:6b:f3:3d:c3:0f:3a:09:dd:bf:
16:7e:15:2c:57:95:a6:06:05:31:99:21:aa:87:74:8d:62:6a:
3f:e9:5b:dd:e1:04:85:43:9e:9f:a3:79:02:c5:82:b4:f3:77:
ad:97:87:9d:0b:0b:51:e2:4c:a8:86:2c:34:56:ca:6e:1d:92:
b6:fe:41:3d:19:13:b8:cc:4a:ee:78:fc:32:5e:68:d8:25:f9:
7d:2a:9c:06:bc:61:c5:90:2e:a7:ab:32:e4:2e:b7:25:ab:e7:
97:2f:c3:7f:0c:c2:50:4e:da:80:c1:3e:31:52:cc:ac:2e:65:
60:d1:69:b2:9d:07:39:33:da:b3:f9:e8:4b:3f:3d:94:14:b8:
36:b3:90:26:0d:c1:1b:48:42:19:88:08:e9:8e:e5:f5:68:5a:
36:35:31:ec:5b:56:8a:da:8c:c3:4e:f6:5b:a3:e7:53:56:7b:
88:65:4f:96:5b:af:ca:16:8a:84:69:52:73:b3:0e:de:0e:d2:
d3:93:05:e6:d3:ca:5f:ea:8a:5d:9d:be:1f:3c:43:da:bf:55:
89:f4:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:09:43 2025 by rpki-client