Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/EQqfbaydgHQwgJclGobvQe5ybeU.roa
File: EQqfbaydgHQwgJclGobvQe5ybeU.roa (raw, json)
Hash identifier: tpMwGGZOUV7b0r3mPO5Geri8XAQ148JFPFirdw6fTek=
Subject key identifier: 11:0A:9F:6D:AC:9D:80:74:30:80:97:25:1A:86:EF:41:EE:72:6D:E5
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 0684ADA5
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/EQqfbaydgHQwgJclGobvQe5ybeU.roa
Signing time: Sat 01 Jan 2022 15:56:04 +0000
ROA not before: Sat 01 Jan 2022 15:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6776
IP address blocks: 193.247.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109358501 (0x684ada5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Jan 1 15:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=110a9f6dac9d8074308097251a86ef41ee726de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:35:e8:39:eb:1f:56:26:23:13:1a:8c:56:
e1:df:b6:f5:40:f6:10:f0:ea:d5:96:0f:8b:b5:1f:
8d:06:6b:85:15:5c:9c:27:0a:07:ac:c9:1a:4c:34:
17:bf:49:27:75:a7:9c:ce:83:67:7f:17:dc:4f:30:
d6:ef:46:76:75:7c:8d:22:ea:68:97:64:7f:81:13:
b1:37:05:c9:4d:83:5b:30:a9:95:03:b5:27:9b:4c:
37:d0:bb:cd:83:0a:1c:48:07:68:d1:33:d9:1b:c5:
33:a3:67:41:03:a7:1b:1c:11:69:55:32:01:6a:11:
b4:83:97:f1:f9:e0:b3:8d:dc:e0:86:6b:17:06:1f:
ae:3f:9b:32:74:22:ee:55:8f:50:52:d2:cf:a3:ad:
73:01:00:e2:bf:15:2f:61:b6:50:b2:ed:14:c3:22:
07:c7:4d:10:27:18:11:2f:f9:ba:64:28:47:16:96:
0e:38:a5:ca:8c:25:3b:d6:e9:b4:44:a1:0a:07:95:
47:0e:bc:2d:aa:94:a6:1f:b2:0e:23:7d:96:19:07:
42:37:ba:92:3d:90:b1:4f:07:fe:46:5c:f7:b5:69:
ca:f8:e6:87:e7:e5:a1:9f:e7:54:03:96:64:7d:8a:
60:64:d5:dd:e3:2d:2c:f3:ae:28:09:4e:d4:98:33:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:9F:6D:AC:9D:80:74:30:80:97:25:1A:86:EF:41:EE:72:6D:E5
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/EQqfbaydgHQwgJclGobvQe5ybeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:52:e1:7d:bc:12:36:1f:5d:85:69:c7:a7:1e:fc:de:36:83:
0d:f4:31:ee:8c:de:9d:bd:af:4a:be:f0:a1:b2:76:f4:3d:11:
39:27:29:b2:88:73:68:19:9e:a7:65:24:40:f6:be:f3:99:49:
bc:13:c4:80:af:93:88:59:39:b1:69:52:7d:02:19:9f:1c:11:
cd:7f:f9:6a:2c:1f:9e:df:49:26:da:a3:55:87:37:14:d6:bc:
f6:e0:55:ba:fb:20:7e:07:10:7d:c6:59:49:58:b3:a4:02:60:
3d:ca:67:e7:26:07:cb:ce:7e:c7:2f:89:fe:8a:d3:31:49:37:
42:36:29:cd:f7:6f:e2:e5:6a:fb:89:94:54:e0:7a:2e:03:5d:
77:2f:25:b1:8c:f2:e1:09:de:d1:e4:f9:a2:e6:69:9c:cf:18:
a0:ea:56:17:72:a3:fe:52:b3:95:4e:fa:10:24:c1:c3:60:cf:
54:82:de:7a:a5:08:97:0f:66:ad:4d:00:27:ce:ac:b6:88:22:
4f:a0:a1:d4:e1:45:1b:05:77:a7:51:2c:53:b9:2b:15:03:36:
63:96:dd:8e:ac:ae:00:ac:31:2c:1c:2e:a8:61:05:00:15:67:
b7:3e:d5:1c:35:40:49:d2:44:52:f0:b4:cb:c8:98:61:df:19:
10:00:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:34:05 2025 by rpki-client