Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ewOQtdVsZ6usdGz44h94w4z2GCo.roa
File: ewOQtdVsZ6usdGz44h94w4z2GCo.roa (raw, json)
Hash identifier: lxZeF9LtakwHfv+2+3zI68UuRWJSj5rhhgiNRhVOrkM=
Subject key identifier: 7B:03:90:B5:D5:6C:67:AB:AC:74:6C:F8:E2:1F:78:C3:8C:F6:18:2A
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0188719E7C801E4C3F308823538C131A3195
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ewOQtdVsZ6usdGz44h94w4z2GCo.roa
Signing time: Wed 31 May 2023 11:43:11 +0000
ROA not before: Wed 31 May 2023 11:43:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 89.47.200.0/22 maxlen: 24
89.42.196.0/22 maxlen: 24
89.42.136.0/22 maxlen: 24
92.114.51.0/24 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.50.0/24 maxlen: 24
46.34.160.0/22 maxlen: 24
89.47.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:9e:7c:80:1e:4c:3f:30:88:23:53:8c:13:1a:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: May 31 11:43:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b0390b5d56c67abac746cf8e21f78c38cf6182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:03:f4:2b:7d:59:e6:ea:1b:53:ba:5a:bb:
32:46:b6:68:2a:54:5b:81:b1:01:ce:55:0d:2c:7c:
78:fa:f1:42:1c:7b:b0:90:91:d8:a7:a6:20:01:70:
32:9d:13:aa:e1:46:8a:1b:ad:83:87:74:a6:d3:c4:
f0:a5:42:7c:aa:5f:54:e8:6d:4b:12:77:c8:fb:c8:
22:3e:07:a1:98:e0:e2:30:00:32:d8:b8:44:1f:d1:
a2:27:a2:98:6b:52:ab:72:5a:c3:07:60:08:50:7d:
2c:62:74:cb:71:de:65:fe:87:a3:cd:1e:04:95:21:
97:16:fc:ed:2d:18:0d:4a:87:c5:f7:b9:5d:a5:1d:
71:fc:bb:93:64:a8:f5:05:3f:31:0a:af:19:3c:48:
84:41:0d:81:60:46:ae:4e:89:41:88:cb:2b:c7:33:
24:99:1d:7c:1e:71:45:f8:40:77:dd:39:28:72:36:
44:50:da:32:4d:20:a5:3c:41:8e:2e:02:17:9c:c7:
c7:ba:ec:73:86:d8:8d:3d:51:05:fd:69:78:b3:85:
da:9e:db:9d:ae:dc:63:7f:88:e7:39:aa:49:d5:12:
cf:6a:f7:8c:ee:1f:0b:3c:ee:0e:ab:c2:30:3a:dd:
d3:7f:0d:d7:df:88:e7:28:21:c1:92:32:be:05:58:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:03:90:B5:D5:6C:67:AB:AC:74:6C:F8:E2:1F:78:C3:8C:F6:18:2A
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ewOQtdVsZ6usdGz44h94w4z2GCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.136.0/22
89.42.196.0/22
89.47.196.0-89.47.203.255
92.114.48.0/24
92.114.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:d0:87:e3:78:06:c9:a4:8b:fe:d8:38:fb:ec:35:12:98:50:
c8:31:69:30:92:90:de:25:82:5c:ec:4e:b3:ef:76:e5:b9:80:
a2:e8:1a:73:fe:dd:6a:95:48:d5:f7:d9:f3:30:cb:fc:5b:0e:
3b:0b:7a:0b:62:69:64:d9:09:81:85:47:d0:a6:a6:a0:f3:a4:
0c:bc:57:7a:1e:c8:1e:15:8f:68:fd:2e:0b:98:34:1e:c9:09:
90:49:54:ea:05:67:06:d9:e0:39:de:38:7f:35:11:3a:01:f1:
12:54:36:c4:e1:02:aa:ec:53:f6:34:7f:99:47:b1:ff:44:7f:
eb:76:fa:e8:bb:b9:53:59:74:f2:b9:7e:7c:a1:72:4f:d2:07:
c5:cd:43:8e:ef:08:44:b9:8b:c9:36:40:01:d1:db:3f:0e:e0:
18:16:f5:17:8b:0a:aa:b7:2a:04:0b:95:26:19:cd:9f:b1:2f:
eb:a0:c3:47:07:6d:b2:ab:f6:76:7d:e4:24:fe:cd:cf:02:71:
6f:8b:36:c4:07:91:e8:c4:a7:f8:a0:16:31:a7:75:5a:f0:1b:
eb:73:ec:aa:e7:de:da:13:4c:09:c4:25:12:8a:60:e2:e1:9b:
e5:bf:2d:c0:97:3c:b4:cf:2f:e6:b1:02:32:c0:50:6a:2c:7e:
2a:ea:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:36 2025 by rpki-client