Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa
File: ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa (raw, json)
Hash identifier: Jz/77/3tv8BjgmwS8PYBxXYoZgnlFBvI7C+tlKXLHMg=
Subject key identifier: 78:F1:86:9C:E8:D2:AE:A4:A9:08:E3:1D:2F:56:9A:2A:7B:2A:AA:75
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 0185BE8DCD81CFC965AEB63DCBBB0080DC14
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa
Signing time: Tue 17 Jan 2023 07:07:22 +0000
ROA not before: Tue 17 Jan 2023 07:07:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58261
IP address blocks: 185.218.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:8d:cd:81:cf:c9:65:ae:b6:3d:cb:bb:00:80:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Jan 17 07:07:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78f1869ce8d2aea4a908e31d2f569a2a7b2aaa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:8c:58:49:08:98:c1:19:42:b3:47:c5:e1:
94:23:b0:30:78:ce:23:38:bc:3d:0a:b9:3e:82:5b:
f1:4b:56:50:aa:50:64:f1:c0:f1:d5:e8:b0:a0:dc:
5a:b0:02:ec:f4:9f:cc:14:d9:e1:e7:4b:31:a2:1a:
22:cc:04:5c:7b:8d:db:30:35:c5:14:a7:be:c8:a3:
60:cc:b5:43:fe:66:ba:dd:3c:98:e1:77:72:ec:5a:
2a:26:9b:0b:84:de:79:fd:4a:a5:aa:0d:52:94:b3:
7e:6a:c7:2f:30:42:3c:f3:62:3c:a2:40:7a:36:48:
a7:1b:6b:e9:91:8e:ac:10:4d:c8:c5:cd:a5:fd:11:
67:89:e3:d7:02:f8:cb:bf:89:68:d4:cd:92:f0:6d:
68:00:6a:b1:c7:7f:7e:6e:11:fc:18:af:76:d7:f8:
97:2c:0f:94:a7:fb:bc:95:e3:cc:2f:af:69:d7:79:
59:ea:a8:7e:33:8c:b2:1f:27:c5:2e:1a:11:6e:a2:
dd:0d:87:d2:ed:77:e1:be:0f:0e:5f:19:f4:21:72:
71:f7:e9:68:88:b1:8f:cd:0c:17:45:48:b4:60:d9:
48:00:3c:c7:c9:78:77:f3:6f:4e:55:05:5c:8b:b5:
dc:85:72:49:38:68:60:7f:55:22:7c:75:80:d5:a3:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F1:86:9C:E8:D2:AE:A4:A9:08:E3:1D:2F:56:9A:2A:7B:2A:AA:75
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.141.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3e:d7:6d:02:c9:d8:f8:ff:06:d8:1c:48:37:b9:29:25:92:
95:39:30:17:7b:67:a4:24:db:c8:f0:d8:cd:56:57:c4:2b:6e:
78:7b:c8:02:9d:be:62:49:1b:cd:8a:2a:5c:d8:8b:c7:bc:33:
5a:e9:59:63:48:c9:88:b2:bd:24:5f:76:52:85:19:8a:ff:64:
47:bb:75:4a:11:0f:96:34:1c:7e:78:fa:cf:9d:3f:2a:e4:da:
b4:65:d3:a3:63:fe:29:9a:e8:56:2c:2a:03:78:5b:75:cf:7c:
bc:a8:1d:4a:f1:f8:99:9c:4c:73:ca:54:33:aa:fe:65:5e:5b:
ad:2a:17:cb:9c:75:97:83:e2:f1:30:f4:01:13:2e:08:05:de:
27:74:c7:c7:f8:c5:df:1a:a3:59:b3:f5:91:de:9d:6d:5f:80:
7a:77:29:1d:b8:c6:73:b0:c9:7c:5f:95:62:d0:7d:5f:7d:06:
f7:b6:58:93:e3:e8:45:56:1c:6e:27:bf:3d:53:46:8e:09:a0:
12:50:36:14:71:c2:41:99:4d:f5:e4:06:14:d6:6e:77:01:47:
9e:14:93:8d:c7:fa:ac:64:6f:75:27:8d:1a:0f:a2:3f:e8:51:
2a:58:e7:68:06:4b:fe:dd:3c:3d:01:da:ba:7f:e0:f4:82:3e:
de:c2:8f:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW+jc2Bz8llrrY9y7sAgNwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDI0ZjgyYzdjODJmYzU0OTk1MzJlNWE2NjUxYTc0ZjYy
OWM1YWEwHhcNMjMwMTE3MDcwNzIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGYxODY5Y2U4ZDJhZWE0YTkwOGUzMWQyZjU2OWEyYTdiMmFhYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5CMWEkImMEZQrNHxeGUI7AweM4j
OLw9Crk+glvxS1ZQqlBk8cDx1eiwoNxasALs9J/MFNnh50sxohoizARce43bMDXF
FKe+yKNgzLVD/ma63TyY4Xdy7FoqJpsLhN55/Uqlqg1SlLN+ascvMEI882I8okB6
NkinG2vpkY6sEE3Ixc2l/RFniePXAvjLv4lo1M2S8G1oAGqxx39+bhH8GK921/iX
LA+Up/u8lePML69p13lZ6qh+M4yyHyfFLhoRbqLdDYfS7Xfhvg8OXxn0IXJx9+lo
iLGPzQwXRUi0YNlIADzHyXh3829OVQVci7XchXJJOGhgf1UifHWA1aNfvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHjxhpzo0q6kqQjjHS9Wmip7Kqp1MB8GA1UdIwQY
MBaAFClCT4LHyC/FSZUy5aZlGnT2KcWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VKUGdzZklMOFZKbFRMbHBtVWFkUFlweGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yZjY2NTItNzQ2Ni00YTE2LTgzZGEt
YzFmMWEwZTQ5N2NjLzEvZVBHR25PalNycVNwQ09NZEwxYWFLbnNxcW5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yZjY2NTItNzQ2Ni00YTE2LTgzZGEtYzFmMWEwZTQ5N2Nj
LzEvS1VKUGdzZklMOFZKbFRMbHBtVWFkUFlweGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudqNMA0G
CSqGSIb3DQEBCwUAA4IBAQBiPtdtAsnY+P8G2BxIN7kpJZKVOTAXe2ekJNvI8NjN
VlfEK254e8gCnb5iSRvNiipc2IvHvDNa6VljSMmIsr0kX3ZShRmK/2RHu3VKEQ+W
NBx+ePrPnT8q5Nq0ZdOjY/4pmuhWLCoDeFt1z3y8qB1K8fiZnExzylQzqv5lXlut
KhfLnHWXg+LxMPQBEy4IBd4ndMfH+MXfGqNZs/WR3p1tX4B6dykduMZzsMl8X5Vi
0H1ffQb3tliT4+hFVhxuJ789U0aOCaASUDYUccJBmU315AYU1m53AUeeFJONx/qs
ZG91J40aD6I/6FEqWOdoBkv+3Tw9Adq6f+D0gj7ewo/R
-----END CERTIFICATE-----
Generated at Tue May 13 02:23:30 2025 by rpki-client