Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/EaTCgZTpI89wgU4YrFsKd_MMbyg.roa
File: EaTCgZTpI89wgU4YrFsKd_MMbyg.roa (raw, json)
Hash identifier: KbN/QUK31MG7c8TuZZPcTVM2XD/cmuRhm98uNgYzDSE=
Subject key identifier: 11:A4:C2:81:94:E9:23:CF:70:81:4E:18:AC:5B:0A:77:F3:0C:6F:28
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 018723CE9FF5EBED7E8FCF363DE130585A2C
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/EaTCgZTpI89wgU4YrFsKd_MMbyg.roa
Signing time: Mon 27 Mar 2023 16:02:36 +0000
ROA not before: Mon 27 Mar 2023 16:02:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42808
IP address blocks: 194.26.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:ce:9f:f5:eb:ed:7e:8f:cf:36:3d:e1:30:58:5a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Mar 27 16:02:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a4c28194e923cf70814e18ac5b0a77f30c6f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:d4:87:21:2b:c2:e2:d7:60:ce:25:43:33:
e0:af:c4:20:59:4c:c1:6b:8d:4c:d1:4d:f6:be:ac:
c0:92:d7:3b:8b:dc:e6:ae:d6:c7:07:8c:0e:71:d7:
a1:5e:a8:52:99:05:a8:0f:10:51:20:bb:76:49:2b:
69:2c:47:b0:0f:2b:43:9d:e8:12:28:13:72:b4:cd:
7a:ac:cc:03:05:ca:09:66:7e:12:91:9e:92:5b:8a:
76:5f:41:65:40:50:3b:b6:17:f6:51:8c:b2:8e:f5:
85:08:75:12:9f:7b:db:6b:85:fc:13:7e:2e:98:89:
a9:de:bf:8e:71:60:1d:d3:34:0a:09:f2:5f:f6:48:
be:81:93:c9:43:76:d9:3f:f8:66:1f:45:9e:cb:cf:
da:06:15:80:c8:5f:bf:42:27:76:36:5b:c2:f6:b0:
94:03:5a:2e:73:76:94:b6:02:47:0b:39:07:8b:fb:
dd:8a:14:70:e0:52:f2:5b:1e:7c:d6:2f:7c:03:d3:
be:69:d6:3f:f2:e7:af:78:6c:ae:01:7e:cd:c2:00:
85:d7:a5:0d:dc:e7:04:21:9e:40:d1:7e:a3:77:c9:
2e:b0:f4:c7:0b:68:ed:02:6d:ab:2b:1a:28:fe:67:
61:b8:a2:0e:92:c0:be:c9:45:88:9e:f6:e4:e9:dd:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:C2:81:94:E9:23:CF:70:81:4E:18:AC:5B:0A:77:F3:0C:6F:28
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/EaTCgZTpI89wgU4YrFsKd_MMbyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.118.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fd:25:bc:70:13:0e:4b:4a:ab:47:d5:07:8b:df:f9:c4:41:
58:27:9b:cf:c6:8b:16:fa:40:c9:0f:87:5f:7b:71:17:83:f0:
a3:4d:22:cd:e6:04:7d:60:18:38:91:6a:1c:ea:d5:cc:d7:17:
b3:ad:33:37:c3:69:7b:a7:5d:d5:24:58:d3:87:e8:f4:cd:a6:
70:d2:8d:c3:7a:3f:ff:f3:1b:5f:fa:1e:87:02:e9:53:df:4b:
cb:ce:86:3b:74:dc:59:e3:7e:e4:76:c4:6b:71:ab:8f:15:ef:
6c:d7:fa:43:10:10:df:6a:a7:73:6c:12:31:09:74:04:0d:cd:
61:06:07:7f:42:a8:c3:e6:fc:39:06:0e:fb:ae:a8:4c:4a:4e:
e0:5d:25:1c:44:93:91:2a:88:de:aa:e5:de:4d:6a:9b:c3:7d:
2f:59:8e:bc:4f:54:2c:87:80:af:b2:3e:c3:68:3a:07:56:3c:
aa:c8:21:8d:f4:56:4e:d1:96:07:fb:72:51:25:6b:2b:0e:6c:
76:57:70:f8:d4:d1:9a:33:7e:d4:91:97:22:49:9f:8e:18:fd:
97:65:aa:d0:ce:3c:cb:4e:c1:24:d4:21:8d:1b:a6:68:04:c4:
26:cb:08:3e:21:b3:85:83:19:52:c3:90:51:49:ab:6b:2f:28:
79:85:5c:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcjzp/16+1+j882PeEwWFosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey
ZTUxYTYwHhcNMjMwMzI3MTYwMjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWE0YzI4MTk0ZTkyM2NmNzA4MTRlMThhYzViMGE3N2YzMGM2ZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovvUhyErwuLXYM4lQzPgr8QgWUzB
a41M0U32vqzAktc7i9zmrtbHB4wOcdehXqhSmQWoDxBRILt2SStpLEewDytDnegS
KBNytM16rMwDBcoJZn4SkZ6SW4p2X0FlQFA7thf2UYyyjvWFCHUSn3vba4X8E34u
mImp3r+OcWAd0zQKCfJf9ki+gZPJQ3bZP/hmH0Wey8/aBhWAyF+/Qid2NlvC9rCU
A1ouc3aUtgJHCzkHi/vdihRw4FLyWx581i98A9O+adY/8ueveGyuAX7NwgCF16UN
3OcEIZ5A0X6jd8kusPTHC2jtAm2rKxoo/mdhuKIOksC+yUWInvbk6d0pdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGkwoGU6SPPcIFOGKxbCnfzDG8oMB8GA1UdIwQY
MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt
MzQ1YjJhYjBkYjE4LzEvRWFUQ2daVHBJODl3Z1U0WXJGc0tkX01NYnlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4
LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhp2MA0G
CSqGSIb3DQEBCwUAA4IBAQAC/SW8cBMOS0qrR9UHi9/5xEFYJ5vPxosW+kDJD4df
e3EXg/CjTSLN5gR9YBg4kWoc6tXM1xezrTM3w2l7p13VJFjTh+j0zaZw0o3Dej//
8xtf+h6HAulT30vLzoY7dNxZ437kdsRrcauPFe9s1/pDEBDfaqdzbBIxCXQEDc1h
Bgd/QqjD5vw5Bg77rqhMSk7gXSUcRJORKojequXeTWqbw30vWY68T1Qsh4Cvsj7D
aDoHVjyqyCGN9FZO0ZYH+3JRJWsrDmx2V3D41NGaM37UkZciSZ+OGP2XZarQzjzL
TsEk1CGNG6ZoBMQmywg+IbOFgxlSw5BRSatrLyh5hVw/
-----END CERTIFICATE-----
Generated at Tue May 13 17:17:19 2025 by rpki-client