Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/euc-JpuFixK9IHgROJ8SaqwyK9o.roa
File: euc-JpuFixK9IHgROJ8SaqwyK9o.roa (raw, json)
Hash identifier: vIW+ewYzu8tjrr/DEnVKCRa3OLqUhfXe8hAVT2W8X9U=
Subject key identifier: 7A:E7:3E:26:9B:85:8B:12:BD:20:78:11:38:9F:12:6A:AC:32:2B:DA
Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial: 0CA127F2
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/euc-JpuFixK9IHgROJ8SaqwyK9o.roa
Signing time: Sat 01 Jan 2022 10:05:54 +0000
ROA not before: Sat 01 Jan 2022 10:05:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49010
IP address blocks: 193.187.164.0/22 maxlen: 22
91.207.2.0/23 maxlen: 23
109.232.72.0/21 maxlen: 21
185.20.140.0/22 maxlen: 22
84.252.76.0/22 maxlen: 22
86.62.24.0/22 maxlen: 22
2a09:5500::/29 maxlen: 29
2a00:19f8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211888114 (0xca127f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Validity
Not Before: Jan 1 10:05:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ae73e269b858b12bd207811389f126aac322bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:d7:42:dc:8b:60:ff:b4:da:6c:a1:6b:e0:
4a:2d:c8:88:eb:0d:56:7e:9d:4f:f9:c0:66:c5:dd:
0e:d8:31:57:f9:6c:72:88:28:28:69:7a:04:e0:09:
b6:f7:68:59:fd:51:5f:b3:b9:75:b9:e9:c4:32:25:
75:81:b8:9e:af:4a:46:63:48:57:50:01:e9:31:be:
91:d4:7d:c2:c6:37:66:21:9a:37:23:63:0e:ca:5c:
5f:e9:eb:e6:a6:7b:08:e5:34:71:fd:a7:e9:5b:cc:
7d:bf:cf:35:72:9c:43:09:f8:44:e3:fc:f7:02:c6:
e1:bf:dd:47:3c:1a:c3:cd:1b:3b:20:23:87:9b:6f:
35:c4:14:5b:8f:56:ae:d3:b1:53:46:b0:22:16:c7:
54:d7:7d:4d:ab:aa:42:29:ed:5f:65:b1:60:0a:0f:
60:a4:c2:13:18:40:ad:0c:8e:5b:a7:c3:09:52:ae:
4d:22:ba:6c:15:c1:a8:8b:97:5f:b3:4e:e4:b6:8a:
3d:54:bd:cf:76:9e:8d:fc:a7:b6:f5:ad:29:ce:39:
68:0a:b3:6f:64:e1:78:96:23:44:62:6b:b8:78:0d:
be:54:ba:ec:c1:19:a4:da:93:77:e1:12:5d:96:cf:
a1:4c:3f:15:a6:c9:6a:ab:55:56:39:04:97:e6:12:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:3E:26:9B:85:8B:12:BD:20:78:11:38:9F:12:6A:AC:32:2B:DA
X509v3 Authority Key Identifier:
keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/euc-JpuFixK9IHgROJ8SaqwyK9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.76.0/22
86.62.24.0/22
91.207.2.0/23
109.232.72.0/21
185.20.140.0/22
193.187.164.0/22
IPv6:
2a00:19f8::/32
2a09:5500::/29
Signature Algorithm: sha256WithRSAEncryption
34:00:54:52:53:36:83:93:78:58:8c:0a:42:5f:8c:36:da:5d:
21:1b:9f:96:dc:90:bd:4d:d4:89:5e:b2:46:40:15:2f:ec:16:
d9:e2:51:f6:d7:6a:a9:b2:62:66:fb:2d:85:a2:60:8d:22:a8:
c7:88:0a:22:5b:e6:e8:2a:24:88:d0:52:d3:38:36:55:96:a5:
db:c0:2e:fa:81:4c:e8:17:5a:98:b6:a8:42:f3:a8:58:f7:31:
96:95:82:0c:47:8d:29:64:de:71:f5:87:8a:59:40:99:d6:6f:
99:e3:8e:11:b0:ca:f0:3c:ee:6f:63:5f:42:55:ad:2b:53:3a:
fe:9f:13:b8:b1:d0:b2:b0:89:9e:86:87:e7:58:72:d3:ae:6f:
14:07:ba:f7:ae:7e:d1:71:00:9a:7e:87:80:fe:f1:17:f5:cb:
9f:f4:81:95:e5:3a:e4:15:e0:86:95:d3:62:a4:cf:73:76:a0:
80:51:a9:f0:a3:89:7a:33:a1:5f:90:32:6c:ec:78:ea:de:00:
e5:68:8d:71:e2:41:c9:42:e2:c2:f3:e0:08:c3:ba:af:5e:7f:
3c:4d:34:3d:6b:86:70:a0:5a:e7:56:1f:79:a0:52:e1:70:db:
a4:eb:d5:a4:0d:11:25:2a:08:64:6a:4d:5f:12:64:b3:2f:20:
27:f2:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:29 2025 by rpki-client