Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/eDM0yEqYz3bdS9dBEM7P_9zk6qM.roa
File: eDM0yEqYz3bdS9dBEM7P_9zk6qM.roa (raw, json)
Hash identifier: gOExTwDnXaRUz8pnAizwu20DnItvO3tQtDahbsuJies=
Subject key identifier: 78:33:34:C8:4A:98:CF:76:DD:4B:D7:41:10:CE:CF:FF:DC:E4:EA:A3
Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial: 0113A6E7
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/eDM0yEqYz3bdS9dBEM7P_9zk6qM.roa
Signing time: Tue 14 Jun 2022 13:10:44 +0000
ROA not before: Tue 14 Jun 2022 13:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20546
IP address blocks: 193.25.233.0/24 maxlen: 24
193.25.227.0/24 maxlen: 24
193.25.228.0/24 maxlen: 24
193.25.229.0/24 maxlen: 24
193.25.230.0/24 maxlen: 24
193.25.231.0/24 maxlen: 24
193.25.232.0/24 maxlen: 24
193.25.234.0/24 maxlen: 24
193.25.235.0/24 maxlen: 24
193.25.236.0/24 maxlen: 24
193.25.237.0/24 maxlen: 24
193.25.238.0/24 maxlen: 24
193.25.239.0/24 maxlen: 24
193.25.226.0/24 maxlen: 24
193.25.224.0/24 maxlen: 24
193.25.225.0/24 maxlen: 24
2001:678:9fc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18065127 (0x113a6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Validity
Not Before: Jun 14 13:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=783334c84a98cf76dd4bd74110cecfffdce4eaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:cd:97:0f:e6:fb:05:0a:fd:95:5a:17:44:
28:35:c2:f4:14:ad:78:46:4a:25:f2:a9:b8:b7:cf:
a4:2c:67:5f:e1:c7:16:fc:84:10:67:9b:51:fc:30:
5d:c1:8e:32:7d:50:73:3d:73:10:68:7f:0e:dd:69:
f6:8a:98:70:3e:04:ef:00:81:0d:83:34:75:8c:3e:
68:a7:f3:f7:05:1f:cd:40:e8:b3:dd:3a:ec:a0:48:
79:bf:7b:00:76:26:9a:b5:a1:ac:c0:a8:0b:79:23:
45:29:95:ba:be:b5:71:55:b5:f4:44:75:e6:c3:31:
ba:32:58:4c:fd:1a:c7:1a:86:86:3e:d5:93:16:98:
b0:53:37:59:22:f3:c5:b6:0f:2a:19:4f:1f:16:70:
01:bc:7b:84:c5:29:0e:3b:7f:da:a5:ed:e6:51:cb:
6a:17:67:d6:20:54:f5:58:63:3d:3c:d6:fc:ec:8f:
ac:79:c5:29:fe:9f:9f:98:af:40:26:8a:2e:a6:1d:
c9:c0:ab:9a:24:5f:a5:99:9f:97:46:4e:d3:db:2a:
59:2e:78:1a:2b:55:7a:70:a2:d7:50:df:0b:58:60:
3e:b3:a8:ee:0b:c9:10:d8:7e:74:7c:9a:a8:29:50:
55:55:a6:75:63:0c:27:c3:52:5a:4a:fd:b7:4b:66:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:34:C8:4A:98:CF:76:DD:4B:D7:41:10:CE:CF:FF:DC:E4:EA:A3
X509v3 Authority Key Identifier:
keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/eDM0yEqYz3bdS9dBEM7P_9zk6qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.224.0/20
IPv6:
2001:678:9fc::/48
Signature Algorithm: sha256WithRSAEncryption
93:5b:e5:09:61:63:c2:60:15:de:dc:5e:c4:23:c5:52:45:6a:
41:e9:b2:eb:ff:a5:7f:51:46:c1:39:bc:87:7b:98:6c:01:98:
b0:38:31:fb:20:15:68:ea:eb:26:33:ee:c5:e7:80:34:f3:da:
c7:d4:7d:0b:94:ba:d2:b1:3d:18:91:cd:36:f3:5b:7b:33:e5:
fe:6c:a7:3b:95:e1:39:ec:4d:0a:0a:be:01:3c:39:a3:46:4c:
36:f3:3f:7a:1a:bf:93:2a:e9:ff:55:a4:08:43:32:55:a5:d6:
6e:a5:a7:67:e8:e6:9a:cf:b2:00:b5:e2:f3:18:70:3f:eb:37:
75:7f:17:64:a4:55:93:b0:e0:58:28:1d:02:81:d8:d4:0d:ca:
24:35:79:35:ae:7a:98:11:44:58:64:29:f5:71:d4:be:f8:75:
02:9e:1f:5f:0b:35:3f:27:c2:48:c7:11:58:4d:1f:21:8b:e9:
f3:f3:df:93:7c:ae:f7:00:40:9b:12:f4:4b:53:e1:92:f5:e1:
83:7f:e4:ff:b2:28:b8:38:3c:d4:ff:2b:a9:fa:56:ca:0a:6b:
7e:41:41:df:3f:3c:69:46:0e:88:15:c4:7c:32:e6:88:b0:f0:
f2:ec:01:6f:d3:40:6e:83:4a:99:1c:e5:af:bd:a6:46:54:f0:
5e:7e:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:53 2025 by rpki-client