Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuQvkULzizoA5gZp1j7IX3l43gs.roa
File: EuQvkULzizoA5gZp1j7IX3l43gs.roa (raw, json)
Hash identifier: 9zCBgMOR05VpIL5J7270fQi3P59Imkb4n1BELLbMpAM=
Subject key identifier: 12:E4:2F:91:42:F3:8B:3A:00:E6:06:69:D6:3E:C8:5F:79:78:DE:0B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A0200820DA437E28126A7A838907
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuQvkULzizoA5gZp1j7IX3l43gs.roa
Signing time: Mon 02 Jan 2023 05:24:55 +0000
ROA not before: Mon 02 Jan 2023 05:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35281
IP address blocks: 193.223.0.0/24 maxlen: 24
195.136.199.0/24 maxlen: 24
195.136.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a0:20:08:20:da:43:7e:28:12:6a:7a:83:89:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12e42f9142f38b3a00e60669d63ec85f7978de0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:c3:c8:52:72:77:1c:fa:40:af:69:9c:50:
16:0f:4a:62:a3:8c:f5:46:65:ec:47:fe:b7:6f:ff:
ff:f8:2b:5f:42:f6:a2:70:b8:8f:71:aa:ab:e1:ca:
29:e9:6a:0b:58:a2:cf:19:d4:ef:d8:78:fa:96:97:
dc:2c:99:f4:a7:a3:1f:8f:85:ce:37:bd:6f:b9:df:
50:8a:1d:35:a3:e6:0a:29:25:e4:4a:da:41:e5:f2:
0a:6c:71:f9:7d:21:af:84:4e:4e:f5:ed:f0:41:59:
79:71:6e:f6:c5:94:a5:7c:78:cf:d1:03:5b:e9:bf:
fe:a7:04:48:06:19:16:85:b3:c0:b2:f9:45:80:c9:
76:2a:18:c0:82:f3:83:6c:cc:46:70:2a:a0:41:8a:
01:01:b8:85:19:33:53:99:0a:8e:0b:45:ea:b4:8d:
cb:a3:b4:8a:98:93:ee:4b:f5:f9:05:32:10:db:9b:
16:a9:fe:01:7f:bd:d6:b6:b9:49:0d:63:6a:77:2e:
8a:fc:35:a2:4e:c3:d5:a1:1d:3d:36:4c:ff:e2:58:
2b:a0:05:13:98:46:d1:1f:e2:5c:c3:77:45:f3:6f:
de:08:39:6c:94:bc:18:34:8d:5a:de:48:eb:10:20:
c2:86:ad:4a:a0:07:b7:23:6d:8e:c1:72:83:8d:c0:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E4:2F:91:42:F3:8B:3A:00:E6:06:69:D6:3E:C8:5F:79:78:DE:0B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuQvkULzizoA5gZp1j7IX3l43gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.0.0/24
195.136.198.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8c:a2:55:bd:40:64:6d:bf:03:e9:0c:06:71:da:0c:28:06:
90:f1:6c:20:44:ab:ba:31:30:ea:87:24:97:4b:b2:51:dc:1b:
24:2f:4f:b0:cb:ae:8a:d8:ea:12:47:d7:99:86:1d:ec:d0:31:
32:38:40:b2:c8:35:de:d0:b8:d9:ff:b0:d1:56:33:7c:96:d5:
92:03:8d:bd:8f:e1:d7:8a:e8:50:84:cd:60:1c:c8:d7:9a:7c:
d6:1a:a9:d5:3f:e1:27:75:aa:b6:f8:ce:b6:bc:22:13:83:94:
41:af:be:85:d6:7f:d5:bf:90:c9:68:e8:3a:d2:21:03:62:b4:
03:59:ee:e7:21:bb:d5:3b:f9:24:da:5a:d3:7d:b7:41:66:c1:
e6:83:a4:3f:5f:14:01:37:55:5e:98:0f:f1:a2:2a:2d:c1:60:
fa:90:a6:89:17:4a:dd:c0:4f:62:e0:13:1b:73:ae:fc:69:34:
53:e8:29:09:3e:19:b1:36:d4:6b:a3:8f:8f:eb:20:37:5d:f6:
ac:ed:ce:57:ac:4d:cb:89:8a:26:2a:b0:24:13:7a:be:85:90:
42:71:ca:75:fe:1b:f0:ee:9f:58:34:63:17:df:78:f8:bc:17:
64:96:aa:32:cf:c0:57:9a:95:81:9e:d6:e0:0b:e7:72:76:e7:
ac:37:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:55 2025 by rpki-client