Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa
File: EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa (raw, json)
Hash identifier: lf4w/l+e79XjeuANrh9Yqec37tVgQKctfBI2PU6YO2o=
Subject key identifier: 12:E5:2B:20:F8:83:71:6F:32:2A:10:31:45:6F:5D:52:C6:0F:07:9A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A8EC562
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa
Signing time: Sat 01 Jan 2022 04:52:12 +0000
ROA not before: Sat 01 Jan 2022 04:52:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204953
IP address blocks: 195.136.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982435170 (0x3a8ec562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12e52b20f883716f322a1031456f5d52c60f079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:e4:b4:d7:6d:b8:f9:cf:83:b0:16:86:c2:
1f:09:f3:7c:9b:2b:5e:12:63:e5:93:d6:f8:1a:a4:
d7:2e:1e:a0:b9:b6:69:99:78:cc:e2:25:fc:d3:47:
34:f3:63:67:e9:33:1c:60:3a:ee:1b:8c:03:6c:b2:
a4:db:03:4c:34:69:ba:1e:f1:98:c1:cf:7a:50:5e:
a4:6d:41:90:e4:84:68:89:b4:f0:d2:ac:ac:fa:d8:
f1:f1:05:f1:bf:8d:b0:4f:0d:6a:e4:61:9d:d7:19:
dd:2b:1b:ef:57:87:e0:7b:d8:0f:d1:a8:bd:77:1d:
1f:34:e3:e7:ed:56:d9:f6:9f:68:ae:a2:99:b3:07:
f2:05:20:cd:81:42:6d:9c:ea:09:38:80:a8:9d:a8:
e6:19:88:7a:90:88:30:88:4d:46:ec:5d:8a:11:57:
c4:aa:5c:36:8f:4d:31:bd:e8:bb:b0:06:6a:5d:7b:
e3:20:47:fe:8f:52:a3:95:d4:62:06:3f:47:4f:93:
05:d9:27:2a:bf:86:90:8f:08:79:29:f1:b1:a4:30:
98:79:b2:ea:21:bb:fa:dd:15:73:6f:a7:3c:eb:86:
b6:d2:7f:bf:bc:74:ba:f5:3b:32:df:3c:df:76:d8:
2a:c5:22:ad:33:50:b5:21:c5:3d:0f:5e:b4:70:48:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:2B:20:F8:83:71:6F:32:2A:10:31:45:6F:5D:52:C6:0F:07:9A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EuUrIPiDcW8yKhAxRW9dUsYPB5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:13:a6:24:3e:95:01:61:e4:9d:c0:1a:71:02:86:b8:e7:3e:
2f:0b:cc:cb:86:2d:b8:90:aa:8a:2c:0e:e9:b6:83:e5:c7:ea:
99:d7:41:8c:73:15:47:c5:99:c6:be:ca:53:1a:9e:c3:6c:14:
5f:20:ce:f7:3d:9a:46:20:76:6e:64:6f:0c:e1:62:0c:b6:6c:
d2:60:56:c0:0b:33:d0:05:fd:5b:d5:c9:2a:0c:05:b6:f9:01:
c3:6c:37:2d:25:16:29:f7:89:4e:f0:38:c3:44:23:28:1c:23:
64:86:15:50:54:b2:ff:58:63:03:dc:ae:12:65:c1:52:a5:35:
61:41:eb:0d:2b:f4:6f:0b:6d:6b:d6:77:f8:da:c8:b5:be:48:
31:df:72:d4:f8:b9:c6:40:0e:24:62:5c:2d:5b:39:5c:dd:6e:
ce:49:c3:57:ea:3b:72:d3:56:c3:18:9b:24:20:7e:b9:83:22:
02:ee:9e:cc:9c:56:c8:36:ad:d7:3c:6a:ec:b2:73:9b:2c:dd:
b6:79:92:89:50:48:d2:1f:09:d5:38:ce:94:f4:27:c4:7f:c9:
18:40:0d:f5:86:34:bc:15:5b:5f:54:38:2f:ce:c5:cb:d7:8e:
bf:02:71:54:b6:d9:71:ed:e1:04:cd:06:ae:c6:49:ae:a7:ab:
e1:1d:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:32 2025 by rpki-client