Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/eujamvgjIRcehXR6sqQcHqmA8j0.roa
File: eujamvgjIRcehXR6sqQcHqmA8j0.roa (raw, json)
Hash identifier: o0tAVqdXNaO0WHiZf7Vinq/Up4uMODgvT5s3ebi50Bo=
Subject key identifier: 7A:E8:DA:9A:F8:23:21:17:1E:85:74:7A:B2:A4:1C:1E:A9:80:F2:3D
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 325353E5
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/eujamvgjIRcehXR6sqQcHqmA8j0.roa
Signing time: Sat 01 Jan 2022 14:01:03 +0000
ROA not before: Sat 01 Jan 2022 14:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25184
IP address blocks: 78.109.192.0/20 maxlen: 24
79.175.128.0/18 maxlen: 24
31.47.32.0/19 maxlen: 24
81.90.144.0/20 maxlen: 24
80.75.0.0/20 maxlen: 24
217.11.16.0/20 maxlen: 24
185.3.124.0/22 maxlen: 24
31.14.112.0/20 maxlen: 24
86.104.32.0/20 maxlen: 24
93.113.224.0/20 maxlen: 24
46.102.128.0/20 maxlen: 24
2a03:4680::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844321765 (0x325353e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Jan 1 14:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ae8da9af82321171e85747ab2a41c1ea980f23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:8a:3f:ff:35:9d:c6:91:28:79:6e:c0:8c:
cb:5d:ec:2c:4f:8f:52:00:62:89:26:17:08:d9:24:
53:e8:cb:c5:ee:30:79:63:c5:f0:ab:06:b9:9d:5b:
a9:89:ee:4b:41:0d:e4:94:7e:d8:3b:8a:8f:63:01:
d4:38:e7:55:d2:2a:6b:73:e7:3a:c1:4b:bc:1e:c5:
85:a9:3f:81:31:ba:04:31:84:87:ec:ea:00:33:4e:
50:3b:8c:5a:e4:15:4f:ec:fb:28:4f:d7:59:32:8c:
c6:88:4f:78:02:eb:cd:2e:09:15:8e:8f:37:1c:ae:
d8:09:c5:4e:6b:c2:74:cc:31:7c:5b:e4:01:3a:79:
2d:9f:c2:51:26:e4:45:2b:58:e6:1d:98:82:27:74:
fc:1c:23:f4:29:df:59:cd:26:0b:85:d8:f3:60:35:
ab:aa:bb:33:30:8f:f9:e4:8e:03:59:b1:12:1a:31:
f1:6b:ff:48:c2:1a:c2:17:87:99:4b:72:39:3f:4e:
d4:e6:1e:2f:a5:19:52:fe:b0:77:f7:c5:39:b6:e9:
94:a8:4d:36:0c:6c:41:aa:92:b4:d4:58:40:36:5a:
28:a7:fa:a3:73:d9:2c:51:1f:e5:bf:41:c8:d1:ba:
90:23:5a:3e:41:79:76:f9:2a:cb:6c:85:b2:2f:71:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:DA:9A:F8:23:21:17:1E:85:74:7A:B2:A4:1C:1E:A9:80:F2:3D
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/eujamvgjIRcehXR6sqQcHqmA8j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.112.0/20
31.47.32.0/19
46.102.128.0/20
78.109.192.0/20
79.175.128.0/18
80.75.0.0/20
81.90.144.0/20
86.104.32.0/20
93.113.224.0/20
185.3.124.0/22
217.11.16.0/20
IPv6:
2a03:4680::/29
Signature Algorithm: sha256WithRSAEncryption
6a:e1:25:2f:f6:3f:8c:c0:26:d6:45:fc:0e:b1:55:52:64:dc:
84:cc:a6:03:3f:39:f4:5d:56:9a:ac:02:26:82:50:da:cf:bf:
e5:66:43:34:7d:4a:8b:7c:74:31:a8:1c:f1:a2:96:72:eb:57:
d3:fd:44:4a:8e:33:48:50:7d:bf:c1:9e:df:87:62:1c:0b:4f:
53:6f:42:b5:2b:f0:a6:0f:76:db:c2:8f:b6:0b:96:90:be:79:
04:17:5d:dd:ed:c3:f8:ae:15:95:30:19:8c:85:a9:21:7e:d8:
04:49:dd:9b:f8:11:c1:7e:6c:a6:a7:9a:49:64:bc:b6:65:31:
25:ae:85:b0:21:2a:09:73:0b:b9:8e:50:62:0b:41:bc:51:c2:
d2:3f:f6:76:38:da:46:62:b9:83:fb:e2:5d:14:ef:97:c6:df:
1d:ae:c3:e9:c3:86:89:0e:1c:47:e9:e1:81:44:c9:59:f7:c0:
34:69:bb:95:ae:a4:4b:0b:c6:f4:f9:e6:9c:54:73:50:3f:89:
84:21:44:e1:e3:97:5a:32:5f:29:e5:97:73:92:14:c3:df:4c:
29:01:2c:96:be:4a:66:41:bc:a4:2a:d6:3e:94:5b:03:ab:75:
24:9a:4c:cc:0f:54:06:dd:18:2b:93:fb:2a:aa:43:d0:58:c2:
d4:6e:d6:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:14 2025 by rpki-client