Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EbLhzTZRK8TipuSsd-tMr2JTYDE.roa
File: EbLhzTZRK8TipuSsd-tMr2JTYDE.roa (raw, json)
Hash identifier: 2iRFC0KZ+fn6pHJhpaurpqbSpEQZxaYZzKcJKDgUNGQ=
Subject key identifier: 11:B2:E1:CD:36:51:2B:C4:E2:A6:E4:AC:77:EB:4C:AF:62:53:60:31
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01793BF2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EbLhzTZRK8TipuSsd-tMr2JTYDE.roa
Signing time: Thu 13 Jan 2022 00:01:30 +0000
ROA not before: Thu 13 Jan 2022 00:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.208.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0f:a203::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0f:3d83::/32 maxlen: 32
2a0e:2240:3::/48 maxlen: 48
2a0f:3d81::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:a201::/32 maxlen: 32
2a0f:a204::/32 maxlen: 32
2a0e:f201::/32 maxlen: 32
2a0f:3d86::/32 maxlen: 32
2a0f:a207::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:a200::/32 maxlen: 32
2a0f:a206::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
2a0f:a205::/32 maxlen: 32
2a0f:3d85::/32 maxlen: 32
2a0f:a202::/32 maxlen: 32
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24722418 (0x1793bf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 13 00:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11b2e1cd36512bc4e2a6e4ac77eb4caf62536031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:c0:44:3d:83:bf:1a:a0:88:ac:a3:37:c0:
be:6f:3f:23:01:d5:b1:17:20:8b:d0:d2:c1:ac:fb:
e7:45:e1:8c:22:55:4c:0d:cc:89:1c:55:60:64:8b:
42:64:6c:a7:30:ed:e3:8c:01:5e:28:13:ad:1c:93:
65:dd:9f:d7:1d:1d:e9:54:2d:83:d4:83:3f:05:7f:
fb:a5:2a:fb:2e:99:1e:b5:98:e6:b1:f5:c8:1e:85:
56:32:e6:71:55:e3:ce:cb:c9:f6:a6:f5:7d:a4:e7:
d5:c4:9f:93:17:e5:14:e7:9e:a4:bf:9f:41:1d:4b:
4b:3a:c7:78:fd:bc:d3:ab:06:74:0d:39:da:ab:ca:
f6:0d:12:d6:af:2f:ec:de:03:00:f5:ea:99:b6:6a:
a3:e3:e1:e8:25:d2:b7:03:ae:eb:3d:08:09:cc:22:
a3:a5:85:1c:f2:2d:7d:ed:0b:ae:ef:b5:a7:92:83:
b5:ac:da:d5:c8:89:44:4a:36:61:60:7e:fd:fa:b4:
1d:b0:d6:68:be:35:f6:d9:d0:ab:7c:98:8a:d1:9e:
71:90:62:fa:68:50:23:93:6d:72:42:54:b6:4b:34:
ad:44:ec:b5:f0:d3:3d:b2:44:91:af:09:78:35:6e:
cc:fb:ca:dd:05:97:c9:77:ec:a1:b5:45:65:97:20:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:E1:CD:36:51:2B:C4:E2:A6:E4:AC:77:EB:4C:AF:62:53:60:31
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EbLhzTZRK8TipuSsd-tMr2JTYDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.208.0/24
45.91.211.0/24
193.39.143.0/24
193.39.208.0/24
193.41.38.0/23
IPv6:
2a0e:2240:2::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0e:f201::/32
2a0f:3d81::-2a0f:3d87:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/29
Signature Algorithm: sha256WithRSAEncryption
5c:48:c9:c2:b6:e5:2f:9d:9b:95:21:ee:38:bd:a2:ee:a1:7b:
27:09:85:f5:c1:2b:7d:4f:99:66:da:a0:6f:06:d5:16:17:15:
15:87:2b:7a:b0:36:60:c3:1a:44:52:cc:86:d2:86:a5:6e:ec:
f1:7c:fb:61:6c:8d:09:ad:d8:35:11:89:41:0b:96:bd:e8:0f:
95:b1:fc:a3:6a:91:82:d4:6b:e0:e0:96:f0:30:d0:a3:21:f7:
af:2a:fd:47:b5:24:89:de:96:d4:ae:44:b9:8d:e7:02:5f:9d:
f6:a9:f8:8c:01:fe:7b:14:17:b0:02:a4:c4:09:fc:c0:88:ca:
6d:1a:81:72:ad:da:e1:3a:67:03:17:ed:42:48:6f:4a:7c:46:
1d:99:f2:22:16:f4:38:a4:e7:ee:1c:7a:45:e9:f2:4b:09:1f:
90:be:66:fb:da:0a:9c:1e:76:5e:65:d5:9f:67:2d:94:d9:65:
87:90:72:30:2e:ee:42:cd:64:b9:6d:aa:d5:d0:3f:60:41:2d:
03:ed:1f:de:5a:7e:5a:91:47:b2:53:04:34:67:fd:25:bb:4a:
21:d1:48:73:6f:86:b3:63:3a:9c:64:24:db:b9:4e:a7:4f:28:
c0:7d:79:d3:f5:ce:04:e2:cc:d6:1b:2b:5e:97:0d:47:86:57:
a5:28:ae:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:55 2025 by rpki-client