Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EqmOi84V5sjgR8ANztQ7JKCUnPo.roa
File: EqmOi84V5sjgR8ANztQ7JKCUnPo.roa (raw, json)
Hash identifier: MZHXNmHIOACmCzq3eIkHY9A8Hoqk04KnYAObo7Ygdjc=
Subject key identifier: 12:A9:8E:8B:CE:15:E6:C8:E0:47:C0:0D:CE:D4:3B:24:A0:94:9C:FA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C0108C6B37F840924825BEF824032B2BA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EqmOi84V5sjgR8ANztQ7JKCUnPo.roa
Signing time: Fri 24 Nov 2023 11:13:21 +0000
ROA not before: Fri 24 Nov 2023 11:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197992
IP address blocks: 194.33.32.0/24 maxlen: 24
2a0f:7f00::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a13:d300::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a0a:2340::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:08:c6:b3:7f:84:09:24:82:5b:ef:82:40:32:b2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 24 11:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12a98e8bce15e6c8e047c00dced43b24a0949cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ae:f5:9b:f2:03:41:3b:bc:74:9b:f0:a4:44:
56:b6:f3:a1:eb:73:fb:f9:3a:3e:77:54:1d:66:5d:
41:70:e3:e8:66:c8:8b:c6:5d:fc:04:1c:48:ef:c5:
14:d9:69:3d:c2:c2:2e:5c:9f:1b:38:8e:73:34:53:
89:9c:05:a8:bc:dd:b7:c8:66:8b:51:1e:08:b7:74:
41:40:de:a5:e9:93:bc:62:44:59:25:2f:cd:61:68:
b5:62:ad:5a:dd:0c:22:72:92:71:d0:83:a2:7a:a0:
12:9e:01:d4:8e:9b:7e:bd:00:74:8f:7b:10:6d:e4:
8e:32:f9:ac:79:ed:bc:ad:1e:2c:37:5b:07:da:87:
36:75:84:67:f3:9e:24:d1:80:59:d2:94:27:6e:8b:
fc:07:7b:a1:4e:3a:c0:35:fd:d2:c8:77:e9:53:6a:
9d:0d:fe:72:b3:02:3c:e3:e1:0e:ac:d3:4c:ac:a2:
cb:76:3b:d6:f3:f2:27:af:dd:56:37:2a:8b:d2:9d:
2a:66:11:d3:42:fc:58:52:63:3f:33:d4:2a:92:a9:
d3:a0:ed:e6:c9:6a:18:76:ed:c0:a2:80:69:6b:d5:
c3:fc:fe:95:75:ea:6e:28:28:d8:b7:99:d2:1c:96:
c6:ae:be:a2:ac:c8:7a:fd:a0:3d:5e:d0:7a:ab:3a:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:8E:8B:CE:15:E6:C8:E0:47:C0:0D:CE:D4:3B:24:A0:94:9C:FA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EqmOi84V5sjgR8ANztQ7JKCUnPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.32.0/24
IPv6:
2a06:b5c0::/29
2a06:bf40::/29
2a06:dfc0::/29
2a07:95c0::/29
2a07:a300::/29
2a0a:2340::/29
2a0e:5a80::/29
2a0f:7f00::/29
2a12:d540::/29
2a13:200::/29
2a13:d300::/29
Signature Algorithm: sha256WithRSAEncryption
ca:66:43:e5:ac:d5:08:66:46:4d:3e:31:46:62:0a:21:ec:7f:
a6:98:5b:c4:37:7b:96:50:89:46:cb:da:e6:28:d1:0c:37:9d:
76:b9:25:3b:23:82:89:bb:4a:29:1f:a2:fa:8a:52:4a:04:cf:
48:e5:b3:29:c4:d8:19:5c:7c:62:de:85:21:59:c7:5c:a3:1a:
25:b5:b1:85:76:5e:1e:08:48:63:11:e0:9e:36:3e:a9:47:8f:
44:fb:a0:9e:b3:af:63:f3:bd:10:70:50:21:15:9f:66:fa:75:
07:47:3e:63:48:62:3f:e9:0f:ad:11:74:50:c3:53:80:05:ff:
e3:2f:67:5b:93:1a:fc:9c:bb:85:ba:f6:f9:84:61:8f:54:ba:
7e:6c:12:14:53:69:60:c4:97:ae:f0:4a:a2:f2:cd:e5:0f:39:
30:03:50:e7:a4:a8:76:58:9b:0d:b7:d2:75:98:26:09:1f:cb:
44:7e:b0:d4:2a:04:50:7b:4b:87:78:21:a8:a6:83:fd:ed:a9:
61:62:f2:c7:76:ec:25:ac:d7:ff:9e:36:22:b2:d6:c3:46:8d:
c3:3a:aa:36:14:ed:5a:7e:6f:18:4c:a3:f1:b6:8d:63:54:3e:
9b:1e:28:8a:de:40:39:03:ac:60:48:de:78:81:59:52:68:ec:
bb:b6:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:20:18 2025 by rpki-client