Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/EUbvyxam-7sGE9mHNPYIoNFXpPU.roa
File: EUbvyxam-7sGE9mHNPYIoNFXpPU.roa (raw, json)
Hash identifier: JRrg3OZA5aDa9ej5DnwoL349YQaa4eCW/jpeVaxyaBI=
Subject key identifier: 11:46:EF:CB:16:A6:FB:BB:06:13:D9:87:34:F6:08:A0:D1:57:A4:F5
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 01898C523BCF347EBA46617CB028FF691F01
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/EUbvyxam-7sGE9mHNPYIoNFXpPU.roa
Signing time: Tue 25 Jul 2023 09:12:26 +0000
ROA not before: Tue 25 Jul 2023 09:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 193.31.7.0/24 maxlen: 24
45.182.188.0/24 maxlen: 24
85.193.79.0/24 maxlen: 24
83.229.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:52:3b:cf:34:7e:ba:46:61:7c:b0:28:ff:69:1f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Jul 25 09:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1146efcb16a6fbbb0613d98734f608a0d157a4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:32:55:35:5d:da:f7:8b:c1:f9:a5:2c:37:
5a:bd:d6:2a:09:d7:4b:45:b4:4f:94:d0:84:ba:a6:
9b:70:98:81:05:c5:79:0e:11:46:22:c8:a8:ce:05:
f4:9b:6b:6e:cd:d4:4f:8c:80:f8:d9:54:d3:8f:4a:
f1:d3:54:10:48:7e:aa:ba:b4:70:c9:f6:12:6b:b9:
e0:7d:5f:50:ad:4e:5a:06:ad:30:76:52:dc:78:d9:
ca:78:fd:fa:69:6c:e1:39:b6:4a:88:7e:c9:4b:32:
ee:47:b2:f0:ff:4d:29:9a:37:94:37:7c:4a:ee:46:
54:48:60:02:ec:79:e1:ea:7c:7b:61:3e:85:3a:70:
60:b3:fc:bf:a5:18:b2:ce:1a:63:88:57:46:c6:ea:
8a:dd:c1:9f:6b:12:f3:e6:9f:17:db:04:4f:01:c5:
28:ea:03:20:84:9d:8b:33:73:43:da:69:4b:e0:90:
5b:6b:92:c2:45:01:58:45:f4:26:04:4c:33:06:bb:
ac:26:2e:3b:ca:4a:1e:d1:94:7e:17:d0:96:ca:d6:
28:43:90:11:9c:c1:f8:cf:b1:8b:99:a6:ee:19:f0:
6d:8c:0a:13:6d:05:57:49:51:6f:c4:97:85:86:a2:
2c:f5:0f:5f:80:b3:87:23:0c:8d:0c:8a:31:ab:32:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:EF:CB:16:A6:FB:BB:06:13:D9:87:34:F6:08:A0:D1:57:A4:F5
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/EUbvyxam-7sGE9mHNPYIoNFXpPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.188.0/24
83.229.62.0/24
85.193.79.0/24
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
52:95:ae:a6:b9:e7:a8:06:90:6f:26:ff:3a:5a:7d:91:2e:4e:
83:5d:7c:3d:5e:fe:23:1e:e6:e9:36:e3:0c:ca:bf:ec:93:31:
d0:bd:da:61:f0:24:60:32:bc:0a:c5:31:23:c1:f4:3f:52:a7:
f4:ea:c9:5d:2d:26:e5:a5:91:5c:89:ff:4c:97:0a:74:0e:5f:
ce:f1:45:f4:2a:bd:7d:df:b2:1a:d6:e3:f8:0a:f8:ec:4e:1f:
6c:23:9c:ad:44:a6:a8:b6:aa:49:b8:1b:46:3f:a8:48:50:42:
31:e8:f9:66:c9:a1:d0:92:6a:2c:9b:ec:93:0e:aa:5f:16:0b:
27:a9:7c:bd:e4:e5:91:a5:30:56:19:a4:0f:69:dc:ff:aa:98:
5d:12:19:95:84:46:5c:e7:55:0c:0a:ed:42:f7:59:08:1d:40:
b2:70:e5:c0:b5:42:b1:da:3c:f3:47:8f:7f:89:a2:b9:f3:b6:
7e:07:60:44:4e:e4:dd:57:43:aa:a4:2d:1e:5d:5d:6c:07:3d:
3a:11:a4:41:ce:b1:32:40:7c:e8:7f:ea:64:c7:66:1b:87:e8:
e6:2d:4e:97:84:5a:7b:16:9f:cc:85:79:9d:e7:16:74:d1:5b:
91:5e:fe:91:f6:79:b4:94:ae:5d:9a:90:d9:e6:24:88:fe:b1:
6f:9e:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:15 2025 by rpki-client