Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/eu64QQNNcf9CqQMuZ0YFVKt0e64.roa
File: eu64QQNNcf9CqQMuZ0YFVKt0e64.roa (raw, json)
Hash identifier: uvqADLDZbsLhEUtn7nZ02UOis+w+tah4smjfJUimhrs=
Subject key identifier: 7A:EE:B8:41:03:4D:71:FF:42:A9:03:2E:67:46:05:54:AB:74:7B:AE
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 01856F0B63C72283791D68BD443AE39A39A5
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/eu64QQNNcf9CqQMuZ0YFVKt0e64.roa
Signing time: Sun 01 Jan 2023 20:34:55 +0000
ROA not before: Sun 01 Jan 2023 20:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50691
IP address blocks: 109.236.249.0/24 maxlen: 24
213.128.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:63:c7:22:83:79:1d:68:bd:44:3a:e3:9a:39:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 20:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aeeb841034d71ff42a9032e67460554ab747bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:a9:73:0f:fa:d2:5a:09:52:61:ba:c2:2e:
e4:6a:a2:b6:8e:3a:10:ed:41:18:e9:69:75:56:a1:
77:45:e2:0c:79:aa:08:21:aa:38:df:b0:eb:b0:56:
c7:05:d7:47:25:43:20:a1:6e:08:28:0b:8b:20:1b:
a6:9c:f1:09:2c:47:f4:4b:e1:37:5a:7e:45:1b:44:
48:76:86:94:d7:2f:bc:5b:a3:46:36:60:73:20:20:
8a:71:93:59:da:35:30:8c:2e:4d:5c:40:09:30:09:
93:4c:d1:1a:9e:65:1b:75:a7:60:bf:c2:11:e0:d1:
b2:b0:c2:e9:2f:71:e5:ed:09:b4:b1:89:f8:f8:ab:
4d:e2:de:14:82:d0:90:3a:37:c1:44:9b:6d:4c:36:
11:2a:ac:c8:a0:92:2a:93:6c:71:b1:9e:bb:a8:a8:
ae:12:99:82:57:c4:22:44:05:d4:bc:ed:c3:94:7f:
79:99:08:0d:8b:e8:94:30:66:0e:5c:33:72:9e:33:
93:fb:d7:ba:b9:7d:0a:51:47:03:a4:7e:36:56:e9:
98:f2:c6:80:c4:a1:0a:a8:0a:fd:3b:03:e4:45:9a:
20:f8:22:62:f6:58:9a:b2:ee:2f:85:04:7b:84:3e:
71:8f:32:dd:a5:84:15:d3:22:07:e6:a7:eb:c2:4d:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:B8:41:03:4D:71:FF:42:A9:03:2E:67:46:05:54:AB:74:7B:AE
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/eu64QQNNcf9CqQMuZ0YFVKt0e64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.249.0/24
213.128.220.0/22
Signature Algorithm: sha256WithRSAEncryption
48:8d:55:da:d1:c3:44:2b:2a:ea:36:cc:32:ed:7e:65:26:fb:
51:b0:ee:a9:a4:8b:4c:4d:2b:40:c1:46:03:34:f7:6d:52:6f:
a2:95:7f:af:37:88:44:9d:96:8a:30:eb:95:f7:ea:41:94:36:
b7:8b:5b:cf:23:d1:24:7d:57:5a:9e:58:08:1d:66:35:6a:97:
69:2f:ff:26:47:a6:c6:fc:b4:33:a0:38:f7:14:f4:ad:2f:5d:
5e:1e:21:36:43:7e:8e:f6:fd:2a:fc:af:bc:29:35:c8:41:ff:
92:46:8e:68:86:6c:82:db:d6:71:c3:ec:4a:64:7b:49:ca:d5:
1f:80:b8:3b:6a:7d:74:93:94:9c:e4:c7:17:ba:46:26:93:84:
a8:56:59:24:f6:03:4e:9f:e0:91:86:40:27:1e:6a:4d:33:82:
ad:ff:be:00:d7:72:5d:d7:6f:b2:b4:52:b3:4e:d5:5b:40:07:
e4:ba:de:3c:7d:32:73:84:85:52:2b:e5:5f:30:f9:e5:02:64:
1a:be:f3:ef:f5:63:a7:8a:b9:89:ea:96:ac:c9:2a:66:e5:47:
f0:52:7d:41:ac:89:e0:7a:12:94:d4:e8:0c:81:c5:12:53:d7:
87:c2:92:10:ce:f1:30:10:b6:92:0e:e0:70:11:fc:40:57:c4:
e0:2d:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:29 2025 by rpki-client