Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/EuFVob526ZHh08PqwP1zRj_3mgU.roa
File: EuFVob526ZHh08PqwP1zRj_3mgU.roa (raw, json)
Hash identifier: 2RKg1dcIw1x+I2mjAp6himlpOjXMWxoxAl7gvR2rzBA=
Subject key identifier: 12:E1:55:A1:BE:76:E9:91:E1:D3:C3:EA:C0:FD:73:46:3F:F7:9A:05
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 01856B9331213CBAB1ED8BFFA3DC5E3E4CBD
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/EuFVob526ZHh08PqwP1zRj_3mgU.roa
Signing time: Sun 01 Jan 2023 04:24:46 +0000
ROA not before: Sun 01 Jan 2023 04:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12693
IP address blocks: 185.178.24.0/22 maxlen: 22
213.208.44.0/22 maxlen: 22
213.208.40.0/22 maxlen: 22
213.208.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:31:21:3c:ba:b1:ed:8b:ff:a3:dc:5e:3e:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Jan 1 04:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12e155a1be76e991e1d3c3eac0fd73463ff79a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:15:64:8f:9a:0f:2d:18:05:62:9f:b2:fd:43:
f0:a3:45:5c:de:57:fb:30:e5:64:03:dc:76:40:f6:
b6:7a:05:ff:5b:d2:3b:57:31:3b:d1:dc:50:f7:ee:
f2:98:73:91:eb:9c:2f:5d:2d:37:a1:46:f5:29:99:
be:26:fc:94:cb:34:c0:6a:33:09:f1:74:ef:4d:c5:
9b:21:87:a0:3a:9d:4b:c4:03:26:7b:cc:54:33:5f:
f5:00:4f:8e:ea:df:ac:42:9e:44:b8:7e:0a:b7:54:
b4:f5:f1:02:8a:18:56:13:63:d6:c1:c4:8d:01:04:
99:fb:8e:17:16:bf:4a:99:ba:50:f9:3b:c7:25:e1:
89:46:4c:12:72:ec:48:5b:d7:e9:52:c2:7e:be:7e:
7f:e3:02:ae:6a:a7:35:26:de:0b:f7:50:99:f2:4b:
37:5b:79:bf:2b:99:5a:f2:3b:c9:44:93:24:2f:c2:
84:a0:21:d5:b0:e5:6f:82:aa:f5:b2:31:3e:05:58:
12:ba:34:7c:f7:3b:8b:ba:2d:ba:3e:33:c8:3a:3c:
6f:b3:4c:7c:6c:41:b7:75:0c:a4:f3:76:6f:db:12:
c8:4b:78:1a:af:40:df:a6:2b:ea:d5:40:9e:67:9f:
78:49:a8:fc:5e:30:86:71:04:c3:52:b7:56:35:9e:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E1:55:A1:BE:76:E9:91:E1:D3:C3:EA:C0:FD:73:46:3F:F7:9A:05
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/EuFVob526ZHh08PqwP1zRj_3mgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.24.0/22
213.208.40.0-213.208.51.255
Signature Algorithm: sha256WithRSAEncryption
21:50:99:d5:5b:b2:7d:1f:3a:31:58:6b:4d:10:ae:95:8e:bf:
f7:67:21:12:09:99:16:16:57:b6:09:a5:bf:6b:4a:43:db:d6:
ec:ee:35:c3:92:9b:59:c6:53:bf:6a:47:b5:1a:53:23:ba:e3:
37:b8:79:20:a0:4c:db:7c:4c:52:93:97:44:4b:f4:0f:29:2f:
66:4a:84:4c:7b:df:e8:0d:8e:f4:ba:fc:d2:ee:33:74:93:26:
b7:0e:b1:07:59:ca:0e:06:8f:8d:74:e0:77:eb:46:fe:0c:3f:
95:84:fd:33:60:27:68:57:9a:8d:bc:cc:93:ab:a1:56:10:a2:
e5:b6:98:9f:b9:97:e8:40:1a:dd:a4:f4:ea:c4:14:8d:8b:41:
9b:48:cd:57:ca:c4:cb:7b:dd:39:d8:77:8c:81:77:57:29:66:
03:16:84:cb:46:43:ba:c3:ac:d2:3f:1f:57:33:0c:03:fe:eb:
83:32:d9:fd:86:37:b9:0b:e5:d3:14:ab:b9:eb:50:03:13:7a:
f3:58:a6:ac:0c:27:e9:aa:39:90:a6:32:86:5c:75:15:cb:72:
29:7e:a6:64:ca:98:78:bc:2d:25:cb:2a:b2:53:f5:26:93:2e:
28:0c:b5:a6:6f:07:bc:bc:a6:96:bd:39:e4:ef:59:8f:76:a7:
1e:63:de:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 11 05:19:26 2025 by rpki-client