Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EoIfXWNR2upIGCQYSQYfhuQiGVY.roa
File: EoIfXWNR2upIGCQYSQYfhuQiGVY.roa (raw, json)
Hash identifier: j8wSP5b2ssvs29tUtsBzjh5UE8nsdKYRTnow4J+IYfk=
Subject key identifier: 12:82:1F:5D:63:51:DA:EA:48:18:24:18:49:06:1F:86:E4:22:19:56
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018529844FCD0552FBB1CCA4407F52FAF858
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EoIfXWNR2upIGCQYSQYfhuQiGVY.roa
Signing time: Mon 19 Dec 2022 08:33:34 +0000
ROA not before: Mon 19 Dec 2022 08:33:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:84:4f:cd:05:52:fb:b1:cc:a4:40:7f:52:fa:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 19 08:33:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12821f5d6351daea4818241849061f86e4221956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:16:07:ee:03:17:a8:3a:e1:65:25:10:0b:
33:46:ea:b7:ab:f3:2e:84:27:9e:e9:cc:77:d7:d0:
85:7b:aa:81:8f:bc:7d:a8:42:9c:4d:e0:30:2c:8f:
62:56:af:2d:81:2f:f7:b2:9e:23:0d:17:18:4e:c2:
92:1e:44:56:73:12:b0:1b:42:82:ef:fd:05:1e:34:
52:60:dc:f9:a5:35:f8:9b:e6:de:a4:ac:21:42:fb:
9c:e0:55:69:c2:73:a0:f9:f9:17:e8:ac:be:d2:bb:
8b:4d:3f:4e:fe:ba:e3:5b:13:f4:5e:4a:b0:e9:58:
ee:0c:30:b5:17:e5:a8:57:66:65:64:a4:98:68:46:
18:18:f7:eb:df:e8:cc:36:f5:9b:03:1e:78:4c:f8:
76:70:10:92:e5:52:50:28:67:dd:d0:ff:76:d9:ea:
b3:9d:b7:64:92:65:b5:47:fe:67:ab:ba:74:9d:2a:
20:91:3e:9e:9a:18:ac:0e:e4:e3:29:7b:dd:23:b8:
ca:b3:b5:f8:1f:23:3f:18:8b:7a:f2:e9:31:37:e4:
a3:79:94:de:f5:2a:73:88:b3:40:34:f7:39:41:fd:
29:f6:46:32:d5:82:be:c2:6a:e2:19:e3:49:3d:e2:
72:af:2f:0e:a9:ca:4b:ff:56:be:ab:21:6d:17:3f:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:1F:5D:63:51:DA:EA:48:18:24:18:49:06:1F:86:E4:22:19:56
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EoIfXWNR2upIGCQYSQYfhuQiGVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
57:96:d2:bb:3b:d7:5b:90:6d:80:c1:a8:49:c9:ab:b4:95:d1:
e1:b3:c1:3d:fc:46:c0:40:04:b9:72:fc:b9:0a:b7:b5:da:7d:
85:29:a8:67:e5:7f:aa:4c:c2:68:26:e4:66:26:27:7c:76:25:
a6:d0:79:2b:8a:93:63:17:fd:a1:6f:b4:69:e7:b9:4d:07:1c:
80:4a:4f:bf:9d:aa:00:d5:65:c9:93:2f:04:f4:69:7e:29:ca:
6b:33:b1:79:2e:94:8b:f3:b0:86:99:bc:df:ba:6a:aa:24:83:
e0:34:7b:ef:40:0e:7c:6b:30:bb:f3:22:77:fc:24:4f:11:13:
55:33:03:6e:e8:cb:9f:26:ab:94:4b:4a:9c:04:e9:3a:9f:d5:
d3:24:66:23:cb:43:e6:92:98:16:ac:3b:87:86:74:3f:d9:ae:
db:b8:25:ed:13:ba:99:ab:41:a8:d7:fd:5e:36:15:a3:6e:25:
3e:8d:72:ba:f9:5f:33:86:eb:ed:85:9b:d5:c4:f0:52:38:6c:
8b:1c:f6:1f:fe:b1:81:d0:fb:4a:61:d0:e5:5a:da:5e:51:ff:
51:30:8b:e8:f1:cb:7c:08:90:33:77:38:03:84:4c:ff:55:69:
bf:13:2e:97:68:d6:4b:eb:c4:5b:ed:5a:6e:47:6b:21:1d:1b:
f3:b9:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:53:11 2025 by rpki-client