Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/ePG1M021EWxkIVoXIEuN-tH9cEc.roa
File: ePG1M021EWxkIVoXIEuN-tH9cEc.roa (raw, json)
Hash identifier: Ru+VA8Enz8zv1apvajV3TpWeax6quw9fSCcnv/SMIJ0=
Subject key identifier: 78:F1:B5:33:4D:B5:11:6C:64:21:5A:17:20:4B:8D:FA:D1:FD:70:47
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 11417BC0
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/ePG1M021EWxkIVoXIEuN-tH9cEc.roa
Signing time: Sat 01 Jan 2022 02:55:58 +0000
ROA not before: Sat 01 Jan 2022 02:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203507
IP address blocks: 193.28.13.0/24 maxlen: 24
185.123.226.0/23 maxlen: 23
185.123.226.0/24 maxlen: 24
185.123.224.0/22 maxlen: 22
185.123.224.0/23 maxlen: 23
185.123.224.0/24 maxlen: 24
185.123.225.0/24 maxlen: 24
185.123.227.0/24 maxlen: 24
5.104.152.0/22 maxlen: 22
195.245.199.0/24 maxlen: 24
212.79.224.0/19 maxlen: 19
2a06:e380:8000::/36 maxlen: 36
2a06:e380::/36 maxlen: 36
2a06:e380:8000::/48 maxlen: 48
2a06:e380::/48 maxlen: 48
2a06:e380:8001::/48 maxlen: 48
2a06:e380:1::/48 maxlen: 48
2a06:e380::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289504192 (0x11417bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Jan 1 02:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78f1b5334db5116c64215a17204b8dfad1fd7047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:45:88:ad:0f:86:90:1d:b4:96:f4:2a:66:
c1:0d:ac:0d:b9:2a:7a:c9:d3:3f:ad:e8:c6:e4:55:
26:c4:57:61:b1:c9:fa:e3:58:ad:3c:81:f7:61:2f:
2b:2f:42:98:78:d4:ee:4f:fe:8c:54:20:cc:d5:23:
de:70:29:cd:d3:74:a8:50:e8:76:6f:12:17:65:c0:
4f:81:4f:55:da:e1:2a:a8:ff:fd:cb:d6:b6:c2:71:
46:3a:0a:2e:f8:66:2a:ad:11:4e:d9:a8:87:42:9c:
c2:6a:3d:f2:b6:d6:54:77:97:71:0a:58:66:97:9d:
39:c7:a8:1e:69:bd:fe:c6:29:50:8e:d1:dc:39:46:
5a:95:4b:cd:61:11:e0:be:82:e9:7f:30:25:47:13:
41:a5:30:37:ba:83:fb:da:b5:5d:12:de:b5:2a:3b:
93:7d:2f:7b:1c:cc:fd:68:39:ce:56:ea:77:1a:7b:
82:3e:17:25:04:a7:a3:5b:ce:59:5b:b4:d9:69:61:
a7:98:57:31:38:e3:19:fd:1b:58:a2:14:bf:9e:f5:
85:23:1a:e3:fc:72:4d:ee:a4:9e:7d:6e:ea:c6:69:
17:55:cc:52:16:be:e3:b8:ee:3d:4e:87:51:0a:7a:
8b:91:ac:73:52:fb:39:86:1a:8d:c3:7a:f8:d1:c9:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F1:B5:33:4D:B5:11:6C:64:21:5A:17:20:4B:8D:FA:D1:FD:70:47
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/ePG1M021EWxkIVoXIEuN-tH9cEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.152.0/22
185.123.224.0/22
193.28.13.0/24
195.245.199.0/24
212.79.224.0/19
IPv6:
2a06:e380::/29
Signature Algorithm: sha256WithRSAEncryption
7b:a3:09:26:f0:c8:d1:6c:17:81:ca:04:0b:2e:b6:84:ed:0e:
5e:2c:ea:67:1d:b6:2d:e9:d1:29:99:a0:e7:1a:cc:4a:75:4b:
b6:99:c9:af:9f:bd:3b:0c:ca:4e:d7:78:62:03:8b:a2:80:61:
a1:6d:5a:b0:89:5d:1f:9f:c1:ca:7b:67:33:8f:22:b4:f9:7c:
d2:52:d9:08:8f:b7:80:f3:23:0b:e7:5a:70:28:66:36:07:79:
07:48:a3:7f:81:4d:ac:c8:b4:12:0b:26:e9:47:32:cc:dc:ce:
1b:30:5c:22:55:06:32:34:3b:80:b3:23:6c:a0:90:26:a3:ca:
74:0a:98:d2:eb:a1:34:a1:21:ee:aa:af:c6:c9:70:d4:09:c8:
2f:c1:22:c5:64:b4:bd:c2:9b:e0:c7:3a:24:2d:a6:e4:d7:b8:
af:af:6c:25:d6:41:a9:4b:97:1d:f9:3f:88:9a:af:35:61:5d:
85:2e:80:66:47:90:65:c7:e7:f3:e8:49:cd:e5:ec:d2:af:e5:
d4:41:8a:84:c7:cf:94:8c:ce:2a:c5:a7:09:d3:de:44:93:b3:
30:1e:89:9c:2c:d4:7d:a1:98:80:02:57:94:09:37:c7:6e:6a:
0e:a4:a1:ed:94:d6:d3:79:7a:88:1a:43:b3:87:7a:a2:bb:ea:
06:68:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:49:14 2025 by rpki-client