Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/eokukPZsShkQEcXZXVVro0XBDEM.roa
File: eokukPZsShkQEcXZXVVro0XBDEM.roa (raw, json)
Hash identifier: +jxBjHC9i5RdzKxBJZLIE+WbqWfj97aTD6D0DsMYQy0=
Subject key identifier: 7A:89:2E:90:F6:6C:4A:19:10:11:C5:D9:5D:55:6B:A3:45:C1:0C:43
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 07C6A41D
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/eokukPZsShkQEcXZXVVro0XBDEM.roa
Signing time: Sat 01 Jan 2022 09:53:56 +0000
ROA not before: Sat 01 Jan 2022 09:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29997
IP address blocks: 194.62.183.0/24 maxlen: 24
194.62.180.0/24 maxlen: 24
194.62.182.0/24 maxlen: 24
194.62.181.0/24 maxlen: 24
2a07:dc00:1820::/44 maxlen: 44
2a07:dc00:2550::/44 maxlen: 44
2a07:dc00:1830::/44 maxlen: 44
2a07:dc00:1810::/44 maxlen: 44
2a07:dc00:180::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130458653 (0x7c6a41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jan 1 09:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a892e90f66c4a191011c5d95d556ba345c10c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:ac:c8:62:5f:fd:3f:c5:48:79:5c:90:46:
63:5e:48:8f:df:7d:ba:cb:35:4e:b9:8c:ba:ff:46:
56:de:eb:4c:81:86:3c:6c:a3:c1:77:c2:39:a9:38:
d4:67:ac:2d:8c:c3:0f:ac:95:63:e0:c4:96:52:1d:
85:23:18:ec:4d:14:19:75:3f:df:96:62:2a:6d:f5:
43:ef:82:c9:f0:48:d3:ca:ff:2e:5f:be:26:0a:41:
1f:d6:5e:26:49:bd:aa:1f:a7:6e:55:d5:b8:4f:31:
ff:20:b7:0e:59:ff:f6:05:43:01:54:2d:31:52:04:
dd:a5:32:b3:c0:3b:b0:ac:ac:6c:ac:c0:14:8c:20:
1a:42:c6:4a:6e:3e:c9:b4:3b:7c:3f:c2:6c:ae:ae:
1f:db:ab:f3:36:4c:da:41:35:79:85:6c:d9:af:34:
68:2f:06:6b:9b:4a:37:00:ab:dd:07:60:fd:fc:14:
b3:96:27:f6:57:61:0f:45:29:a8:c3:73:d4:2b:96:
44:8d:33:bd:f1:98:40:65:c8:17:cc:cb:9b:64:f2:
ec:c8:3b:4f:39:f3:4e:2e:01:3e:15:d4:93:e9:d5:
09:d2:35:83:e6:37:44:cd:43:d4:22:10:1c:32:18:
61:08:64:bf:ae:cb:99:d1:de:01:82:4a:44:34:12:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:2E:90:F6:6C:4A:19:10:11:C5:D9:5D:55:6B:A3:45:C1:0C:43
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/eokukPZsShkQEcXZXVVro0XBDEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.180.0/22
IPv6:
2a07:dc00:180::/44
2a07:dc00:1810::-2a07:dc00:183f:ffff:ffff:ffff:ffff:ffff
2a07:dc00:2550::/44
Signature Algorithm: sha256WithRSAEncryption
4b:84:ac:19:f1:a5:3a:a8:88:0d:6f:d5:d9:9a:6f:63:2d:9b:
99:0c:db:ce:8b:ed:b5:b9:d1:4e:da:73:ee:82:9e:46:d4:24:
66:55:2c:7f:3e:53:d2:09:73:57:19:7f:2d:0b:de:51:1f:c6:
03:e1:f6:a4:79:da:bb:87:9b:d6:e3:da:25:32:7f:be:ad:61:
13:47:bc:a6:45:27:94:99:75:05:b4:dc:52:4e:17:3a:ca:55:
9f:ea:fd:da:2a:5d:55:32:a1:1e:6f:74:1c:05:e2:a0:6a:33:
f1:3b:9b:6b:2c:5d:84:c9:00:f5:3d:1c:0d:7a:84:dd:cf:6b:
88:27:0f:99:9b:63:e3:2f:88:44:8a:2d:bc:ec:b4:5b:b1:fa:
5c:20:16:f0:95:3e:fb:91:59:04:5c:6e:34:c2:2d:d3:ac:95:
16:4c:ea:b6:55:78:7e:41:10:16:79:e6:16:13:46:3a:11:83:
8c:d5:93:28:c3:f1:66:4c:c3:0e:54:11:c7:df:17:d9:75:57:
9f:ca:5e:3f:2c:95:cf:4a:68:f7:9b:f3:76:c6:de:3d:df:e5:
62:0c:c9:4c:81:6b:6e:31:d2:d6:13:9e:14:6f:2b:1a:f9:e0:
6b:46:8e:c7:60:ed:28:dd:e6:36:7a:99:aa:3a:42:86:07:58:
e4:27:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:40 2024 by rpki-client on console-fra.rpki-client.org