Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/EA3t6CAEGdtsdZSJPtoTJHKhvxY.roa
File: EA3t6CAEGdtsdZSJPtoTJHKhvxY.roa (raw, json)
Hash identifier: /AVPANFyJosIqeks642Js2xXQ1DbZY//3ZrZyCod0E4=
Subject key identifier: 10:0D:ED:E8:20:04:19:DB:6C:75:94:89:3E:DA:13:24:72:A1:BF:16
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 0183D5F7F401957FBBB064818EC5195F0F88
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/EA3t6CAEGdtsdZSJPtoTJHKhvxY.roa
Signing time: Fri 14 Oct 2022 10:09:00 +0000
ROA not before: Fri 14 Oct 2022 10:09:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207777
IP address blocks: 195.182.29.0/24 maxlen: 24
195.182.27.0/24 maxlen: 24
195.182.37.0/24 maxlen: 24
195.182.24.0/24 maxlen: 24
2a13:7c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:f7:f4:01:95:7f:bb:b0:64:81:8e:c5:19:5f:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Oct 14 10:09:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=100dede8200419db6c7594893eda132472a1bf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:81:a8:52:cb:0b:67:67:17:b5:13:08:2a:
ce:89:ad:d6:c5:7a:d0:20:4e:73:d3:4d:f5:e1:5c:
e0:b0:a8:71:a5:bb:ac:0b:ec:a0:b4:b8:e3:3d:00:
76:89:ff:28:2f:18:c6:aa:bc:3f:85:d5:d6:2a:fa:
d5:ff:ed:99:c6:47:8b:e5:c7:15:87:c3:8a:e6:3f:
94:80:7a:8e:aa:80:92:ac:32:fe:49:0f:15:f3:44:
13:82:5c:37:de:64:c8:ec:b1:cf:a5:27:44:fc:a6:
77:cc:30:01:a5:86:cf:7f:52:35:be:6b:30:a8:1c:
d6:3f:d9:35:95:73:2b:cd:e1:8e:5a:c3:a1:e6:a1:
cc:a8:72:6c:15:97:f5:83:10:99:bb:61:cf:64:76:
99:28:1a:73:14:08:07:69:47:a2:09:ba:47:cb:b7:
d4:ae:96:3c:11:2e:de:c6:3e:20:fd:cf:46:a2:81:
2b:b7:a1:f2:0e:0a:12:bf:2b:e7:c5:5f:f8:00:33:
bd:5f:56:62:bd:9d:d9:c5:44:f4:6c:9b:3f:c9:40:
ff:e4:61:dd:2f:b9:fb:3b:2b:97:90:06:57:9e:4e:
40:51:c0:06:99:32:d7:ae:35:1c:a2:c5:35:33:32:
c4:f2:f0:18:2e:03:3b:5b:b6:90:14:60:9a:20:b6:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:ED:E8:20:04:19:DB:6C:75:94:89:3E:DA:13:24:72:A1:BF:16
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/EA3t6CAEGdtsdZSJPtoTJHKhvxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.24.0/24
195.182.27.0/24
195.182.29.0/24
195.182.37.0/24
IPv6:
2a13:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:65:21:34:2b:a3:8f:ea:a0:5a:d8:1a:06:48:67:a7:68:8b:
28:c1:fe:a9:1c:fe:d1:e7:a8:62:b0:cf:15:30:9d:ed:08:3c:
7d:fc:e1:3c:a2:d5:35:53:95:56:56:fe:5d:6f:de:b4:79:a8:
93:aa:d0:a0:1d:55:5f:06:3e:9c:a4:cf:38:f9:43:bd:9d:fc:
91:6f:02:9f:36:b4:f4:9a:8d:2f:0a:87:43:5d:1e:7d:58:f8:
fe:e7:a9:75:e9:ba:6e:7b:af:9c:b9:e3:2f:e8:19:3f:c6:91:
50:df:5a:5a:be:e6:06:85:40:bd:cf:18:90:0c:10:44:38:58:
01:12:a2:8a:36:18:00:2c:de:3b:91:a1:72:60:29:8e:a7:ff:
0f:01:5c:51:4b:dc:ab:2f:a8:db:f0:46:ba:d2:26:24:52:10:
bb:a9:b2:4f:ae:52:49:d0:cc:10:89:5e:4f:30:e0:5e:8d:8e:
10:bc:61:be:89:2e:47:8b:e8:36:55:58:69:d7:78:99:70:2f:
11:55:70:6b:36:0f:79:c5:17:2a:92:ac:25:03:0f:71:60:15:
d7:33:cd:11:af:a3:55:94:d3:07:72:92:02:cc:2f:e0:6f:bd:
4f:06:9b:fb:6b:4c:04:c2:4d:27:15:ac:ab:a1:c4:4c:98:1b:
e0:f1:fb:30
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYPV9/QBlX+7sGSBjsUZXw+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2
NmU3ZGUwHhcNMjIxMDE0MTAwOTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDBkZWRlODIwMDQxOWRiNmM3NTk0ODkzZWRhMTMyNDcyYTFiZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtmBqFLLC2dnF7UTCCrOia3WxXrQ
IE5z00314VzgsKhxpbusC+ygtLjjPQB2if8oLxjGqrw/hdXWKvrV/+2ZxkeL5ccV
h8OK5j+UgHqOqoCSrDL+SQ8V80QTglw33mTI7LHPpSdE/KZ3zDABpYbPf1I1vmsw
qBzWP9k1lXMrzeGOWsOh5qHMqHJsFZf1gxCZu2HPZHaZKBpzFAgHaUeiCbpHy7fU
rpY8ES7exj4g/c9GooErt6HyDgoSvyvnxV/4ADO9X1ZivZ3ZxUT0bJs/yUD/5GHd
L7n7OyuXkAZXnk5AUcAGmTLXrjUcosU1MzLE8vAYLgM7W7aQFGCaILbG3QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBAN7eggBBnbbHWUiT7aEyRyob8WMB8GA1UdIwQY
MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt
ZDk1N2I4YzU0Yzk0LzEvRUEzdDZDQUVHZHRzZFpTSlB0b1RKSEtodnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0
LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAw7YYAwQA
w7YbAwQAw7YdAwQAw7YlMA0EAgACMAcDBQMqEwfAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3ZSE0K6OP6qBa2BoGSGenaIsowf6pHP7R56hisM8VMJ3tCDx9/OE8otU1U5VW
Vv5db960eaiTqtCgHVVfBj6cpM84+UO9nfyRbwKfNrT0mo0vCodDXR59WPj+56l1
6bpue6+cueMv6Bk/xpFQ31pavuYGhUC9zxiQDBBEOFgBEqKKNhgALN47kaFyYCmO
p/8PAVxRS9yrL6jb8Ea60iYkUhC7qbJPrlJJ0MwQiV5PMOBejY4QvGG+iS5Hi+g2
VVhp13iZcC8RVXBrNg95xRcqkqwlAw9xYBXXM80Rr6NVlNMHcpICzC/gb71PBpv7
a0wEwk0nFayrocRMmBvg8fsw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:46 2024 by rpki-client on console-fra.rpki-client.org