Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ein8mD6iyMK7-If4HM67MrJF7Sc.roa
File: ein8mD6iyMK7-If4HM67MrJF7Sc.roa (raw, json)
Hash identifier: z9Lc/EKT3NTgUXd+oAHt79BWrhyuby1xluiLSwvZRj4=
Subject key identifier: 7A:29:FC:98:3E:A2:C8:C2:BB:F8:87:F8:1C:CE:BB:32:B2:45:ED:27
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 01CBC5C4
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ein8mD6iyMK7-If4HM67MrJF7Sc.roa
Signing time: Fri 08 Apr 2022 13:36:24 +0000
ROA not before: Fri 08 Apr 2022 13:36:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49825
IP address blocks: 84.23.50.0/24 maxlen: 32
84.23.51.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30131652 (0x1cbc5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Apr 8 13:36:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a29fc983ea2c8c2bbf887f81ccebb32b245ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:be:47:ef:d5:c6:4f:b4:18:52:9e:36:a5:
7d:4b:46:5a:55:78:20:00:eb:8d:86:bc:36:a0:da:
48:80:02:bb:a0:e2:91:44:26:db:87:c6:df:96:fb:
a2:ad:e8:03:54:cf:c8:e1:c1:b0:68:7a:43:07:08:
e0:f8:0c:cf:88:c1:e6:00:e2:10:7b:59:ff:b5:f1:
d3:81:ea:9e:03:f1:19:b0:81:d1:db:ed:e5:0f:58:
6c:01:99:db:25:77:66:e7:72:ea:04:9e:92:ab:3e:
88:bb:45:98:d7:83:b3:35:ee:52:9c:a0:79:82:86:
19:ab:f5:60:38:79:7b:6c:a8:68:3d:84:17:79:b4:
70:55:52:4c:42:80:66:6c:be:37:3a:04:e6:5b:a4:
a7:19:fc:f6:82:39:35:1f:0e:2d:6a:a9:a3:9c:7a:
4c:53:00:0f:d4:94:f5:b5:36:86:9a:be:70:7e:58:
1f:e9:03:70:33:6b:0d:55:05:cf:40:a1:c6:b5:41:
f0:88:68:33:81:73:e9:4e:0a:94:ef:01:ad:1a:1e:
6b:af:19:28:02:de:da:d5:f9:5b:62:bd:90:a8:ab:
4a:bf:19:19:b9:f7:3d:e1:4b:1c:da:65:bd:a9:a2:
20:07:15:50:c8:95:11:6e:3f:ab:87:aa:6c:47:ec:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:FC:98:3E:A2:C8:C2:BB:F8:87:F8:1C:CE:BB:32:B2:45:ED:27
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ein8mD6iyMK7-If4HM67MrJF7Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.50.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:3f:a9:eb:0b:6c:24:e7:58:14:3b:3d:4d:00:b3:19:18:c1:
65:08:2e:91:5b:71:22:06:0d:f6:d7:00:5c:91:8e:1b:49:ac:
3c:c8:71:4b:3e:d0:e3:a6:77:05:8d:ed:39:93:0b:3c:d2:26:
5c:b1:73:95:a6:62:1c:8f:40:7e:13:89:0f:c3:e9:3e:bd:8a:
e6:3e:f4:78:59:3e:b7:1a:80:85:c7:bd:47:22:c3:c7:e2:e8:
b2:fc:6f:9e:b4:28:d0:58:13:97:33:1f:29:76:5e:9e:45:36:
14:be:65:db:49:5c:31:1b:07:8c:19:76:84:83:31:b5:9a:a1:
3f:fd:b0:ce:fc:98:4f:77:8e:cc:08:e6:38:98:9f:5e:60:de:
c6:a6:46:d9:cf:03:96:73:67:d7:61:a6:dc:6b:10:e8:30:d0:
b7:bd:53:fb:3c:36:db:e8:c1:f8:1c:8c:31:3b:34:8d:f3:78:
08:7f:f9:09:92:91:92:35:47:91:2c:cd:3b:61:43:b5:a3:94:
2a:07:16:2a:01:43:1e:3e:a1:a4:ac:b9:f6:17:db:99:7d:de:
44:d2:da:59:e1:68:7f:2a:43:f0:fe:98:42:c7:0f:fe:11:18:
83:6c:e2:5b:e9:c7:66:05:7d:a3:d1:f3:09:ab:a0:17:65:04:
43:33:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org