Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/5EBQdZyz_XetFnotxRl5eILeqTU.roa
File: 5EBQdZyz_XetFnotxRl5eILeqTU.roa (raw, json)
Hash identifier: mRIvkeZz3sEp3A2WhZvrqwp+punrTEbO0vzjMG1Dr8w=
Subject key identifier: E4:40:50:75:9C:B3:FD:77:AD:16:7A:2D:C5:19:79:78:82:DE:A9:35
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 05BAD158
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/5EBQdZyz_XetFnotxRl5eILeqTU.roa
Signing time: Sat 01 Jan 2022 07:57:01 +0000
ROA not before: Sat 01 Jan 2022 07:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 91.194.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96129368 (0x5bad158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jan 1 07:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e44050759cb3fd77ad167a2dc519797882dea935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:da:58:88:fb:0f:8e:f3:01:c2:01:c3:6a:
78:d5:29:10:1f:f1:32:89:97:23:6f:1c:9a:60:43:
1f:a8:39:35:12:41:80:9b:11:77:84:49:79:31:68:
ac:c4:59:99:4b:6a:75:11:30:b0:67:3f:9a:ac:03:
2d:21:98:ea:9c:2c:da:31:c4:4f:88:83:de:d1:59:
cf:e7:b6:40:62:d2:bb:12:4c:84:b1:e5:a6:74:33:
4c:fd:17:cb:3b:27:7a:af:71:f5:ba:39:48:0f:83:
ff:01:fd:54:5b:67:55:58:bb:6c:c3:ce:0f:9c:57:
2e:c3:db:89:7b:35:85:ab:66:fc:4a:50:10:2a:d5:
d2:be:8e:10:f5:3b:e6:7d:f6:67:d7:5f:b6:b6:f4:
a6:be:5e:2d:58:fd:8a:41:65:3a:26:ab:f9:4e:62:
da:f4:fc:cb:18:1f:53:1e:51:af:9a:f4:0a:20:9a:
97:28:8f:e1:a2:9b:e8:98:99:36:f9:2c:61:7c:42:
6a:8f:fa:5b:9b:92:f7:9c:72:2e:5c:23:2f:eb:0b:
f4:b0:32:74:ad:ae:fd:c9:7a:89:7a:a9:e8:5c:3c:
5d:db:75:32:ca:a0:21:cc:26:77:e5:09:81:50:7a:
04:f1:9c:08:bf:62:a7:a5:23:5b:92:03:d8:88:09:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:50:75:9C:B3:FD:77:AD:16:7A:2D:C5:19:79:78:82:DE:A9:35
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/5EBQdZyz_XetFnotxRl5eILeqTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.236.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:28:4b:49:84:2e:53:9b:4f:8e:8f:78:eb:0b:65:8a:b9:aa:
0a:fa:c5:39:8a:e4:8e:63:4d:1a:8b:35:dc:16:a4:be:87:86:
f2:89:75:84:a1:97:78:8d:85:b9:27:6d:55:d5:49:b4:8f:6f:
00:59:aa:dc:5a:d5:af:2e:4e:92:63:1c:05:84:48:bb:70:af:
59:98:f6:25:99:39:7e:30:38:42:46:98:c5:3d:12:8c:ba:04:
65:4b:80:1c:7c:db:35:28:14:e8:d5:2b:da:94:c3:12:4e:78:
56:34:0c:61:13:0a:7f:b2:0a:ee:9b:2e:2e:6e:47:ba:79:34:
14:24:14:de:17:e6:e0:33:38:e1:ee:76:1b:3e:e2:90:b3:6e:
8a:bf:13:13:5e:5e:b8:82:87:ac:c7:96:47:22:26:dd:e5:c6:
ab:b9:7d:2a:1b:f9:41:cc:e4:2a:82:fe:4a:27:c1:76:f8:c0:
95:57:8e:32:05:f3:7b:33:a2:bc:b2:ec:81:13:3d:4d:2c:be:
b4:ec:cb:e5:6c:7b:d5:20:4b:70:55:ca:b4:10:2e:06:7b:48:
10:56:12:d2:d3:cd:34:f9:d0:3f:08:6f:4a:6d:14:60:4b:54:
c7:ef:2c:e5:e8:93:41:35:8d:47:6a:65:7e:e5:0e:bb:df:a0:
e0:96:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:22 2024 by rpki-client on console-ams.rpki-client.org