Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EQnHEtFBA2CdQHR3evHcBCGMU1Q.roa
File: EQnHEtFBA2CdQHR3evHcBCGMU1Q.roa (raw, json)
Hash identifier: eXukMarkih/I8g2NtP2gp+FD9A+S0wMYD136JhfuSkE=
Subject key identifier: 11:09:C7:12:D1:41:03:60:9D:40:74:77:7A:F1:DC:04:21:8C:53:54
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200EDF1AFEEDF52C4C9562CBE771E00DF
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EQnHEtFBA2CdQHR3evHcBCGMU1Q.roa
Signing time: Fri 15 Jul 2022 08:16:09 +0000
ROA not before: Fri 15 Jul 2022 08:16:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43763
IP address blocks: 213.176.192.0/19 maxlen: 19
79.132.32.0/19 maxlen: 19
95.171.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:ed:f1:af:ee:df:52:c4:c9:56:2c:be:77:1e:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:16:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1109c712d14103609d4074777af1dc04218c5354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a5:c1:fa:5e:55:d8:fe:d2:18:83:7b:f7:02:
a2:1e:71:18:80:5c:71:f4:ee:8c:e4:2d:bc:9d:c5:
04:36:f1:38:5e:e0:18:e0:3c:cd:1e:98:e7:fe:81:
3c:f5:96:db:d6:0a:2e:b0:4a:ba:16:46:45:53:e4:
a9:d9:4b:f3:46:af:1b:7b:f6:27:4d:be:cc:ff:46:
bb:e3:39:35:25:97:c5:3f:18:f9:3e:cc:1b:06:a0:
88:fe:7b:21:30:06:ea:af:03:92:34:c7:71:a6:a8:
83:6c:de:5f:57:2b:36:34:57:24:bb:2f:16:65:c1:
86:78:1e:aa:df:57:fd:7c:d6:72:8a:b0:78:66:2d:
a6:bb:35:9b:f4:f3:79:ce:c5:9d:57:c1:3f:82:58:
d7:13:22:9b:67:af:11:dd:68:79:81:d4:de:0e:6d:
b5:12:2f:7c:48:af:54:21:a5:ee:c3:3a:db:a2:fe:
c5:6f:4d:c6:4b:55:ef:05:74:c5:f5:b2:55:29:46:
1c:02:88:b0:75:06:a3:7b:ef:b4:bf:c7:e7:4d:75:
8b:3e:5a:34:fc:0c:f5:8a:9d:58:73:99:73:fc:81:
99:de:92:c4:57:83:b5:32:4c:1c:6f:b1:46:0a:88:
10:f1:15:3e:53:11:17:e0:66:e8:e1:f6:2c:be:15:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:C7:12:D1:41:03:60:9D:40:74:77:7A:F1:DC:04:21:8C:53:54
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EQnHEtFBA2CdQHR3evHcBCGMU1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.32.0/19
95.171.128.0/19
213.176.192.0/19
Signature Algorithm: sha256WithRSAEncryption
21:39:7c:f5:50:af:6f:31:74:99:da:90:cc:31:4e:cb:be:75:
5a:56:69:cc:f7:68:56:cd:ba:15:f7:65:2e:b3:ac:2e:61:c0:
c9:99:5b:63:cd:38:2d:c3:e2:ec:06:91:f7:c4:08:b0:16:58:
1c:47:ad:be:eb:64:fd:c6:28:61:86:67:43:19:4c:8b:9c:8e:
a6:fe:e7:f0:e3:b8:b2:9e:60:5b:55:50:a9:5d:fc:4c:1e:09:
fa:5a:d2:a8:aa:2e:2d:ea:e3:a0:50:54:e2:8d:07:bd:c1:bf:
98:4a:62:0e:3e:ab:92:f4:3b:98:5a:a7:a1:e4:1a:3d:22:cc:
9e:e6:2c:0b:6e:c1:c8:5b:5e:29:35:8e:a6:0b:b8:ec:bf:8e:
7f:82:f6:c3:d5:39:b5:b7:e4:8b:29:f2:21:3f:96:93:3f:e1:
3d:2f:06:f9:06:21:45:8d:36:14:59:23:85:35:db:07:8a:f0:
71:b9:2d:36:54:46:74:a2:ad:51:65:36:e4:4e:44:7f:3b:67:
4e:d1:d4:2a:29:1e:f5:6c:a0:fe:fc:19:f9:92:7c:70:44:6b:
38:e1:4b:23:6b:54:16:b9:c8:8a:4e:eb:58:1f:b6:0d:9c:b5:
4e:56:73:a3:73:f5:e1:69:f5:c7:a3:2d:93:33:0a:8d:ed:94:
51:74:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org