Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/EruLFwpduNpdelrvFHPQXhV72OY.roa
File: EruLFwpduNpdelrvFHPQXhV72OY.roa (raw, json)
Hash identifier: 3xiMuC06O+q4hpk/MbKxspvwdePbYeNc0skLPUDGfMA=
Subject key identifier: 12:BB:8B:17:0A:5D:B8:DA:5D:7A:5A:EF:14:73:D0:5E:15:7B:D8:E6
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 0B282563
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/EruLFwpduNpdelrvFHPQXhV72OY.roa
Signing time: Sat 01 Jan 2022 09:02:31 +0000
ROA not before: Sat 01 Jan 2022 09:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41327
IP address blocks: 185.157.228.0/22 maxlen: 24
93.94.88.0/21 maxlen: 24
31.185.96.0/21 maxlen: 21
185.61.168.0/22 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187180387 (0xb282563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jan 1 09:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12bb8b170a5db8da5d7a5aef1473d05e157bd8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:5c:07:87:b5:ef:d8:d0:ef:ad:8a:27:75:
16:33:e0:ff:7b:d3:d6:64:d8:d8:cd:ea:9f:a0:7d:
5d:cd:03:49:48:d7:1e:a1:27:d1:f9:43:1b:e6:a9:
00:05:39:16:2a:e3:de:13:b6:fa:e7:73:a2:40:1f:
16:d0:c8:83:57:00:51:e9:69:e9:25:e6:3c:46:15:
59:b7:67:77:ae:b6:3b:5a:d3:72:91:11:49:eb:ca:
93:58:d9:52:dc:dd:d3:7d:1a:bd:68:d6:db:fa:47:
0a:d7:e4:3f:ce:54:c5:d6:98:cb:c0:f5:b8:6d:33:
1d:20:46:a8:d1:a2:62:b5:e4:97:a6:51:31:b0:81:
db:41:44:fa:b5:ad:82:76:23:fa:59:99:af:82:1f:
d3:c5:a8:f6:84:0f:5c:81:03:33:40:10:ba:d7:f0:
12:3b:03:be:d1:46:75:46:31:86:b2:7c:04:26:0d:
f6:e2:d8:46:d1:58:b9:38:bd:f1:87:87:68:86:9a:
e5:b0:72:fa:0d:bd:78:e6:c5:d9:9f:da:6c:f5:b5:
99:71:f0:06:ab:d2:03:f5:18:00:42:d8:e1:68:ae:
54:1f:ee:ed:b8:72:ee:db:f5:48:20:d6:8e:e8:25:
a0:03:6d:c5:83:f7:39:97:97:1a:de:fe:cd:91:ce:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:8B:17:0A:5D:B8:DA:5D:7A:5A:EF:14:73:D0:5E:15:7B:D8:E6
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/EruLFwpduNpdelrvFHPQXhV72OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/21
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
6b:38:4f:bd:f8:f5:5d:72:96:75:f1:53:c9:24:f1:8d:03:f9:
c1:e8:7a:21:95:f9:29:53:6a:e2:be:fa:de:2a:1a:7a:6c:ba:
d1:89:3d:56:df:7b:6d:e0:99:8f:8e:03:7d:c9:7a:20:e6:02:
bc:51:a6:5a:80:04:73:31:5c:13:a6:70:9d:1d:16:47:60:79:
87:23:64:0a:07:4c:5e:90:3c:cf:0c:ed:70:b8:a8:bb:6e:e2:
e0:a0:38:53:d1:60:29:6f:3a:a8:8d:55:4f:15:5d:d7:3a:ea:
c5:c7:46:5c:0a:0d:ef:91:91:08:f6:6b:39:5d:6d:27:71:19:
5c:e4:17:60:59:b5:5a:ce:45:c7:ef:dd:d6:23:eb:7d:07:72:
27:9c:e4:86:16:b1:50:c9:a8:a0:d3:82:21:5b:e5:ff:01:1f:
dc:e8:00:6a:1b:62:bf:c2:90:61:c4:ce:0b:0a:06:24:85:88:
26:48:69:3f:ea:c9:c3:c5:b2:75:7a:40:0a:92:f1:eb:69:aa:
b1:e8:c1:31:a8:bf:9e:f1:c9:a4:2e:e4:60:2c:a9:1e:4c:7d:
4c:92:8f:32:08:c0:2d:79:27:f4:94:0f:81:c7:c5:3c:71:91:
d5:67:d6:ad:89:77:d3:c1:1e:72:9c:4e:65:b9:43:2d:5c:72:
f7:2b:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:44 2024 by rpki-client on console-ams.rpki-client.org