Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/ERL_TWqJaEEq_TvyBFqcHTdq4EE.roa
File: ERL_TWqJaEEq_TvyBFqcHTdq4EE.roa (raw, json)
Hash identifier: QF7+m5zKAOGd5XOV+tokpzuDXMS2WNJquBfMa1mjmbI=
Subject key identifier: 11:12:FF:4D:6A:89:68:41:2A:FD:3B:F2:04:5A:9C:1D:37:6A:E0:41
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 02F27263
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/ERL_TWqJaEEq_TvyBFqcHTdq4EE.roa
Signing time: Sat 01 Jan 2022 04:51:19 +0000
ROA not before: Sat 01 Jan 2022 04:51:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212041
IP address blocks: 37.153.140.0/22 maxlen: 22
31.43.186.0/23 maxlen: 23
193.169.104.0/24 maxlen: 24
2a10:c580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49443427 (0x2f27263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Jan 1 04:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1112ff4d6a8968412afd3bf2045a9c1d376ae041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:79:78:fe:98:fb:04:64:85:40:b3:39:7d:
5b:9d:c4:4b:e5:62:46:76:11:e1:f3:16:cd:43:af:
6e:b2:91:f9:cf:d2:2c:52:80:c4:39:ad:4a:b3:7b:
ce:39:d2:2f:3f:34:bd:45:95:e0:8a:5f:79:2c:b4:
79:5c:e4:cc:f9:c4:8e:89:ff:ac:2e:9a:6a:a8:a3:
2d:ae:d6:83:71:ee:67:83:84:f9:26:72:42:3a:d5:
7a:25:ea:8d:be:9a:ae:db:dc:46:9c:f9:fc:99:35:
91:3b:9b:51:a2:74:e7:43:4f:cb:b5:8d:7f:15:f4:
38:16:e4:77:ea:2d:f2:de:1a:4d:b9:60:87:96:76:
68:b5:60:ff:e6:52:08:15:de:6c:85:26:51:b4:f0:
be:ea:a5:7c:61:bd:ed:3d:1c:0b:ec:12:c4:9d:41:
dc:da:63:a5:5b:a3:ea:82:4c:fd:47:78:f3:3e:52:
ad:80:af:48:5a:69:f8:ad:e4:a1:ac:30:a8:fc:7a:
e1:84:dc:cb:05:e5:9c:a9:cd:12:a7:b4:e4:d6:8b:
2f:98:84:fc:4e:cd:f7:69:2e:05:ab:99:bc:b1:b3:
5c:40:19:96:e9:ac:5b:34:ff:7d:d5:d2:8d:fd:04:
f3:f6:52:cf:2d:db:b9:2b:80:f5:2a:bf:fe:a7:83:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:12:FF:4D:6A:89:68:41:2A:FD:3B:F2:04:5A:9C:1D:37:6A:E0:41
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/ERL_TWqJaEEq_TvyBFqcHTdq4EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.186.0/23
37.153.140.0/22
193.169.104.0/24
IPv6:
2a10:c580::/29
Signature Algorithm: sha256WithRSAEncryption
82:4b:8b:87:01:9e:28:7b:16:3e:1a:9e:fa:d9:81:a0:45:3b:
38:33:13:26:ef:b5:e7:e6:fc:49:51:74:0a:26:b0:f8:b6:f8:
f5:40:53:e4:3b:11:63:a6:1a:52:d2:0f:5a:b8:73:e4:16:7d:
3b:08:8e:df:5c:1f:b2:ed:a2:ae:a0:95:34:15:99:e6:7e:a7:
22:7f:a0:be:e6:51:3d:fc:11:e1:cd:ff:bd:a2:d0:2a:6c:8d:
5c:a4:5c:29:99:23:62:63:2b:d5:97:5a:6e:9e:fb:c9:98:5b:
ab:b5:d7:f9:f1:e9:30:6c:1a:7d:af:fe:65:1c:99:81:58:8b:
2e:52:15:84:df:c9:51:0e:df:f1:39:8e:57:20:a0:54:17:30:
d6:71:bc:a8:ec:12:d9:58:f0:9a:91:e8:ea:22:1f:01:66:41:
78:da:6b:34:f7:e3:3c:45:b2:6f:fd:b6:b1:61:85:0c:a9:42:
12:79:7e:5d:a7:79:13:d4:ce:92:35:d9:a9:2e:48:27:a5:cf:
65:a4:c8:7d:76:c4:ab:48:e6:d4:36:40:89:ad:bd:d9:82:60:
fd:5f:c8:92:7d:3b:61:b7:54:96:7c:20:1d:4b:95:f5:09:e8:
63:7d:5c:33:56:c0:ca:7c:7e:f8:eb:37:0b:74:9a:fa:bb:5f:
2b:b1:07:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:30 2024 by rpki-client on console-ams.rpki-client.org