Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/eSAk3j-01TB0DzEafVwNI4aDS2c.roa
File: eSAk3j-01TB0DzEafVwNI4aDS2c.roa (raw, json)
Hash identifier: bm8B1jkt2qPXreHj8VwifJCTN5iPz/OacxVpLFi/Al0=
Subject key identifier: 79:20:24:DE:3F:B4:D5:30:74:0F:31:1A:7D:5C:0D:23:86:83:4B:67
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 33E23361
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/eSAk3j-01TB0DzEafVwNI4aDS2c.roa
Signing time: Sat 01 Jan 2022 04:55:34 +0000
ROA not before: Sat 01 Jan 2022 04:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42626
IP address blocks: 194.27.48.0/23 maxlen: 23
95.183.216.0/22 maxlen: 22
193.255.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870462305 (0x33e23361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=792024de3fb4d530740f311a7d5c0d2386834b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:82:4d:fa:f9:4d:db:d9:4c:76:9c:81:70:
ae:73:00:53:5a:c7:62:3c:f7:02:59:8e:23:d4:e9:
d6:48:15:8b:84:72:85:90:9f:c9:45:c1:34:fb:9a:
ba:dd:f2:41:f3:30:f2:1e:6b:79:6f:2c:9d:d8:5a:
9c:9e:9f:8a:de:57:72:bf:52:02:85:03:a2:4b:16:
09:c5:ce:59:23:cf:b8:f6:ee:d2:a3:16:c9:52:1e:
b1:a0:c3:bb:1f:7b:86:75:23:f1:41:37:c4:fd:07:
70:3c:68:8b:d8:c5:95:7f:54:84:39:2f:a5:f3:ea:
77:db:70:4b:e7:4f:40:f6:f5:3f:d7:d6:4c:25:37:
fc:18:a8:ad:3a:23:fd:af:36:f4:a8:2b:b4:36:eb:
5c:a9:fe:da:34:05:7e:54:ba:9c:bf:c9:d6:90:ce:
61:ac:28:8f:cd:bf:e7:f8:3d:b3:96:65:29:19:9d:
43:cd:89:08:f2:99:5b:07:26:4a:9a:27:a7:73:51:
83:58:9f:33:9e:f2:f9:b0:47:35:75:af:e1:6a:fc:
f1:bf:3f:2a:c6:de:a7:93:4c:8d:cc:d4:73:04:b8:
25:52:2d:65:3c:e7:37:cd:a9:93:c6:37:ca:c7:0e:
39:fd:39:cf:a6:6a:f6:15:b7:58:c3:58:eb:71:86:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:24:DE:3F:B4:D5:30:74:0F:31:1A:7D:5C:0D:23:86:83:4B:67
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/eSAk3j-01TB0DzEafVwNI4aDS2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.216.0/22
193.255.58.0/24
194.27.48.0/23
Signature Algorithm: sha256WithRSAEncryption
32:a1:89:a8:45:91:9d:c6:a9:cd:3e:a3:c7:b4:e8:4f:21:b1:
75:4e:22:10:2f:ae:f8:4c:e5:6a:24:5f:f4:cf:91:3f:48:f5:
43:4b:9a:02:d3:71:64:08:b0:25:90:e6:5f:f5:bc:e9:6e:76:
73:09:50:e4:c2:a7:c5:64:50:22:72:a6:ef:74:b4:74:8e:4f:
e6:52:57:ab:d0:cf:ac:78:18:9c:a2:a2:70:bc:49:6c:28:7c:
06:da:df:5e:29:bf:8f:dd:94:ed:22:0d:d5:7b:41:b8:f9:ef:
27:ef:fe:4c:ab:e5:80:eb:4c:cf:ad:d7:43:ad:6c:a1:a4:34:
fe:58:71:9e:7c:23:32:9f:c8:fe:62:af:91:91:ba:0c:08:c7:
d6:c0:b5:3e:79:97:c4:7d:4a:de:af:7e:ec:b1:27:f3:e7:13:
cf:5c:df:71:23:c1:e3:73:f3:8c:42:55:01:0c:e1:bb:83:f3:
70:99:aa:ef:bc:12:5c:bc:4f:93:7d:a1:67:13:f9:04:f1:e8:
a3:2e:42:ca:56:a4:3c:51:c6:98:bf:3c:51:7a:6d:0a:c0:1c:
05:bf:35:ef:4b:d4:b0:a9:5c:b2:db:66:e6:86:1b:f0:af:b3:
35:82:35:38:ec:21:23:5c:c5:ef:6b:7b:b3:43:b4:2a:23:f1:
c4:5c:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org