Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9EEuqUcz5Uz5D0PJMTB_SgrRGyc.roa
File: 9EEuqUcz5Uz5D0PJMTB_SgrRGyc.roa (raw, json)
Hash identifier: Rj/FMSVsRXkaQ7kj6gYKXn9G4DLfR3DLVo7xzgpBSp4=
Subject key identifier: F4:41:2E:A9:47:33:E5:4C:F9:0F:43:C9:31:30:7F:4A:0A:D1:1B:27
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0183134578BB830A17AB5127ACB6E4C8DFD7
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9EEuqUcz5Uz5D0PJMTB_SgrRGyc.roa
Signing time: Tue 06 Sep 2022 14:47:43 +0000
ROA not before: Tue 06 Sep 2022 14:47:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207461
IP address blocks: 178.239.30.0/23 maxlen: 24
2.58.232.0/23 maxlen: 24
2.58.234.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:45:78:bb:83:0a:17:ab:51:27:ac:b6:e4:c8:df:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 6 14:47:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4412ea94733e54cf90f43c931307f4a0ad11b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:ec:90:cd:73:1a:b7:08:21:cb:dc:c5:b3:
01:53:a9:a7:5b:49:51:ac:cf:71:19:f8:d9:de:5d:
31:e6:1b:9f:2a:e4:ab:a0:e5:4d:5a:7b:15:45:5f:
8d:94:0e:e8:dc:7d:e3:9f:18:86:d5:c5:6b:26:01:
f4:00:7c:1c:b5:fe:21:f7:c8:30:69:fb:1b:28:d8:
33:7a:53:e0:30:40:f4:80:0b:e3:ae:15:2d:94:80:
e0:4f:6c:0c:99:98:53:1d:d8:e0:88:33:5f:e5:50:
36:08:21:e0:a4:1a:1a:0d:62:02:1b:fc:bf:53:e4:
6d:34:0f:e4:93:2a:51:6f:99:b4:fc:55:3a:3f:15:
1c:46:0c:bf:d2:1b:0d:fa:6d:c6:b3:b0:39:4b:94:
d8:21:0c:04:39:6c:e5:d3:df:07:75:7d:cd:1f:59:
55:5c:bb:81:c9:f1:8c:56:7e:34:26:ee:4c:35:74:
e1:dc:0d:c6:3a:46:57:70:7f:f9:70:58:18:74:95:
b1:25:1a:6f:c7:3b:f5:88:fa:f5:86:17:9c:27:89:
ad:12:27:03:0e:73:70:82:94:77:3f:6e:5b:5e:86:
3e:34:0e:e9:20:1b:0d:25:9a:2e:43:44:6b:e8:ec:
cb:3f:40:89:52:a6:1a:ef:af:37:0c:54:f8:7c:38:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:2E:A9:47:33:E5:4C:F9:0F:43:C9:31:30:7F:4A:0A:D1:1B:27
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/9EEuqUcz5Uz5D0PJMTB_SgrRGyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.232.0/22
178.239.30.0/23
Signature Algorithm: sha256WithRSAEncryption
46:76:6d:4c:35:e7:5b:56:79:a9:64:7c:d2:99:ce:6f:21:f8:
91:f5:dd:67:ea:35:f4:cb:f7:1e:74:7a:7e:15:f7:a1:08:d9:
09:0c:ec:1a:16:d4:79:a0:2a:10:9a:5d:3f:84:a2:17:43:88:
e5:5b:ad:28:11:63:d6:b8:0d:21:64:57:66:35:52:ee:86:8c:
90:56:e2:c0:74:6f:42:53:70:0c:11:19:c7:dc:e3:48:45:2b:
54:61:ef:2d:85:a1:9f:a9:61:ad:d2:06:4c:b7:55:10:68:8f:
98:16:cf:bb:77:9c:44:1a:24:88:8d:e5:59:18:2e:39:2c:e9:
a6:4e:8e:26:e1:d6:a5:2c:19:e4:da:2b:ed:98:07:ff:c7:cc:
74:eb:45:04:c3:50:87:19:d0:a5:83:4a:a6:43:dc:65:57:9f:
2e:8a:f2:9a:f2:78:2f:33:2c:68:4f:48:4f:6e:46:b6:7d:4b:
33:81:eb:e9:50:2a:72:c7:e0:c3:87:e1:d0:15:9d:db:9e:74:
4e:25:e7:2f:5a:2c:51:a3:07:00:67:b9:ad:53:cc:6c:2e:88:
d9:c8:88:7c:f1:84:13:43:1f:1e:61:78:36:4e:7c:d6:b3:b5:
85:31:8e:b9:ee:24:24:5f:8a:82:f8:e2:41:14:86:71:81:34:
97:7c:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org