Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/euOUb4N3IZcJeWtGejSCItqhaPM.roa
File: euOUb4N3IZcJeWtGejSCItqhaPM.roa (raw, json)
Hash identifier: Fkd+mApO8+2zRbfLOLi//aY+Gur/S6IyvWUFd9u0vo0=
Subject key identifier: 7A:E3:94:6F:83:77:21:97:09:79:6B:46:7A:34:82:22:DA:A1:68:F3
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01851BE9C899E8BDB64C22FD05D5513A0183
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/euOUb4N3IZcJeWtGejSCItqhaPM.roa
Signing time: Fri 16 Dec 2022 17:09:44 +0000
ROA not before: Fri 16 Dec 2022 17:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 109.72.122.0/24 maxlen: 24
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
93.185.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:e9:c8:99:e8:bd:b6:4c:22:fd:05:d5:51:3a:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 16 17:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ae3946f8377219709796b467a348222daa168f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:4e:74:59:4b:8b:02:91:14:22:9b:45:f7:
8d:c6:82:6a:98:71:9d:e5:1d:11:f8:c7:b4:cb:60:
b1:d7:5d:31:ee:0a:ad:68:82:aa:fe:3d:5b:ea:e1:
83:4d:67:a9:62:81:c8:20:33:eb:d3:c9:92:f6:7e:
28:11:04:fe:f7:3b:25:fa:a9:26:db:5d:7e:ed:37:
cf:b6:a2:ee:21:b8:0d:64:78:fa:59:a7:e5:33:1e:
52:b9:4b:b0:97:37:47:93:9c:79:48:5b:68:df:d6:
38:3e:e0:89:87:ea:7e:08:ed:ca:9a:89:27:06:d8:
20:de:88:14:3f:f4:d9:b9:e0:ce:9e:d2:2a:c2:7c:
8f:24:a0:e7:a3:b7:99:e2:7c:07:56:9b:a3:22:d4:
a7:34:05:d7:bb:1b:4c:38:5f:dc:2d:88:1e:cd:22:
d1:55:20:58:77:a3:40:6b:a7:f8:9f:ef:30:27:b0:
ab:d7:3a:1d:b6:57:ee:c5:8c:31:86:43:f6:41:56:
d1:a0:2d:02:0c:a4:86:b0:d8:ad:6e:3b:3a:ce:2a:
fe:b4:83:2c:96:ad:2d:96:28:99:cb:13:66:4c:a5:
10:e4:7f:10:78:26:99:a7:6b:7a:37:61:81:32:56:
ae:5f:6e:6e:3a:61:87:7f:2e:bb:04:d7:66:b4:30:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:94:6F:83:77:21:97:09:79:6B:46:7A:34:82:22:DA:A1:68:F3
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/euOUb4N3IZcJeWtGejSCItqhaPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.214.0/24
109.72.122.0/24
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:31:12:5a:32:68:18:ce:55:9a:15:03:1d:e9:42:0f:07:8d:
aa:8a:f7:42:e4:74:1b:cb:f3:43:0d:2f:15:b1:68:ea:23:8d:
dd:25:1d:a1:d3:66:ee:23:ae:e3:4c:60:dd:b1:6b:5f:8a:41:
80:3b:c5:f0:06:77:01:7b:02:11:5b:55:64:80:68:68:62:3f:
3c:81:e3:cf:0b:c6:4a:f0:13:f8:9a:6c:c6:2a:d2:8e:8c:bd:
cc:06:8b:86:68:7c:02:78:ad:03:a0:20:66:f5:ed:56:f3:b4:
73:ab:dc:a7:81:f7:b0:5b:15:bf:15:76:66:99:3d:ce:79:95:
bf:90:6d:9c:9c:d7:19:ee:03:3d:f8:91:55:58:1b:2b:4a:8a:
fc:8a:d6:34:f3:b2:93:a0:ce:ef:5e:05:e8:60:d9:d1:55:0c:
91:ab:fa:e5:03:3c:93:e5:aa:7e:26:75:55:18:2e:9d:c9:52:
40:82:5b:37:a7:8d:88:a3:b3:7a:be:02:e3:d9:b3:6c:04:6c:
19:e1:e9:64:58:e0:06:65:e6:0b:65:cc:9d:2a:f7:24:09:68:
6c:c7:9c:36:3c:ee:8e:08:8d:66:bd:54:f3:cc:18:86:2c:06:
4a:20:1b:14:64:9e:c1:74:69:3c:bb:e1:3c:cd:7e:13:69:45:
73:e9:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org