Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/Eu7nZWUtFDTeBmkqN5w0sizYp8A.roa
File: Eu7nZWUtFDTeBmkqN5w0sizYp8A.roa (raw, json)
Hash identifier: bXFtdX+yl30q/2GrYQm1hwYnCit6Nv4ZuqJ02NWbOHk=
Subject key identifier: 12:EE:E7:65:65:2D:14:34:DE:06:69:2A:37:9C:34:B2:2C:D8:A7:C0
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 143217C4
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/Eu7nZWUtFDTeBmkqN5w0sizYp8A.roa
Signing time: Tue 01 Feb 2022 22:29:02 +0000
ROA not before: Tue 01 Feb 2022 22:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41627
IP address blocks: 89.251.40.0/21 maxlen: 21
185.167.92.0/22 maxlen: 22
31.171.224.0/20 maxlen: 20
46.251.12.0/22 maxlen: 22
91.147.236.0/22 maxlen: 22
89.251.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338827204 (0x143217c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Feb 1 22:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12eee765652d1434de06692a379c34b22cd8a7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:af:ca:90:1b:15:17:67:27:f9:66:8e:8c:
65:29:55:7b:2f:bb:76:f8:a6:4d:49:9a:a5:f5:7c:
60:b1:ae:5d:f8:52:41:a3:3a:94:d0:c2:92:ed:07:
e8:d6:34:2a:c6:d8:38:40:c4:19:46:15:02:90:2b:
a4:f3:b6:62:c2:75:e5:b7:6f:b7:50:e8:7e:dd:46:
62:5f:01:3b:b3:b0:e8:52:97:35:8f:a2:d2:eb:5c:
50:3c:01:cd:82:61:af:a9:6f:9a:86:2b:42:92:3f:
3f:f1:1c:cf:a6:39:5b:a8:5d:97:48:a9:0c:53:b9:
3c:96:a5:7a:dd:c4:de:3f:5b:68:0a:51:84:c8:cf:
fe:b7:98:8c:81:b0:b7:7c:55:71:38:57:9c:e4:e5:
1c:ee:73:fe:97:3a:59:29:86:3e:59:b5:91:68:74:
29:fd:4b:8e:b3:13:23:a9:7f:05:69:24:22:14:c1:
d6:39:b5:9a:f8:af:57:90:0e:6d:38:dd:ca:aa:25:
1a:0f:cf:02:2d:15:bf:34:6a:8f:0e:37:c5:a9:d5:
dc:af:f4:f9:6a:0d:fd:99:8d:d7:69:02:cb:43:84:
49:b0:e9:aa:9a:ea:3a:e9:e4:92:e4:2e:65:8d:51:
2e:61:09:8e:bd:62:50:dc:21:76:91:d8:52:ed:68:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:E7:65:65:2D:14:34:DE:06:69:2A:37:9C:34:B2:2C:D8:A7:C0
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/Eu7nZWUtFDTeBmkqN5w0sizYp8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.224.0/20
46.251.12.0/22
89.251.32.0/20
91.147.236.0/22
185.167.92.0/22
Signature Algorithm: sha256WithRSAEncryption
07:d9:64:a2:e2:43:81:37:0d:c2:2d:ed:fd:b2:93:67:c0:f7:
30:53:11:d3:ad:a7:31:ca:7e:ff:7b:6c:a8:00:15:9b:cf:28:
2d:be:29:e4:b1:2d:07:23:1e:50:c2:2b:b5:0a:06:a3:a1:1f:
f4:e7:04:d9:c9:70:97:86:ab:eb:34:8a:8f:41:23:d6:5d:14:
97:79:ca:d1:a5:63:19:35:26:04:48:bc:c0:45:05:57:42:c8:
5f:4a:a3:4b:58:ec:31:26:79:38:83:a7:05:2f:ee:99:6b:90:
55:c2:64:d3:05:2c:75:27:ef:9c:5f:2f:fc:6c:f0:6e:e6:11:
8e:ea:41:2f:b0:69:ae:40:fb:56:c2:c4:88:d0:f0:7c:f3:1b:
c5:2a:f2:41:6d:e1:e1:5b:c7:f9:fc:55:c4:00:73:51:e7:3e:
94:2a:a0:00:8e:9d:24:0f:87:85:87:a4:14:37:ce:1e:95:23:
e5:05:7c:fc:41:2b:1d:29:f0:8b:19:90:2d:03:c4:cb:b1:c7:
d7:48:0e:ae:48:18:a3:43:8a:ab:93:67:28:6b:58:d0:87:ec:
0a:82:ef:dc:ef:f4:92:2d:04:a6:3f:1a:f5:6a:d4:ba:ab:3a:
8b:9b:84:8e:f5:98:34:df:5f:d4:c2:c2:de:d5:59:94:c7:0e:
35:72:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:16 2024 by rpki-client on console-fra.rpki-client.org