Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/eCArL2MNrUB7hAj0mew-Ro7rkvE.roa
File: eCArL2MNrUB7hAj0mew-Ro7rkvE.roa (raw, json)
Hash identifier: wN0n7v9I0w/y9cfmamBba5j2XNbCdaJG7VdwLzwcnpA=
Subject key identifier: 78:20:2B:2F:63:0D:AD:40:7B:84:08:F4:99:EC:3E:46:8E:EB:92:F1
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 06967240
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/eCArL2MNrUB7hAj0mew-Ro7rkvE.roa
Signing time: Sat 01 Jan 2022 08:57:13 +0000
ROA not before: Sat 01 Jan 2022 08:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 213.108.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110522944 (0x6967240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 08:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78202b2f630dad407b8408f499ec3e468eeb92f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:16:c2:07:90:85:e4:3d:f6:57:71:97:da:
f0:0c:f8:2b:04:16:25:cc:65:0d:5e:18:02:31:1c:
78:d7:4e:3d:70:cf:28:45:b1:72:a3:75:68:d0:a6:
5f:8c:cf:8b:80:95:cd:a0:38:16:19:e4:07:ff:bd:
6a:cd:a0:17:e7:34:43:32:7e:49:d7:a7:2d:46:b4:
a7:1e:c8:31:cb:8a:4a:58:a8:35:5b:74:34:1f:3f:
f4:f8:04:6a:b6:f7:35:21:5f:4c:51:c8:83:7e:72:
de:17:94:57:bd:cb:e1:9d:f6:61:12:a9:dc:a8:73:
8b:8f:e5:ed:73:40:fa:dd:98:ea:a1:f3:38:6b:d8:
51:bd:20:a6:6a:5b:ea:ae:aa:bd:1e:32:ed:36:4b:
3b:ce:0d:b6:66:e5:73:7f:70:2a:29:b6:99:c5:da:
6c:95:85:b2:a1:23:23:c1:7b:9b:d9:80:f4:a0:60:
15:a8:1a:66:0c:8a:4f:f4:9f:6e:a9:f2:32:af:9d:
0a:6a:30:90:7c:f0:e2:b0:38:51:d6:10:9c:c3:62:
7f:7c:01:e9:75:42:34:ec:f6:04:7d:35:93:95:76:
c4:1d:a9:c5:46:3b:26:fd:b5:ce:6d:a6:30:0d:af:
25:c4:e3:0c:d8:f0:84:60:bf:8b:51:12:0f:e4:25:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:2B:2F:63:0D:AD:40:7B:84:08:F4:99:EC:3E:46:8E:EB:92:F1
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/eCArL2MNrUB7hAj0mew-Ro7rkvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cd:7d:90:a2:11:b3:84:cd:87:e4:d4:08:a9:3a:2e:49:42:
58:60:44:3d:56:91:de:8e:43:ec:bc:04:4a:4d:bc:e4:09:3a:
fe:0d:46:a8:97:b0:2a:52:b0:fa:84:b4:94:5f:3e:9c:ae:c6:
5a:ec:ac:bb:c6:e9:6a:e1:32:b7:3a:37:37:15:7e:ca:aa:c9:
71:99:6b:af:38:d2:26:e3:a5:9f:aa:1a:54:7a:aa:cc:60:b4:
6f:2c:97:13:b6:b3:94:03:92:b1:40:f8:13:15:25:7f:f2:ca:
be:0e:44:96:48:90:37:3b:11:8a:98:23:8f:3f:6d:b3:d7:7e:
4c:d7:39:3a:3b:da:5e:ea:70:23:c3:c4:32:52:de:16:81:77:
82:0d:f5:89:c0:85:94:ad:66:7e:bf:e0:42:20:24:dc:6f:f7:
31:a0:3d:47:25:9b:91:56:5a:34:78:28:5c:a4:7c:2d:5d:2d:
aa:38:36:50:bc:d7:c6:19:4e:46:38:d0:e9:13:dd:f4:0d:89:
94:aa:16:06:c1:fd:32:85:76:92:00:e4:b0:73:2a:bf:ee:82:
9f:3e:f5:ab:89:7a:e2:85:72:df:b2:da:a4:84:5f:90:c8:a0:
09:29:37:80:b0:c2:23:49:de:17:af:0f:42:1f:cf:f9:7b:5f:
17:0e:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org