Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/2BrPC_ESCQODMJdUOLdi7h4HwE8.roa
File: 2BrPC_ESCQODMJdUOLdi7h4HwE8.roa (raw, json)
Hash identifier: zaeqFoOm5U8rp8WpE5q4BtvYkE1XZmby7vq0HwHcK5w=
Subject key identifier: D8:1A:CF:0B:F1:12:09:03:83:30:97:54:38:B7:62:EE:1E:07:C0:4F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 01828EEEA623F5F3DCF4BA6F695793D741FC
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/2BrPC_ESCQODMJdUOLdi7h4HwE8.roa
Signing time: Thu 11 Aug 2022 22:03:00 +0000
ROA not before: Thu 11 Aug 2022 22:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60132
IP address blocks: 195.191.128.0/23 maxlen: 24
195.191.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:ee:a6:23:f5:f3:dc:f4:ba:6f:69:57:93:d7:41:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Aug 11 22:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d81acf0bf11209038330975438b762ee1e07c04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:0d:72:f0:d7:2c:8d:f9:cb:2c:0b:02:e3:
e3:62:2a:52:4c:a7:67:13:15:d7:49:00:c4:c1:8f:
7b:71:30:35:1b:f9:88:77:70:72:ea:09:65:94:a7:
0a:a6:40:59:1f:19:72:79:2d:f7:40:fb:4c:53:3a:
f7:c0:eb:a4:7f:f0:28:2d:5f:f7:06:35:7c:81:b3:
23:86:de:32:16:be:69:b8:fc:2d:75:3c:3c:6f:05:
b9:ba:f0:6b:d4:b3:82:c7:01:b5:70:46:65:7d:6a:
af:ac:7b:a3:24:dd:7b:2f:5e:ef:e0:0c:a0:73:df:
18:2a:00:a1:1e:60:77:67:7b:a1:23:78:0b:f1:67:
b5:48:1f:3d:13:10:95:20:90:01:24:8c:b3:4c:ac:
ea:2a:7f:e0:1b:84:1b:81:b3:0c:1d:4b:99:f5:35:
32:c1:37:ad:48:2f:82:c2:c7:63:19:a7:a1:f8:13:
c2:70:83:d9:8e:f2:24:24:ff:55:2b:ff:2c:04:94:
43:c9:b5:18:7e:38:9c:09:bd:fc:14:05:d7:d0:fd:
13:fb:fa:c6:cd:57:74:12:ae:46:2a:cb:71:91:93:
1d:d1:3c:c3:a0:d5:f7:b5:b7:42:76:96:76:2f:27:
7e:9a:ed:36:a1:e1:d7:e4:a6:af:41:c0:a8:ad:df:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:CF:0B:F1:12:09:03:83:30:97:54:38:B7:62:EE:1E:07:C0:4F
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/2BrPC_ESCQODMJdUOLdi7h4HwE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.90.0/23
195.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:84:47:ed:64:da:40:e0:29:bd:15:df:56:af:ae:ee:9a:f4:
eb:c1:e3:25:da:7b:bb:f8:25:3a:e2:f1:f4:27:85:7d:02:d8:
3f:36:1f:fc:2c:70:15:c0:a6:80:71:c7:47:f4:fc:43:ef:d5:
21:3b:04:86:67:e3:31:b6:77:30:e4:5d:82:45:fd:8a:4d:41:
83:5e:7d:1b:38:fa:64:6f:41:94:79:ec:98:94:ee:84:62:12:
fe:46:b9:a0:9d:b1:72:82:45:c6:5a:16:97:0e:ab:b9:62:9b:
49:b2:c9:96:78:61:44:45:20:ee:f1:fc:da:37:9b:e6:78:bf:
45:54:24:e8:70:c3:ba:19:75:fe:30:35:a1:4a:9a:94:2b:4e:
57:0e:ff:32:fd:ec:2d:cb:5d:cf:24:6d:d1:36:54:73:f1:a6:
d2:c2:3c:f9:62:5c:97:a3:f3:8d:1b:0d:2e:52:be:31:cc:44:
08:44:be:44:52:17:85:7d:b3:91:33:28:dd:74:02:40:0e:88:
38:f5:f7:30:e9:17:55:5e:40:f9:37:8f:c7:c5:a3:6c:fd:9a:
74:82:80:89:f1:be:e4:c9:bf:d8:d6:e3:cf:b9:35:48:01:bd:
23:8b:fe:82:6e:b7:f0:85:3c:97:f2:d5:c3:44:8b:f5:9a:f5:
2b:61:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org