Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/0eniJQ8eYngRqtKa0OKCsKroIZE.roa
File: 0eniJQ8eYngRqtKa0OKCsKroIZE.roa (raw, json)
Hash identifier: qMhshnuPFBcn/SWUZ5sNS56k8zQbMG4At84Ms/68Oy8=
Subject key identifier: D1:E9:E2:25:0F:1E:62:78:11:AA:D2:9A:D0:E2:82:B0:AA:E8:21:91
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 1B5E0CBA
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/0eniJQ8eYngRqtKa0OKCsKroIZE.roa
Signing time: Sat 01 Jan 2022 09:57:26 +0000
ROA not before: Sat 01 Jan 2022 09:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31394
IP address blocks: 185.100.240.0/22 maxlen: 22
83.137.40.0/21 maxlen: 21
2a00:11d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459148474 (0x1b5e0cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jan 1 09:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1e9e2250f1e627811aad29ad0e282b0aae82191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:a4:0a:5b:29:85:b8:63:a7:de:be:e7:ff:
95:42:1b:e4:4d:21:bb:05:48:ef:b6:eb:96:0e:cc:
cc:d9:9d:f9:a1:7b:e2:24:35:ef:98:75:1d:5e:3e:
d6:65:b4:22:df:81:fa:08:4b:ce:85:c0:af:5e:74:
69:53:1b:4b:ac:89:ab:02:74:ff:4c:25:85:ef:ae:
96:c0:10:22:9c:ec:12:d5:0b:76:7b:e9:c3:5b:26:
5f:d7:77:26:9c:1d:a5:ed:a0:7f:c1:16:23:aa:0c:
ec:b2:3f:ab:4f:56:9c:0d:a1:f0:75:d2:e1:0f:11:
ca:40:34:e3:4a:52:9a:38:0a:7b:a5:26:f2:c0:eb:
67:b6:7a:82:03:b0:43:a0:82:69:45:39:1f:a3:fb:
f1:06:57:85:52:f7:5b:1c:7c:95:a3:42:df:ae:12:
8b:e2:3a:d7:d0:d7:10:cd:b1:67:80:4f:09:66:25:
32:da:89:83:71:4e:7d:79:a8:2a:f2:b9:f1:44:d1:
c3:8b:a4:af:9d:3a:db:21:83:8f:19:fb:87:2c:c8:
48:80:48:f3:1c:0e:3e:76:22:84:51:56:90:f3:d9:
b0:40:57:bf:b0:32:4b:ed:67:e3:71:72:31:e6:ae:
a1:03:9f:7e:10:d5:d2:69:cf:4f:4a:13:38:2a:00:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:E2:25:0F:1E:62:78:11:AA:D2:9A:D0:E2:82:B0:AA:E8:21:91
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/0eniJQ8eYngRqtKa0OKCsKroIZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.40.0/21
185.100.240.0/22
IPv6:
2a00:11d0::/32
Signature Algorithm: sha256WithRSAEncryption
d5:df:cc:b7:dd:76:c3:56:9a:07:52:c8:2a:c5:df:6f:3f:1a:
68:8d:40:3a:c3:e6:ed:48:19:0e:a7:5c:11:a6:1a:af:4e:89:
ad:97:66:db:02:02:58:0a:c5:5c:53:1c:19:0a:e3:c1:45:b7:
6a:65:84:51:87:e6:bc:87:69:b6:9c:7f:d6:6f:91:d9:c4:67:
cc:03:77:cd:b4:3c:12:2a:93:34:ad:0a:59:0a:ab:bf:c6:9d:
21:32:f0:06:f9:27:d5:c9:02:e3:1e:02:54:c3:40:e2:71:49:
01:3a:62:60:50:c6:76:6b:31:d9:6f:87:1e:e8:d2:8d:bb:c3:
b3:8b:9a:7b:0d:a1:7f:c8:63:24:85:8f:2c:b5:7e:51:f8:8c:
b2:4f:72:f9:36:37:83:d0:12:2f:2f:b9:ea:a3:96:55:da:b4:
7c:c1:0e:f5:f4:56:9d:85:0e:e0:f5:a8:fe:1e:d8:e4:5a:d0:
ff:77:4f:87:96:a2:98:45:b6:ce:ab:a1:4f:75:8d:a5:21:2a:
88:bd:5e:7b:b1:97:59:67:49:a7:90:66:e9:95:2f:b0:ff:fd:
d1:67:74:1a:5f:1f:ab:72:9a:e9:45:c6:3a:26:d7:78:09:66:
4e:d3:d8:18:19:a7:16:f9:63:45:c1:11:d7:39:c9:a8:e7:3a:
96:85:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:13 2024 by rpki-client on console-fra.rpki-client.org