Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eOTpnuwn9GeEBzbhhYGu7hYNluI.roa
File: eOTpnuwn9GeEBzbhhYGu7hYNluI.roa (raw, json)
Hash identifier: bM8jcCQkd339svO3p4rR/8Iieqr9UdJYmrGgVm61u8k=
Subject key identifier: 78:E4:E9:9E:EC:27:F4:67:84:07:36:E1:85:81:AE:EE:16:0D:96:E2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E26B3DF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eOTpnuwn9GeEBzbhhYGu7hYNluI.roa
Signing time: Sat 01 Jan 2022 01:58:25 +0000
ROA not before: Sat 01 Jan 2022 01:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212607
IP address blocks: 194.87.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237417439 (0xe26b3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78e4e99eec27f467840736e18581aeee160d96e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:16:bb:ca:0e:1a:33:eb:69:89:d4:34:a8:
f5:fb:07:60:fc:6c:df:0a:dc:d2:7d:f7:c5:4e:df:
4a:42:b4:d3:8f:96:43:85:65:b5:66:8d:8d:85:a1:
ba:fa:1b:0c:73:70:1a:35:4d:63:83:bb:de:eb:8c:
c5:25:1b:3b:3c:e1:b4:fb:76:4a:71:ca:e9:7d:1e:
1b:ea:f3:f4:b7:a5:59:91:63:11:3f:f3:18:b0:94:
17:1a:ff:06:9d:56:19:65:46:16:fd:a9:73:cf:ef:
ee:72:0a:a6:0e:b6:19:55:da:aa:f2:6f:4f:d8:64:
66:86:f6:ff:7a:91:0f:61:b5:64:b8:ec:3f:ab:ee:
b9:62:e7:0d:68:31:68:ba:f1:c9:91:73:55:af:99:
dd:8e:65:7a:41:43:b9:1f:da:2d:68:c6:82:6d:9d:
0a:6d:fd:40:36:2d:c7:66:53:38:d2:61:c3:20:dd:
17:73:55:e5:bc:b5:da:63:02:86:5f:8d:ac:c1:d3:
6d:1b:ab:8a:af:24:f5:75:a7:3b:09:6a:e8:86:5c:
7d:4a:54:6a:b7:5e:4e:c9:02:6f:32:e4:74:cd:e4:
6d:3e:87:11:4e:aa:f3:e6:16:fa:9f:ba:1d:31:1e:
41:9d:23:91:04:ca:18:f1:6f:d8:19:55:b7:21:b4:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E4:E9:9E:EC:27:F4:67:84:07:36:E1:85:81:AE:EE:16:0D:96:E2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eOTpnuwn9GeEBzbhhYGu7hYNluI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.23.0/24
Signature Algorithm: sha256WithRSAEncryption
11:23:31:f2:b5:90:5c:fe:23:78:6b:47:c0:c4:00:8c:a9:e8:
9c:d1:b7:46:b7:5b:84:8b:76:2c:a6:57:a1:7c:36:18:31:f5:
df:89:80:87:d4:79:3c:9d:0b:ca:d1:ed:42:6c:da:57:f7:3c:
ea:12:70:81:a7:9b:27:66:ca:8a:2e:9e:85:a7:a4:4f:84:8d:
b8:b5:ab:8d:64:b5:e2:68:35:04:ce:8e:61:86:ae:9f:44:fe:
a6:24:8f:b6:54:7f:ed:4b:7e:d1:32:b5:d8:50:cf:b0:81:b5:
0a:93:da:3c:94:f8:45:b6:70:57:bf:ee:31:ea:8a:29:89:fa:
a9:53:8d:b0:87:2e:30:6f:e1:ec:ef:1d:f2:1b:8e:f3:93:0e:
d0:7e:c5:26:7a:f5:6f:43:f9:98:42:cb:69:9f:94:53:ef:2c:
0f:62:a8:13:4a:55:4c:7b:b4:23:a1:b8:35:8c:71:94:09:11:
ce:01:12:13:57:c9:56:bf:a9:86:33:00:22:15:86:b0:ee:77:
f4:32:84:8e:8e:0c:89:fa:c7:13:d0:0b:0a:71:be:46:e9:18:
0c:f7:54:05:bd:04:5a:d1:8d:8e:99:d9:84:04:81:4a:77:74:
00:11:ab:df:98:b5:a6:00:e6:03:35:5e:bc:26:9c:16:20:a5:
ed:c4:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org