Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/eHUNL3SDjj9xQdguzYrRULy7TOE.roa
File: eHUNL3SDjj9xQdguzYrRULy7TOE.roa (raw, json)
Hash identifier: MgOEBNGsftIWLPYFAcVeVWtq7HprW1U8XzYThgZKleY=
Subject key identifier: 78:75:0D:2F:74:83:8E:3F:71:41:D8:2E:CD:8A:D1:50:BC:BB:4C:E1
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 040A9C
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/eHUNL3SDjj9xQdguzYrRULy7TOE.roa
Signing time: Tue 15 Mar 2022 11:09:44 +0000
ROA not before: Tue 15 Mar 2022 11:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 155.192.55.0/24 maxlen: 24
155.131.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264860 (0x40a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Mar 15 11:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78750d2f74838e3f7141d82ecd8ad150bcbb4ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:04:87:ac:d1:0b:b6:c3:5d:fa:1e:b7:49:
83:0d:e9:04:8c:0d:19:48:db:72:33:43:df:9b:d5:
2d:2b:53:7d:17:b8:6b:ab:87:35:63:f2:a8:5c:eb:
ab:4e:75:7f:99:92:27:b2:0e:26:a8:aa:dc:ab:d8:
27:f0:f3:6a:c3:0b:c7:c6:25:f7:fa:cc:46:2a:43:
fa:4e:31:ea:7d:1c:87:1e:83:82:bf:81:d0:0f:52:
e3:10:25:a8:84:dc:36:a5:ca:69:e2:78:35:2e:05:
24:bd:3e:50:7e:5f:b0:d8:84:bf:34:dc:b6:eb:8b:
0c:11:5d:ef:e1:62:3c:75:88:c0:f0:9a:30:52:9e:
c8:68:1e:29:52:dd:81:9a:79:95:ab:38:0d:07:a9:
fe:ff:f6:6d:5f:b7:79:03:36:6e:e6:a4:47:bf:c8:
90:75:d8:d0:05:55:f1:f4:18:0d:b8:6b:9a:15:58:
c8:d0:e2:4d:18:e6:c3:90:a2:11:13:21:41:b4:8d:
16:d6:8a:29:5e:b3:7a:ff:3a:e9:1a:ee:35:96:fd:
78:53:72:8f:5e:43:1d:af:2c:32:eb:4a:e0:0e:f0:
04:e7:4e:08:48:c1:d4:d6:a0:1c:d7:ea:0e:34:c3:
0a:8c:d7:64:7c:32:53:5b:08:4d:b3:42:4a:8c:62:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:75:0D:2F:74:83:8E:3F:71:41:D8:2E:CD:8A:D1:50:BC:BB:4C:E1
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/eHUNL3SDjj9xQdguzYrRULy7TOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.131.55.0/24
155.192.55.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ac:eb:26:66:ae:45:c0:67:0d:d7:22:47:29:83:aa:01:35:
4c:e8:8d:30:82:6e:fa:b0:bd:b3:5d:9f:b3:c7:af:ea:6b:9e:
7d:9a:28:34:bb:9d:2f:5e:5e:cc:47:f4:df:ea:be:35:2d:56:
b2:66:19:01:58:a9:e0:ef:52:94:be:5d:13:71:ed:1a:f4:f1:
98:16:fd:21:98:15:7b:b2:34:aa:d9:b8:4c:c1:f6:8a:96:e4:
e8:71:b6:16:ef:ea:21:7d:e9:c3:e1:07:ad:65:43:2e:6b:15:
de:47:6b:55:21:13:d4:16:ae:0f:6a:ee:03:e3:ea:21:9e:da:
12:16:2f:c3:1f:59:df:79:38:a8:6e:54:de:a7:97:eb:90:c1:
59:c6:e9:7f:b9:4e:37:be:13:1d:b4:6d:e5:e1:71:49:fb:f6:
8a:52:a8:17:75:e2:89:12:64:ca:1d:98:07:03:6e:cd:2c:c8:
c3:b0:9b:55:ae:f7:58:9f:37:3b:d6:da:1b:72:fc:40:b0:d4:
5a:50:52:35:f1:03:d3:ab:05:c5:1b:64:97:3e:ca:1c:01:40:
d4:a0:cd:03:6e:b2:12:0d:b5:75:27:4f:f5:ec:64:71:66:47:
22:0b:8f:49:2a:f5:43:ea:eb:f4:1d:79:1c:8e:10:a2:3a:e2:
01:55:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:21 2023 by rpki-client on console-fra.rpki-client.org