Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBC343R7wCZSkVvS5LZbbFM58Aw.roa
File: EBC343R7wCZSkVvS5LZbbFM58Aw.roa (raw, json)
Hash identifier: 8i4pz5uvnGi2g7SzYhaY2ZzeGiEwGxYL/8z+oouk9fU=
Subject key identifier: 10:10:B7:E3:74:7B:C0:26:52:91:5B:D2:E4:B6:5B:6C:53:39:F0:0C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182FD697470382B6D47CBFEBE846CD0931B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBC343R7wCZSkVvS5LZbbFM58Aw.roa
Signing time: Fri 02 Sep 2022 08:55:22 +0000
ROA not before: Fri 02 Sep 2022 08:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:69:74:70:38:2b:6d:47:cb:fe:be:84:6c:d0:93:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 2 08:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1010b7e3747bc02652915bd2e4b65b6c5339f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:a3:4b:e1:20:20:16:29:49:fb:d6:d0:c0:
c7:b6:25:d0:f8:82:e7:48:78:e7:81:43:95:3b:77:
62:73:fc:5d:12:2a:3a:6b:79:99:7b:10:87:a9:22:
b5:e7:9f:e8:7e:6e:a1:10:7d:39:f4:b1:08:86:7e:
b7:6f:5e:4c:77:b5:79:cc:6d:97:2b:c6:e9:52:9d:
63:54:73:83:92:a3:d5:25:32:9a:f2:c3:59:82:dd:
22:2a:92:6d:6a:45:04:c3:52:2a:49:5c:2a:18:61:
a9:cc:76:27:b4:71:53:85:2f:d8:4a:3e:77:2b:f2:
42:3f:aa:ce:e0:5a:18:1d:86:52:0d:87:22:cd:32:
ca:87:9d:b9:ee:aa:7b:e5:e1:d8:2e:1c:a2:97:3a:
48:73:ce:58:f3:ea:6f:c2:f1:2b:04:cc:b6:3b:8d:
e1:1a:a0:f2:9a:72:c6:54:81:9d:dd:2d:6d:9c:5d:
7f:a3:17:68:79:7e:6b:d4:f2:e8:8b:86:c3:0d:79:
a0:cb:5f:a3:92:2d:6d:45:fb:9c:08:69:b7:d0:f7:
00:58:1f:d9:e8:82:bb:32:de:29:48:92:aa:91:ea:
9b:a5:1d:88:d3:1b:9b:ec:5e:8b:45:b8:46:01:1d:
34:60:1d:0d:20:94:2d:69:be:b0:c7:a8:08:fb:08:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:B7:E3:74:7B:C0:26:52:91:5B:D2:E4:B6:5B:6C:53:39:F0:0C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBC343R7wCZSkVvS5LZbbFM58Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.124.0/23
Signature Algorithm: sha256WithRSAEncryption
16:e6:8f:a7:d3:60:34:ae:28:3e:88:1f:6f:4a:f0:41:f3:df:
2d:b9:1c:24:23:4c:dd:86:cf:e9:72:98:56:92:1a:0d:dc:b6:
81:8d:74:17:de:78:3d:9d:10:7d:a4:a3:e0:b3:e9:f7:32:3b:
5b:fd:34:35:df:f9:b7:40:a5:cc:b7:0a:db:a4:c2:d1:00:4d:
26:8b:07:0d:99:8e:8a:30:19:52:62:c3:89:28:6f:73:1f:52:
4f:af:2a:32:0d:30:e7:98:13:4b:10:51:62:c4:ee:ea:9c:fe:
c9:4b:74:aa:d1:20:78:3f:22:de:91:19:6a:e1:ac:03:71:74:
09:c6:41:82:66:5f:ad:b1:05:d8:79:58:d4:a5:3d:66:7a:50:
4f:a8:b3:56:d3:38:5a:e1:1d:36:49:40:1e:80:57:ec:c3:9b:
31:23:c1:2b:88:27:80:f1:3e:aa:1e:c8:1d:1e:a8:4b:3b:e3:
45:be:4e:43:fb:7b:92:91:0b:26:04:af:98:39:2c:c9:e8:1a:
d8:c7:80:e0:1b:6e:db:9a:40:d1:0c:8b:db:85:99:7c:b2:d8:
32:17:59:0a:2d:09:94:50:b9:89:9c:5a:21:5c:2c:e8:8e:4a:
a7:18:97:c1:4a:8c:75:c1:bc:e4:34:f8:e3:f6:a0:de:4f:51:
e6:d4:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org