Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EOa8zuOrfT_jlyG6qWF_ybiLP50.roa
File: EOa8zuOrfT_jlyG6qWF_ybiLP50.roa (raw, json)
Hash identifier: Sj4+lCeQ3FTAejbQXyxFEDbLPla51EnVFGKsPQzL4Ik=
Subject key identifier: 10:E6:BC:CE:E3:AB:7D:3F:E3:97:21:BA:A9:61:7F:C9:B8:8B:3F:9D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018224AA1875999F395E56B5BA6E0823E8A9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EOa8zuOrfT_jlyG6qWF_ybiLP50.roa
Signing time: Fri 22 Jul 2022 06:48:23 +0000
ROA not before: Fri 22 Jul 2022 06:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:aa:18:75:99:9f:39:5e:56:b5:ba:6e:08:23:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 22 06:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10e6bccee3ab7d3fe39721baa9617fc9b88b3f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:70:7e:f3:f7:a6:fc:7a:cd:3b:61:c7:c7:
e3:64:d7:14:35:64:c2:8d:c1:0a:9e:ed:1e:22:55:
36:50:4f:f4:3f:3d:8a:de:87:25:64:83:09:dd:06:
87:5c:7b:d3:59:d9:2c:22:0e:37:d1:13:cb:c6:4d:
c3:00:e5:3a:3a:26:5b:1b:ae:5f:3b:8d:ec:3d:22:
9b:ad:c3:bf:f2:3a:c9:a5:bd:9b:5a:78:e8:06:26:
a0:54:88:9d:1f:27:d6:cd:73:3b:14:21:6b:44:23:
8a:0b:d9:b9:4d:a7:b7:98:ea:29:15:be:a5:0e:e2:
ab:09:3f:2b:70:95:15:b0:8b:22:2d:c0:d9:fa:95:
dd:30:68:d6:d3:4a:2a:85:19:1e:19:ad:5c:ed:30:
12:76:3d:19:f5:82:d7:1f:91:fd:6e:3a:6c:00:a3:
d6:7a:82:18:b7:13:4e:f9:59:77:21:f8:f2:64:a8:
91:b5:50:1f:c0:5d:c7:12:fb:dd:f5:70:00:f9:b1:
5b:03:a3:89:5e:de:f1:9f:df:67:62:e6:57:61:6b:
82:8d:cb:94:cf:c2:e5:3d:88:0b:73:c9:7c:a6:cc:
57:7c:de:7a:a7:63:e4:41:f3:54:7d:f0:e1:23:04:
a5:f8:8f:b2:d3:cd:36:85:f0:42:98:45:fa:1b:10:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:BC:CE:E3:AB:7D:3F:E3:97:21:BA:A9:61:7F:C9:B8:8B:3F:9D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EOa8zuOrfT_jlyG6qWF_ybiLP50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f2:b3:e5:50:4d:ca:73:62:37:51:61:79:99:98:78:ec:fd:
53:bb:86:af:64:88:3d:c3:f2:de:dd:47:ed:cd:72:98:aa:2d:
4d:4e:36:3b:b9:8f:f4:94:41:c3:57:cc:b0:fb:80:8f:1f:a6:
d0:d4:fe:25:f0:1d:08:bf:43:31:6c:a7:78:56:95:2b:21:e0:
75:77:cd:4a:e2:66:4a:ff:40:a9:2c:76:79:4d:4b:6d:a1:47:
19:2b:8f:cb:03:0c:35:13:60:d8:4f:26:7c:a2:03:80:50:1c:
c1:e9:8b:e8:88:1a:11:c2:c3:87:0a:65:35:34:61:52:3b:c5:
5d:ff:90:ec:16:9a:7c:ed:a0:04:65:5c:b7:7e:1f:2e:34:f2:
de:b4:09:9b:e9:cb:f6:19:86:93:65:e8:3d:e8:db:23:8b:80:
28:7b:99:c2:5f:6c:85:9c:ac:8d:3e:a1:53:28:a0:74:7d:de:
28:73:a8:6f:9d:5d:5f:b6:34:61:2e:d7:bd:40:de:49:82:4b:
0c:c9:a7:5f:d6:56:4f:11:c7:4e:d9:f2:92:bc:18:fe:80:be:
18:58:13:cc:6f:44:fb:c7:2a:d3:94:a7:9c:ef:94:e0:c2:c8:
fe:5a:69:58:86:de:68:1d:78:cb:b9:5c:87:d6:39:b7:85:d5:
b4:a5:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org