Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ebg_qES0bErUteOjWK8KAbU1CvU.roa
File: ebg_qES0bErUteOjWK8KAbU1CvU.roa (raw, json)
Hash identifier: 9OXnhI/VW315+K49OXvs3hrBmhXIR/m6nus4tEGpubg=
Subject key identifier: 79:B8:3F:A8:44:B4:6C:4A:D4:B5:E3:A3:58:AF:0A:01:B5:35:0A:F5
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 10A81E21
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ebg_qES0bErUteOjWK8KAbU1CvU.roa
Signing time: Sat 01 Jan 2022 13:00:39 +0000
ROA not before: Sat 01 Jan 2022 13:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202520
IP address blocks: 185.111.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279453217 (0x10a81e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 13:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79b83fa844b46c4ad4b5e3a358af0a01b5350af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:4d:3b:e9:03:a5:05:cd:d4:f2:e9:eb:9e:
80:ca:90:5f:9c:bc:c4:f9:f9:3c:22:d3:b8:7e:7b:
08:ae:40:e8:c7:be:14:c2:bd:b6:2f:f2:a3:a0:55:
89:13:43:a2:35:8c:d8:79:ff:4b:4f:25:ae:90:ae:
6c:4c:01:b1:5f:35:0f:39:49:31:df:79:92:49:45:
d3:a3:bf:df:98:76:bf:f4:67:6c:a0:a2:75:91:94:
a3:3f:a3:4a:56:00:83:ce:1c:e8:f6:88:48:c9:53:
ed:e9:13:05:fb:19:d5:a8:40:a1:03:58:62:da:ae:
9e:69:bd:bc:eb:98:32:f4:37:36:a6:a8:e3:a6:23:
78:aa:09:39:14:39:be:b2:32:3d:a0:1c:41:d5:cb:
44:87:0a:6a:f8:e1:71:b3:3f:15:9c:33:23:e7:81:
40:57:ee:61:e8:67:8c:54:33:2a:d3:db:0c:72:f6:
e4:22:ec:88:35:49:07:cb:08:9f:66:00:7a:b4:6d:
f3:c8:a8:04:b1:8c:17:2a:f4:49:1f:dc:67:cb:1b:
13:00:7c:05:29:b8:2b:43:43:2f:53:57:66:12:18:
68:c6:56:23:44:fd:f4:57:55:c5:15:a6:52:1d:eb:
48:68:93:a3:1d:3f:d0:c2:51:6c:2d:12:72:96:73:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:3F:A8:44:B4:6C:4A:D4:B5:E3:A3:58:AF:0A:01:B5:35:0A:F5
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ebg_qES0bErUteOjWK8KAbU1CvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.219.0/24
Signature Algorithm: sha256WithRSAEncryption
03:19:41:71:36:f2:e7:e5:e7:df:fa:31:e2:a5:cb:f7:81:a2:
20:dc:37:3b:3d:39:0f:62:f0:35:4d:f9:f5:9d:c2:91:8c:57:
e8:ad:33:a9:0a:b2:45:e8:6b:b3:c1:cf:eb:c1:0b:71:5c:ac:
e4:ba:d7:38:1a:dc:0f:1a:2d:18:9d:8a:23:f5:59:fd:72:77:
b0:c9:84:8e:b1:e8:d5:15:e5:cf:15:08:4e:65:c9:6f:9e:77:
0c:87:94:ae:3d:fe:25:75:8f:2e:37:65:14:e3:4d:a7:bc:2c:
97:cd:f1:04:cf:ed:43:47:da:7e:6a:d2:c9:46:8f:08:d1:30:
27:ef:a4:78:3d:3c:05:25:5f:e1:9b:0f:09:0e:24:43:ce:08:
af:1e:53:4f:57:47:c0:4e:73:1e:fa:01:f3:73:c7:b0:4c:29:
12:dd:f7:a2:3e:5d:8a:d5:63:17:d1:0d:3b:84:38:e7:a9:bc:
13:05:d3:d1:40:19:81:e4:19:e6:ed:3f:0f:77:d6:aa:c8:ea:
8b:5d:56:b9:cd:80:7c:c1:ee:c2:2b:e4:a1:3e:5d:d7:28:81:
00:3c:70:30:fc:78:fa:2d:00:94:89:f6:a4:11:59:c3:6f:b7:
e0:b2:72:a4:03:ef:1f:1b:58:25:33:44:3c:14:7a:4e:51:c8:
ec:2c:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org