Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/euucIQ2revjDY3cTZmbKIkVNmP8.roa
File: euucIQ2revjDY3cTZmbKIkVNmP8.roa (raw, json)
Hash identifier: IOgpUKMBHPp9qYVTQEb2pB87eZHAzjbLcqW6XlXMSnQ=
Subject key identifier: 7A:EB:9C:21:0D:AB:7A:F8:C3:63:77:13:66:66:CA:22:45:4D:98:FF
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 10A9B9AE
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/euucIQ2revjDY3cTZmbKIkVNmP8.roa
Signing time: Sat 01 Jan 2022 13:00:40 +0000
ROA not before: Sat 01 Jan 2022 13:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209406
IP address blocks: 217.199.219.0/24 maxlen: 24
2a03:220:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279558574 (0x10a9b9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 13:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7aeb9c210dab7af8c36377136666ca22454d98ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:21:85:f9:30:a9:36:47:7f:2a:12:51:f2:
7c:8b:55:2c:1b:aa:78:6e:0e:c2:30:1b:2e:3f:15:
f2:df:02:e8:58:d2:17:33:f7:66:fc:c6:68:fd:92:
39:fb:3b:67:b2:3b:53:8d:3b:31:55:8d:71:f2:3f:
ea:41:0c:59:4e:75:f5:ee:a4:da:7b:9f:72:78:35:
a8:9c:ec:eb:73:7e:9c:b9:a0:4f:df:ea:22:4c:58:
01:66:07:12:11:42:d8:ee:ac:81:1a:05:c4:85:3c:
47:49:71:48:8d:a2:69:f9:42:d8:f3:a6:f2:a3:e7:
eb:bd:10:f2:54:4a:42:8f:7e:22:92:f3:a0:d5:45:
17:f9:76:5f:78:cb:f0:6c:fa:fe:58:25:fd:d4:53:
ff:8e:bd:8f:4b:e5:9e:81:11:41:b3:8a:b7:00:ec:
f6:07:e1:df:b7:df:7b:39:54:fa:67:26:c3:52:91:
0a:7d:dc:be:f6:3b:1e:2c:54:d4:3f:4e:8a:b7:5a:
f0:74:90:72:76:36:ea:e7:7c:6d:15:7a:a4:d4:f9:
63:02:69:49:a3:62:64:e1:6c:c9:29:0f:39:82:27:
26:6a:49:f7:e2:21:f1:c5:fa:b3:9c:09:9e:49:5c:
9d:64:7f:fd:c2:51:e0:3e:a1:14:2c:33:db:74:c6:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EB:9C:21:0D:AB:7A:F8:C3:63:77:13:66:66:CA:22:45:4D:98:FF
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/euucIQ2revjDY3cTZmbKIkVNmP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.219.0/24
IPv6:
2a03:220:f000::/48
Signature Algorithm: sha256WithRSAEncryption
81:7e:1a:88:85:65:4b:87:12:63:a1:81:2a:33:48:27:3b:66:
96:aa:53:cc:e7:0d:ab:e6:f7:84:ab:6a:72:cf:0f:08:0f:55:
c6:d3:eb:20:89:14:07:9e:bd:c7:a3:07:7e:ce:ef:cf:8b:51:
e0:01:df:44:52:03:4e:80:2e:01:75:af:2d:8a:4e:f8:98:d8:
2b:7d:f7:6c:42:26:0f:77:b0:38:3b:7d:f7:b0:c2:dd:e2:ab:
55:41:41:f2:05:c8:aa:9d:20:b4:4f:52:68:b6:eb:b9:25:a1:
d7:a5:29:42:c1:06:21:4c:3f:02:66:1a:ad:65:fa:b1:4f:2f:
ba:44:96:4a:03:a6:45:1b:18:54:b3:5d:3b:36:73:c6:66:02:
01:14:55:90:72:d1:bb:da:3d:88:72:56:99:67:51:88:b9:4e:
64:e1:4c:b9:c7:17:a7:98:f2:40:42:4a:95:18:e5:74:be:41:
24:d1:1d:36:95:98:5f:e8:be:0d:97:d7:e0:a8:19:e8:a6:5c:
59:9c:cc:33:12:e2:7d:b1:81:8c:6a:aa:ad:14:42:c0:a2:03:
be:1e:64:91:b6:d7:43:9c:dc:f9:f4:69:e2:f1:50:c0:e9:3b:
92:89:ba:6a:11:7f:26:fb:c3:d6:d6:bd:b2:16:9d:4b:1d:28:
12:cd:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:23 2024 by rpki-client on console-fra.rpki-client.org