Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/egV5fOFeuCplHZh2-9GZpaEUmUY.roa
File: egV5fOFeuCplHZh2-9GZpaEUmUY.roa (raw, json)
Hash identifier: V0OoPdwdvRqkdUpyOdyyG9RHFCgk3rnoJwdb0XFr5C4=
Subject key identifier: 7A:05:79:7C:E1:5E:B8:2A:65:1D:98:76:FB:D1:99:A5:A1:14:99:46
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 075C5C28
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/egV5fOFeuCplHZh2-9GZpaEUmUY.roa
Signing time: Sat 01 Jan 2022 15:04:06 +0000
ROA not before: Sat 01 Jan 2022 15:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207937
IP address blocks: 45.66.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123493416 (0x75c5c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Jan 1 15:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a05797ce15eb82a651d9876fbd199a5a1149946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:f3:74:76:42:d2:c8:2d:74:92:25:5e:4f:
33:df:a9:aa:a8:87:02:58:cd:f6:1c:ef:3d:a7:14:
fb:57:f0:b4:0b:d2:ac:5d:c8:4e:4e:77:87:54:da:
a6:81:b3:4f:ed:39:dd:7e:06:16:97:e1:73:79:9e:
71:81:40:c8:8e:b8:cf:5a:c3:95:43:0a:a4:d9:9d:
79:57:55:6d:2c:5c:4c:0f:98:86:d6:35:42:df:6f:
42:d1:50:3f:74:bb:f1:29:3a:c8:42:24:84:14:42:
26:cd:e9:e2:3b:45:10:23:3b:ec:62:27:bb:8d:27:
4d:b4:cf:a1:77:78:95:d5:5d:99:12:09:3d:6e:e8:
de:5a:11:b8:48:cf:10:c8:d1:45:74:8e:91:9c:4f:
a3:25:bb:a8:00:8e:53:89:51:fd:51:9e:ad:cf:ad:
17:1b:2f:1b:56:f0:09:ed:63:da:cc:3c:86:ea:52:
d2:0e:f9:f1:d3:97:a0:25:ee:ce:b2:d2:09:94:96:
82:aa:c2:83:b8:26:ac:5f:cf:72:1f:37:82:b6:df:
c7:e0:62:06:82:fa:4a:fd:39:85:28:dc:bc:eb:f3:
46:d7:2a:8d:2a:77:5d:3a:1b:35:eb:e8:4c:33:fe:
1b:86:45:7f:c0:7c:22:4f:65:ea:2c:bf:1f:b9:ab:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:79:7C:E1:5E:B8:2A:65:1D:98:76:FB:D1:99:A5:A1:14:99:46
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/egV5fOFeuCplHZh2-9GZpaEUmUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.16.0/22
Signature Algorithm: sha256WithRSAEncryption
14:11:84:13:56:87:9f:0a:7e:c2:2c:84:92:1c:d9:0b:65:64:
4c:1b:3a:f6:52:e1:bf:b2:67:49:cc:c1:44:c3:92:56:db:ed:
73:77:d6:c0:a8:0b:24:8d:62:16:c8:34:3f:12:78:78:4e:3a:
5a:c9:53:ce:9b:60:c8:c6:ac:a8:dc:68:6d:2f:0d:5e:ff:6b:
b0:53:21:ca:46:92:0f:a4:d3:2b:48:be:66:86:ed:8d:70:0b:
60:8a:85:6a:57:c5:42:24:a2:9f:eb:93:06:a3:73:00:34:e5:
6e:f3:db:c7:d6:08:cd:36:74:ec:72:ec:1c:64:39:3c:4e:e2:
d2:4d:de:11:b6:94:ca:95:c2:64:fe:e8:ec:88:11:57:27:44:
41:db:b0:3f:61:b2:91:7c:d9:10:73:1a:27:7c:e5:7c:0b:0a:
89:d5:cf:05:fc:ea:5a:cb:1b:fa:7c:ed:ca:b9:cc:dd:60:26:
6a:87:18:41:d8:20:9b:97:ad:85:cc:92:b6:28:df:c1:d0:d5:
92:4a:96:6e:9d:45:de:67:fc:ea:3f:8f:db:53:06:22:b4:83:
5d:65:00:f0:a6:72:2e:0b:a4:de:13:02:bb:1b:33:6e:39:97:
99:0e:1d:82:fd:ed:0a:2c:60:97:71:9a:39:01:0f:cf:ca:49:
d7:1b:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-ams.rpki-client.org