Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/eVSQ27r8L-sWr2JoUDX730jT_Bg.roa
File: eVSQ27r8L-sWr2JoUDX730jT_Bg.roa (raw, json)
Hash identifier: 8+bqStqICNKPdXx/lmhRTOsBAd3GpEZVjRJ0c1p63z4=
Subject key identifier: 79:54:90:DB:BA:FC:2F:EB:16:AF:62:68:50:35:FB:DF:48:D3:FC:18
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 01837EBB505F807E0A1C0FCCB5692E0DF2D0
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/eVSQ27r8L-sWr2JoUDX730jT_Bg.roa
Signing time: Tue 27 Sep 2022 11:35:48 +0000
ROA not before: Tue 27 Sep 2022 11:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.76.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:bb:50:5f:80:7e:0a:1c:0f:cc:b5:69:2e:0d:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Sep 27 11:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=795490dbbafc2feb16af62685035fbdf48d3fc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:99:32:16:34:b8:36:6e:77:e2:28:bb:54:
2a:d7:49:d9:4d:7d:69:53:02:8d:bc:21:db:a5:28:
c7:d9:6f:7b:e4:ce:9e:0e:9e:bd:b1:e2:59:54:b2:
58:3c:a1:5a:d0:0f:c7:b9:e1:0d:b7:77:8f:fb:d8:
ee:bf:31:e6:8e:21:d9:ae:3c:86:dc:da:cc:fc:5d:
24:81:78:aa:18:0f:95:d2:a6:0e:ba:34:7a:f7:63:
27:46:0c:cb:9f:86:13:9f:b8:b3:50:53:7c:01:92:
11:9c:14:5f:3a:35:b4:2e:67:19:2b:9c:8a:92:e0:
bc:1e:78:eb:e1:04:d0:9f:6c:58:43:e4:6c:ef:53:
3a:94:18:56:45:d8:60:ed:83:60:8e:fa:99:c9:54:
4d:c0:b1:1b:16:d7:97:16:85:fc:af:da:09:2c:a5:
06:3e:5c:a4:4c:a3:72:cc:c2:0d:e9:11:6a:c3:c5:
31:6d:55:f4:df:ed:dc:54:52:6f:aa:47:06:6d:63:
99:7c:ec:35:ca:82:58:32:3e:48:18:41:35:1d:a2:
e4:c4:64:c0:36:4b:c9:fe:51:c7:0b:d8:9e:8c:f4:
db:fe:40:1e:db:23:ea:97:65:45:0b:20:0b:79:32:
08:d7:73:26:dc:40:33:a6:80:22:ce:7d:5f:b6:d9:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:90:DB:BA:FC:2F:EB:16:AF:62:68:50:35:FB:DF:48:D3:FC:18
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/eVSQ27r8L-sWr2JoUDX730jT_Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.114.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:60:09:75:9f:68:6f:eb:36:60:52:f1:31:a9:74:9b:e0:cf:
ef:8f:a7:ae:9a:d2:0d:b3:9b:34:c4:8d:68:05:86:14:3e:16:
a2:e7:26:a6:51:31:ac:d0:26:75:5c:a0:4b:0b:03:14:80:96:
2d:66:4d:fa:bd:44:45:2f:fa:31:02:dc:3a:1f:01:cb:77:df:
6f:08:9a:74:0e:69:a9:28:dd:32:d5:c2:31:f8:ee:1e:a0:5a:
f3:24:50:3c:f4:14:a4:e8:23:54:c5:78:c0:87:b3:f7:3b:66:
97:85:b0:7b:6a:8d:79:c4:a8:8d:71:e8:4f:e0:bc:4f:ec:c9:
a7:1d:90:e3:ed:b5:a6:81:d0:1a:de:10:a9:15:2f:f0:b7:81:
92:83:04:b2:14:b9:0f:79:14:7d:2e:f2:bf:f3:ee:c6:36:74:
69:9f:25:43:c9:ec:ef:dd:8f:2a:f2:9b:84:ce:1f:1f:55:0d:
a5:05:d5:30:da:cb:d2:de:2d:2c:8c:d9:86:ed:3e:f8:41:c4:
f8:0d:11:82:c9:29:54:e4:e2:b6:86:8a:5b:d2:d1:64:83:31:
fc:dc:43:6a:0a:61:ce:fe:22:81:ef:63:56:4e:f3:8d:21:08:
a6:31:a5:1d:b6:13:3b:ea:08:81:95:4e:25:fd:02:a9:2a:60:
19:50:78:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN+u1BfgH4KHA/MtWkuDfLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk
MmRkNTIwHhcNMjIwOTI3MTEzNTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU0OTBkYmJhZmMyZmViMTZhZjYyNjg1MDM1ZmJkZjQ4ZDNmYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmCZMhY0uDZud+Iou1Qq10nZTX1p
UwKNvCHbpSjH2W975M6eDp69seJZVLJYPKFa0A/HueENt3eP+9juvzHmjiHZrjyG
3NrM/F0kgXiqGA+V0qYOujR692MnRgzLn4YTn7izUFN8AZIRnBRfOjW0LmcZK5yK
kuC8Hnjr4QTQn2xYQ+Rs71M6lBhWRdhg7YNgjvqZyVRNwLEbFteXFoX8r9oJLKUG
PlykTKNyzMIN6RFqw8UxbVX03+3cVFJvqkcGbWOZfOw1yoJYMj5IGEE1HaLkxGTA
NkvJ/lHHC9iejPTb/kAe2yPql2VFCyALeTII13Mm3EAzpoAizn1fttl32wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlUkNu6/C/rFq9iaFA1+99I0/wYMB8GA1UdIwQY
MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt
YWRlZDFjNDY5ZWFmLzEvZVZTUTI3cjhMLXNXcjJKb1VEWDczMGpUX0JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm
LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwkxyMA0G
CSqGSIb3DQEBCwUAA4IBAQAvYAl1n2hv6zZgUvExqXSb4M/vj6eumtINs5s0xI1o
BYYUPhai5yamUTGs0CZ1XKBLCwMUgJYtZk36vURFL/oxAtw6HwHLd99vCJp0Dmmp
KN0y1cIx+O4eoFrzJFA89BSk6CNUxXjAh7P3O2aXhbB7ao15xKiNcehP4LxP7Mmn
HZDj7bWmgdAa3hCpFS/wt4GSgwSyFLkPeRR9LvK/8+7GNnRpnyVDyezv3Y8q8puE
zh8fVQ2lBdUw2svS3i0sjNmG7T74QcT4DRGCySlU5OK2hopb0tFkgzH83ENqCmHO
/iKB72NWTvONIQimMaUdthM76giBlU4l/QKpKmAZUHjh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org