Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ES-rdb3_JFN-xN3zjjODkN0l5Ek.roa
File: ES-rdb3_JFN-xN3zjjODkN0l5Ek.roa (raw, json)
Hash identifier: swHpbmxd7kLgH+RRk9nnI8wHd6Nn8R/K0oymqZYQZTE=
Subject key identifier: 11:2F:AB:75:BD:FF:24:53:7E:C4:DD:F3:8E:33:83:90:DD:25:E4:49
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184AFB9A919F4592E9D74BB312F4974F022
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ES-rdb3_JFN-xN3zjjODkN0l5Ek.roa
Signing time: Fri 25 Nov 2022 16:58:11 +0000
ROA not before: Fri 25 Nov 2022 16:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 194.15.52.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:af:b9:a9:19:f4:59:2e:9d:74:bb:31:2f:49:74:f0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 25 16:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=112fab75bdff24537ec4ddf38e338390dd25e449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:55:7b:60:f2:18:36:f2:af:3e:5b:fd:cf:
de:44:9d:44:20:96:bd:c7:ab:c2:4a:e7:8e:1c:61:
63:30:87:ae:ab:70:bc:8d:ea:08:84:fe:03:73:54:
6a:11:aa:81:82:b8:58:3c:57:c7:0c:94:09:e4:02:
55:19:5f:ba:4c:22:14:ef:0b:7b:b0:59:d3:cc:07:
48:51:e1:63:d2:8c:2d:70:ef:91:e2:85:52:fe:cd:
cb:72:72:23:8b:ea:73:ae:f9:96:8d:22:0d:b3:6d:
db:d0:e2:38:b3:11:6c:3e:4c:b7:3d:97:6e:12:30:
37:60:2d:d0:a8:96:8e:a8:8a:3c:e4:26:6d:b6:db:
42:71:45:e3:41:33:ad:be:04:28:ba:10:8b:1a:11:
4d:a5:93:1d:93:f9:4e:0a:db:68:b1:6b:db:88:2c:
be:e6:4e:b3:c6:36:4f:fb:4d:2a:ef:fa:f2:46:ac:
62:f7:38:83:01:3e:03:ed:e1:7b:4d:4c:a9:f0:62:
49:2b:f6:45:b9:a6:9f:9f:fd:7d:41:2c:8b:7e:47:
70:d1:a2:62:ea:8e:c2:a0:cc:c4:c5:28:bd:b3:4b:
22:93:a8:13:a5:f0:07:21:cb:af:52:9e:cd:c6:42:
7e:e2:d2:fc:aa:0f:da:47:b2:67:9c:93:93:00:0f:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:AB:75:BD:FF:24:53:7E:C4:DD:F3:8E:33:83:90:DD:25:E4:49
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ES-rdb3_JFN-xN3zjjODkN0l5Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ab:32:ea:27:4d:7d:83:cd:7e:b1:bc:48:12:54:74:c2:1f:
89:3e:1d:f2:c0:25:30:93:a3:90:8b:02:5f:ef:f8:4c:46:1f:
91:49:ce:9a:1d:d7:9a:a1:5c:dd:4b:c7:ce:a3:ff:bb:2e:fb:
0f:4b:51:6e:31:ee:9a:e3:01:23:67:c5:de:51:5f:64:77:9f:
de:4e:8f:47:d0:4a:5d:78:4e:d6:4c:f4:c8:6a:28:d4:07:b0:
09:87:06:eb:f1:0e:9f:db:b8:3d:8c:e6:91:37:d4:7e:b8:ea:
4b:d4:3d:b1:c7:2b:98:ca:03:4d:a5:74:00:d3:15:57:d6:57:
23:3d:ef:22:d6:7b:12:f2:10:74:ed:4b:62:4f:76:47:a0:e3:
19:9c:e0:df:d8:c1:aa:36:94:73:6c:84:f6:63:e1:c8:6f:04:
93:b4:2d:46:e8:3a:bb:82:d6:4d:2c:77:41:db:9a:59:c6:a9:
d0:d8:42:2f:d3:b6:f2:94:10:b6:9e:fe:c4:0a:49:e8:9e:1e:
fe:66:bf:1d:fa:fc:7c:f7:a6:4d:f7:10:66:c9:1c:10:74:ee:
58:47:7b:01:ce:0e:17:c3:2f:e8:32:a0:ab:0b:10:13:56:b8:
00:c1:93:2d:1f:28:91:2b:e7:2c:cf:64:97:c0:61:4e:1e:de:
92:08:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org