Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/60iA_7ZInY74OgetwGaywzQkOs0.roa
File: 60iA_7ZInY74OgetwGaywzQkOs0.roa (raw, json)
Hash identifier: Er1Y7lwQ7/YU3spgUBihtbyeuX4YuIAE9fVOOsiG8NA=
Subject key identifier: EB:48:80:FF:B6:48:9D:8E:F8:3A:07:AD:C0:66:B2:C3:34:24:3A:CD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0182C3B33CA39BA971D36C38DB3B33F97DA2
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/60iA_7ZInY74OgetwGaywzQkOs0.roa
Signing time: Mon 22 Aug 2022 03:57:59 +0000
ROA not before: Mon 22 Aug 2022 03:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41944
IP address blocks: 37.139.48.0/24 maxlen: 24
46.161.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c3:b3:3c:a3:9b:a9:71:d3:6c:38:db:3b:33:f9:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 22 03:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb4880ffb6489d8ef83a07adc066b2c334243acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:fb:06:62:23:7d:a8:60:cf:4d:db:f1:27:
d5:5c:91:56:71:ac:1d:ff:9e:79:a1:01:a7:04:01:
56:24:2e:76:8d:32:8e:c4:88:68:a8:ae:95:01:be:
2c:8a:c2:15:54:b8:98:4e:34:97:74:c3:c6:bf:54:
cd:7b:db:30:49:23:3c:72:09:9a:9a:c4:eb:04:de:
ed:fa:92:8d:3f:ba:a0:9e:3d:be:ac:45:8a:05:b6:
15:9e:58:f1:69:88:5e:51:be:6b:8f:b2:44:20:c5:
0f:63:e1:2c:33:2b:99:47:0c:c8:02:05:7d:fd:ab:
80:48:1a:4d:ca:ab:4a:61:63:6b:12:63:7b:6b:e1:
08:33:57:1d:37:9c:72:17:89:14:30:8c:c7:3f:be:
f4:f1:e8:ee:31:a2:b4:0f:35:5f:5b:1f:4f:9a:00:
a3:f3:1d:e3:4f:f3:57:e8:d4:84:fb:e3:2c:f9:6b:
4c:c7:98:55:f2:ec:51:44:a6:f6:71:9d:c7:56:6a:
13:2b:f5:fe:82:4c:90:ed:6d:d9:7b:96:a0:16:ff:
f0:d8:db:d4:6a:6e:ac:3e:37:e8:c1:83:ab:8d:14:
0a:ab:bf:18:ab:44:62:52:e0:fb:99:c6:7f:54:e0:
a9:6b:b6:10:83:af:73:20:ef:d7:45:5a:df:3c:3c:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:48:80:FF:B6:48:9D:8E:F8:3A:07:AD:C0:66:B2:C3:34:24:3A:CD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/60iA_7ZInY74OgetwGaywzQkOs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.48.0/24
46.161.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ed:63:53:9f:23:72:64:30:ec:71:04:64:ea:ac:c5:c3:e2:
d4:4b:e4:56:a9:24:1a:5c:4b:ff:0d:1a:f0:ee:20:14:13:c3:
8e:27:3f:60:9d:2b:2e:3d:0c:af:93:70:ec:f0:49:61:f7:bf:
17:18:ac:04:45:a5:0b:85:76:8b:48:0f:f6:89:c8:17:80:88:
13:9a:c8:ad:82:73:ae:a3:e3:85:ea:76:2a:78:a9:b6:42:03:
87:c9:e6:0d:75:c3:0b:ed:af:f3:24:aa:aa:06:09:a3:c1:73:
7e:20:40:73:23:1d:5d:a1:62:e9:81:6b:8d:00:b0:01:85:b2:
f7:11:7f:99:54:a7:fe:e1:cb:4c:65:db:d0:33:eb:2b:34:07:
39:18:62:1a:2b:cf:9a:be:7c:6d:14:ee:83:63:af:25:1d:94:
02:5e:4b:27:fe:dd:b0:1a:fc:5d:43:9b:9c:79:b7:fc:6a:34:
0d:18:fd:71:47:27:fb:e9:69:32:0d:0f:2a:32:8c:1e:4e:55:
8c:aa:3a:88:2c:c7:8f:9b:6a:a1:30:24:9c:13:26:7a:bf:19:
49:1d:ee:a2:fd:e7:38:a0:4c:af:f4:5d:f0:64:13:ba:cd:8f:
b1:c3:e1:dd:71:83:66:e5:20:36:bd:25:86:b7:6e:44:bf:d7:
dd:66:fc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org