Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/et2br_TifZiL_aK5UUOtE5Xx4iA.roa
File: et2br_TifZiL_aK5UUOtE5Xx4iA.roa (raw, json)
Hash identifier: /ivvMVv0tvnKm0ZGNIVV1EF5yiZfifNehMrYYTDpXGc=
Subject key identifier: 7A:DD:9B:AF:F4:E2:7D:98:8B:FD:A2:B9:51:43:AD:13:95:F1:E2:20
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 486ECBDE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/et2br_TifZiL_aK5UUOtE5Xx4iA.roa
Signing time: Sat 01 Jan 2022 03:00:32 +0000
ROA not before: Sat 01 Jan 2022 03:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56541
IP address blocks: 5.8.80.0/23 maxlen: 23
5.8.84.0/23 maxlen: 23
5.8.82.0/23 maxlen: 23
5.8.86.0/23 maxlen: 23
31.44.176.0/23 maxlen: 23
31.44.178.0/23 maxlen: 23
31.44.180.0/23 maxlen: 23
31.44.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215220702 (0x486ecbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7add9baff4e27d988bfda2b95143ad1395f1e220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:35:a6:52:39:95:2b:e0:b4:59:e1:77:94:
e8:db:8b:d0:81:ce:62:f8:b7:68:14:15:c5:a6:24:
cb:bb:fc:5e:3f:3a:aa:0c:47:89:b8:c2:a9:0b:47:
4b:77:8d:f8:44:e7:82:e4:cb:2d:72:ee:44:ab:0e:
29:3d:ae:4b:85:7d:fb:e7:f2:be:cd:c7:67:bc:c3:
5d:93:cb:a6:86:09:03:22:de:66:7c:b3:30:97:58:
a1:58:4b:57:74:ae:9e:03:f0:90:ad:a8:74:1d:58:
bc:d9:6b:1a:3e:82:f6:d1:c2:ec:23:cd:39:c0:b7:
44:7a:81:b6:af:05:34:98:56:db:4f:1e:59:64:1e:
60:e1:33:3c:ab:fc:8f:5f:56:01:33:07:7f:5a:ca:
b5:98:60:18:86:76:a3:08:d1:b7:cb:2a:ba:71:64:
4d:36:e3:60:51:d1:18:20:93:54:04:d4:bc:23:48:
e9:75:4a:de:35:ae:94:b5:4e:4b:92:84:9d:41:54:
1a:34:e4:8b:c8:d5:4f:8b:a0:6c:b6:8e:d0:cd:fb:
ae:6c:71:9c:51:66:16:80:10:90:c5:8e:ef:e7:20:
0f:49:e1:18:ea:22:76:f9:9c:84:97:a6:a1:55:51:
90:99:b2:81:96:d8:ed:33:d6:16:b7:e1:e7:c0:69:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:9B:AF:F4:E2:7D:98:8B:FD:A2:B9:51:43:AD:13:95:F1:E2:20
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/et2br_TifZiL_aK5UUOtE5Xx4iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.80.0/21
31.44.176.0/21
Signature Algorithm: sha256WithRSAEncryption
af:7d:91:84:f1:72:a8:86:3c:f7:a3:5f:93:4f:44:51:5a:f5:
8c:3e:cc:c6:ec:e0:f8:d6:05:1b:17:74:f5:c1:9a:7d:ff:ad:
de:b3:f8:3e:61:ec:95:b8:13:2e:1e:70:69:42:66:8e:da:9b:
d3:b7:d8:55:f2:ed:d3:06:21:4d:ba:85:96:7a:ca:7e:3b:38:
7b:13:f7:64:dd:fd:ba:14:13:cd:58:c3:92:a1:c4:b0:e7:65:
64:02:a1:3c:39:81:16:d4:ee:d3:52:40:b6:91:7f:82:1c:69:
af:b0:46:4d:f2:6d:fa:f7:0c:d8:47:cd:ec:e9:6a:96:95:23:
03:e0:92:ca:a3:e3:c7:f4:09:16:c8:3f:e6:ca:d5:a3:7e:60:
32:16:ae:bf:f2:7e:b6:50:62:15:60:86:6b:49:e6:05:f2:fd:
3a:52:be:db:12:9b:71:94:fb:7c:37:de:5b:91:e9:dc:70:2c:
f5:01:19:d1:42:84:78:a0:79:3c:7b:64:b7:c6:2e:b5:1f:ce:
8c:89:52:3f:41:2b:38:74:46:44:25:f5:20:e7:bc:36:6d:a4:
2a:bf:7a:1e:7d:91:7a:4c:99:14:f2:bf:d6:46:72:3c:f8:a0:
c5:1e:2c:7f:60:a7:9f:d9:f1:6c:b6:68:53:4a:f0:bb:db:32:
11:4b:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org