Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/eQSd90hArfTRmYWxC2D_UvSJlsY.roa
File: eQSd90hArfTRmYWxC2D_UvSJlsY.roa (raw, json)
Hash identifier: GA2W9ARSN0SEQFPmv45aZnc1pwdJIDUs3xf2Pb/ZVo0=
Subject key identifier: 79:04:9D:F7:48:40:AD:F4:D1:99:85:B1:0B:60:FF:52:F4:89:96:C6
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0705B4DC
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/eQSd90hArfTRmYWxC2D_UvSJlsY.roa
Signing time: Tue 25 Jan 2022 13:24:15 +0000
ROA not before: Tue 25 Jan 2022 13:24:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117814492 (0x705b4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jan 25 13:24:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79049df74840adf4d19985b10b60ff52f48996c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:cc:2b:e9:75:f4:f7:4d:dd:32:c0:58:de:
5d:2c:17:29:f2:3a:39:cd:4e:85:9c:8b:0d:3a:15:
36:66:80:2f:1b:7c:d1:ae:1a:74:a9:b1:59:8a:0c:
9c:ac:07:ec:30:d2:48:db:77:47:05:61:d5:34:02:
09:4d:61:c9:70:7f:97:f6:9d:88:fb:9f:ad:0d:0f:
4c:b9:3f:aa:71:02:c7:77:39:cf:d0:3f:c5:98:57:
65:e3:c0:0d:f1:0d:b6:2c:64:da:2b:64:91:8f:3c:
c8:f3:a8:10:c2:06:dc:57:7a:eb:5e:61:bb:dd:31:
9c:99:b7:9b:bd:b0:fc:93:83:09:dc:08:67:0b:44:
8e:e2:0e:da:ae:41:94:85:20:a4:1c:fe:de:27:63:
81:d4:d4:90:35:18:e8:e6:21:2f:ca:e5:eb:d2:52:
68:ec:07:ce:ad:01:33:8d:ff:e4:1b:2a:87:4c:41:
be:c5:48:f8:28:a1:1f:9a:4a:30:99:97:af:52:95:
8b:91:79:29:4b:7a:27:01:c4:8e:61:9c:20:63:fc:
89:ee:a8:63:8f:c6:d4:2b:04:1e:01:78:1c:04:73:
b4:e8:7b:79:5b:40:78:b1:92:65:e3:23:67:64:ea:
99:bb:a9:a4:7e:37:0d:d2:32:35:7b:39:e9:79:06:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:9D:F7:48:40:AD:F4:D1:99:85:B1:0B:60:FF:52:F4:89:96:C6
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/eQSd90hArfTRmYWxC2D_UvSJlsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.222.0/24
193.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4e:b2:06:53:fe:1d:4f:08:71:80:67:d2:8e:42:f4:9e:10:
4e:38:5f:62:9e:e6:18:f3:a8:2b:4a:55:1f:e0:c3:d2:c4:ba:
b2:8d:58:61:76:b4:73:21:66:21:66:55:54:88:07:bb:2d:02:
88:76:0a:9c:f6:56:19:a2:d7:00:77:ba:48:c7:52:df:51:58:
fb:ee:a4:fc:10:1a:3e:43:85:ff:01:e3:d8:75:d3:3d:5f:fc:
08:5b:9f:65:80:d3:1a:9b:d8:c3:3b:d2:0c:4b:a1:2f:0f:98:
79:d6:f3:f2:cc:c4:80:de:ec:ed:6b:1e:fa:d0:16:0f:f3:57:
d7:1c:17:71:dc:66:12:81:25:4f:03:2e:a4:18:11:f8:f5:82:
a2:ff:40:f3:ea:fe:a6:8e:13:e4:dd:29:80:1b:0e:29:f4:59:
be:f3:9c:5e:e8:7d:1d:3c:30:41:2a:8a:d2:8d:9f:64:43:89:
fc:f9:e8:07:1a:83:76:26:69:34:cc:7a:f3:6d:84:fa:20:41:
af:4f:2c:68:e6:0f:28:e4:60:47:3e:ff:3a:3f:d5:a1:f7:9b:
4a:e7:d2:d6:41:fc:f6:a0:55:82:3f:f3:3e:a7:c0:98:e3:b2:
d9:47:21:c6:ef:f3:e0:d8:d0:ad:22:15:b4:fb:05:bc:5f:e0:
4e:f0:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:57 2023 by rpki-client on console-fra.rpki-client.org