Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/N-eshBWyMk5Fq8wfRAGmGT91IvU.roa
File: N-eshBWyMk5Fq8wfRAGmGT91IvU.roa (raw, json)
Hash identifier: Aq8DJPOvs9Kddzw8lU6+OxzAL4t8bd54jU9GjWdidaU=
Subject key identifier: 37:E7:AC:84:15:B2:32:4E:45:AB:CC:1F:44:01:A6:19:3F:75:22:F5
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 0184BD21FC2DB62516B0BE6F9812FFD5A17E
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/N-eshBWyMk5Fq8wfRAGmGT91IvU.roa
Signing time: Mon 28 Nov 2022 07:27:11 +0000
ROA not before: Mon 28 Nov 2022 07:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203646
IP address blocks: 185.128.72.0/22 maxlen: 22
87.239.64.0/21 maxlen: 21
2a03:9aa0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:21:fc:2d:b6:25:16:b0:be:6f:98:12:ff:d5:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Nov 28 07:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37e7ac8415b2324e45abcc1f4401a6193f7522f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:f0:04:9c:7a:77:b4:61:8a:72:50:20:18:
40:69:2d:64:65:cb:15:dd:8f:48:a1:91:07:11:1d:
a3:d9:f1:39:de:be:98:5b:b4:6c:54:84:2a:f1:fb:
ac:5b:8a:13:34:aa:1c:c3:89:8d:91:d5:c7:7c:6e:
c7:26:08:d9:71:af:ee:eb:9a:51:48:66:cb:7b:a3:
20:17:08:07:13:57:89:62:5f:c5:4d:49:db:94:e7:
e6:b6:33:c8:9d:1e:18:88:5d:6f:e7:31:a8:10:64:
a3:90:6d:c5:f4:71:e7:c5:72:63:ee:d4:09:5b:e8:
43:32:91:a9:bd:c7:0c:25:88:b5:e9:28:1e:98:3f:
0c:d1:8c:49:ac:99:b1:e6:eb:28:b0:f5:32:58:84:
2c:6c:b0:fa:7a:b5:54:c5:f9:cb:a6:ee:70:bf:22:
72:5b:b8:7f:e4:da:c1:12:e5:c4:5c:b1:f2:ae:c5:
7c:21:70:ed:fd:94:0c:39:17:b3:8a:2e:3a:6b:d1:
9a:5f:d5:19:cb:b5:e8:ca:2e:40:e1:99:b4:76:37:
f6:f7:b3:42:2a:64:8e:3b:b5:c8:58:6c:ab:00:5c:
d9:84:62:c0:f5:e8:77:4a:c0:50:1e:68:b2:51:25:
b6:38:d6:1f:a0:72:07:89:33:a3:8d:af:22:fd:83:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:AC:84:15:B2:32:4E:45:AB:CC:1F:44:01:A6:19:3F:75:22:F5
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/N-eshBWyMk5Fq8wfRAGmGT91IvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.64.0/21
185.128.72.0/22
IPv6:
2a03:9aa0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:ea:42:ab:14:69:33:57:ae:d8:3d:4c:c2:be:bf:e6:ba:e5:
6a:92:fb:c0:7a:e7:2d:b4:b4:d9:e6:4c:84:2e:91:3f:56:21:
12:1c:c2:00:c7:76:3a:ff:fa:43:7a:39:49:0e:64:09:60:86:
9a:af:f8:d7:84:46:15:cf:26:c6:68:f0:b3:29:30:1d:72:21:
01:ee:4d:1a:80:a5:37:f2:ea:77:74:79:4f:b3:1c:9f:8d:0f:
ed:07:15:05:0f:5f:e7:06:be:34:0a:8a:21:01:57:05:cb:a4:
36:3c:89:87:d8:01:e8:b8:84:b9:cf:46:23:32:41:2c:e1:c2:
66:b7:97:f3:70:2b:16:db:3e:2d:39:b7:f1:4d:af:45:34:d6:
a3:a1:61:a2:51:35:95:17:32:f7:eb:64:2a:40:3e:e7:e3:3e:
66:60:f9:77:50:bd:ee:98:59:40:87:2e:eb:bb:0c:8d:e9:db:
b8:7c:2f:6e:15:3a:ff:46:87:d9:4b:4d:f6:da:f8:34:fc:b9:
67:57:bc:24:a7:b1:7b:3e:ea:cf:31:40:f2:ec:46:53:12:cc:
aa:ce:25:86:92:14:36:52:0f:a9:8d:ad:3a:7b:0e:44:6b:16:
41:b2:eb:a4:43:46:23:1b:98:83:10:75:c9:69:8d:db:3d:84:
95:7d:88:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:00 2023 by rpki-client on console-fra.rpki-client.org