Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/EnMPMPetYq5O4plWtpVD7V8ANTQ.roa
File: EnMPMPetYq5O4plWtpVD7V8ANTQ.roa (raw, json)
Hash identifier: J+R+6VeuWDtxlnIJ8MR73sKAA9j8fv/y3Q/L4jg7ej0=
Subject key identifier: 12:73:0F:30:F7:AD:62:AE:4E:E2:99:56:B6:95:43:ED:5F:00:35:34
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 0184A57802050400E7E8FC81D95F500FD1C9
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/EnMPMPetYq5O4plWtpVD7V8ANTQ.roa
Signing time: Wed 23 Nov 2022 17:10:16 +0000
ROA not before: Wed 23 Nov 2022 17:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48954
IP address blocks: 85.91.40.0/22 maxlen: 24
195.88.100.0/23 maxlen: 24
37.48.240.0/21 maxlen: 24
185.83.120.0/22 maxlen: 24
2a00:7640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:78:02:05:04:00:e7:e8:fc:81:d9:5f:50:0f:d1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Nov 23 17:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12730f30f7ad62ae4ee29956b69543ed5f003534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:fb:3b:85:41:1e:6b:58:b6:f6:91:71:df:
db:5f:9e:04:1f:65:92:da:bb:91:2c:e1:e9:33:13:
00:57:17:21:de:97:75:48:f1:2d:85:af:39:7b:2e:
12:3c:ef:e2:ae:e6:d1:d6:4e:7d:7e:03:41:87:a2:
16:1f:9c:80:06:a7:0e:24:40:a0:28:4c:f6:d9:d6:
c7:0e:d5:a9:75:b7:e0:25:09:56:39:07:7b:4e:ec:
67:7b:65:2d:d2:30:6a:07:f2:59:fc:6a:97:3f:33:
9f:76:70:69:f8:79:cc:04:60:80:47:1a:cb:5a:80:
1d:3b:1a:26:8d:d3:d2:57:1d:c6:f2:70:90:3e:5b:
c9:bc:6d:23:a6:cc:4b:39:3a:d6:4f:6b:25:de:a2:
b0:57:84:88:63:d0:50:1e:71:1d:15:78:ee:f5:57:
1d:a7:92:05:89:78:f6:09:ff:a5:cf:6e:f0:9b:59:
7f:4b:69:4f:ae:b4:ba:c2:f0:f7:21:bf:b2:80:22:
f0:a5:e1:3d:39:1c:e0:f5:98:6f:8d:7f:a1:0c:bc:
dc:26:73:f0:e9:64:47:75:b8:f2:0e:bf:bf:a8:aa:
48:b1:2e:32:63:57:b4:99:11:83:f5:61:3c:73:b8:
8d:9d:4b:f5:2f:2a:69:5f:80:90:b1:75:5e:c1:d9:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:73:0F:30:F7:AD:62:AE:4E:E2:99:56:B6:95:43:ED:5F:00:35:34
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/EnMPMPetYq5O4plWtpVD7V8ANTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.240.0/21
85.91.40.0/22
185.83.120.0/22
195.88.100.0/23
IPv6:
2a00:7640::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b5:69:8b:e4:33:97:8a:bd:a0:a0:88:52:fb:56:0a:a7:fd:
66:5a:e3:98:88:67:21:6c:c7:6e:cd:5a:64:2f:60:2d:21:21:
52:3d:e2:5d:a1:f2:6d:87:33:04:17:d3:64:6e:42:82:6c:9f:
97:8d:c6:8d:44:1f:a5:46:94:03:85:aa:64:13:77:46:ac:cd:
7b:9f:3b:77:17:5a:d4:1a:9a:ee:3a:5c:f9:f5:04:1b:19:e1:
f3:6f:ba:12:11:48:37:fd:9b:04:cb:66:86:f4:c2:bd:bb:aa:
7d:5f:4e:1d:7b:6a:5e:62:88:a5:9c:48:df:76:00:19:41:41:
bc:29:e7:91:13:7e:f9:ec:47:fb:37:19:4f:c7:e9:7f:f6:1e:
32:0a:4d:f7:40:0f:78:c8:d9:9d:c2:0d:bc:c0:26:ac:49:09:
17:8d:3e:81:28:f9:60:fb:b2:6d:8e:9e:bf:6e:97:1f:14:75:
26:27:62:0b:07:45:95:29:04:a6:b4:a5:8f:2c:10:5a:15:57:
89:76:44:26:f8:ff:59:0a:40:33:72:01:09:f7:76:6d:3c:a8:
0c:87:ac:c7:4a:12:32:4a:50:cb:e2:8b:73:ca:ec:ce:38:a6:
12:93:19:20:47:14:ec:8f:3a:fc:bd:3e:fd:40:6d:1b:91:3b:
4e:91:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:16 2024 by rpki-client on console-ams.rpki-client.org