Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/EK8PqozXPbbhARaPSaJmhWpI8gs.roa
File: EK8PqozXPbbhARaPSaJmhWpI8gs.roa (raw, json)
Hash identifier: /xFux33omB8AuEhyBalGbkEK/KEmG7b6QsuPVMAehMU=
Subject key identifier: 10:AF:0F:AA:8C:D7:3D:B6:E1:01:16:8F:49:A2:66:85:6A:48:F2:0B
Certificate issuer: /CN=088612d4d36d62b09686d9eb8aab0527d4bbf741
Certificate serial: 012841E4
Authority key identifier: 08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYS1NNtYrCWhtnriqsFJ9S790E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/EK8PqozXPbbhARaPSaJmhWpI8gs.roa
Signing time: Sat 01 Jan 2022 05:53:49 +0000
ROA not before: Sat 01 Jan 2022 05:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.213.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19415524 (0x12841e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088612d4d36d62b09686d9eb8aab0527d4bbf741
Validity
Not Before: Jan 1 05:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10af0faa8cd73db6e101168f49a266856a48f20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:a0:75:38:da:74:23:fc:11:60:5c:5d:ea:
b9:3a:84:a9:e3:46:2b:b7:6c:91:6d:77:bb:dc:14:
29:b2:47:53:e7:3a:15:ef:1c:18:f0:54:15:5d:4a:
e2:59:48:a7:c7:1a:27:38:17:7a:bb:73:18:d4:04:
86:ae:99:66:d0:39:1b:61:2d:b7:91:f6:ee:10:70:
3c:32:17:d0:06:f1:0c:72:23:99:de:23:c4:7e:df:
a8:ab:85:6b:ae:1e:ea:f2:f3:a1:ff:7c:8f:16:ad:
d3:9a:24:1b:fa:f0:87:2f:64:78:27:86:e7:5c:e0:
69:dd:de:e7:bb:93:f3:3e:fb:5b:90:b7:c4:80:b3:
6e:04:06:f3:21:7b:9c:e6:86:b8:01:52:c8:3b:b4:
50:bc:6e:6f:8b:b7:37:37:9d:b8:f6:5c:17:03:49:
7d:ce:96:d7:49:66:18:51:d1:a4:59:41:30:cf:31:
0f:f2:21:3a:ce:6d:aa:fa:c6:0b:27:61:7a:92:9b:
76:fa:c2:9e:d5:ed:39:69:3a:1b:b3:b4:8b:1d:e5:
4c:bb:16:cd:d8:66:04:4a:22:c6:52:06:a2:ce:14:
5b:2f:d1:23:16:3b:b7:fb:7e:8b:b7:cc:92:65:6a:
ed:41:f6:de:67:ad:09:d2:7e:5d:c9:94:d2:f7:a9:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:0F:AA:8C:D7:3D:B6:E1:01:16:8F:49:A2:66:85:6A:48:F2:0B
X509v3 Authority Key Identifier:
keyid:08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYS1NNtYrCWhtnriqsFJ9S790E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/EK8PqozXPbbhARaPSaJmhWpI8gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/CIYS1NNtYrCWhtnriqsFJ9S790E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.194.0/24
Signature Algorithm: sha256WithRSAEncryption
15:82:27:6d:d6:7f:f8:93:75:5a:30:46:2d:2c:79:45:eb:48:
f9:72:72:ca:d0:a8:1c:c0:f3:1e:28:30:7c:8e:92:0d:24:4d:
8f:0a:f0:4a:eb:d1:fc:32:43:1a:c6:e4:95:05:16:20:ca:fb:
36:09:96:fa:60:43:25:a4:3a:2c:cd:b9:40:9e:99:bd:f9:ac:
8d:14:2d:64:8b:29:01:9b:0c:cf:d8:67:02:08:65:c2:a0:ec:
7c:87:0b:f1:5d:20:dd:dc:ed:26:12:85:24:56:0b:3f:42:97:
d5:7c:03:3d:f9:98:b5:a8:49:6c:9c:4c:a9:b9:61:76:2b:a1:
86:eb:8c:5f:9e:a2:62:e9:42:25:96:f5:34:be:b5:f6:1b:69:
95:7a:02:13:48:cf:92:f2:dd:5b:0f:1d:4b:62:53:39:89:1e:
d9:e0:56:2d:15:72:11:76:f0:6b:ec:3a:24:63:7d:c6:01:f9:
2a:5e:24:08:e8:fa:a3:1f:d6:c3:bb:ac:dd:ac:f4:9a:a6:ec:
d5:e7:34:90:bb:01:94:70:5f:77:46:71:8f:f1:ce:dd:0b:bb:
7b:1b:64:5d:44:86:d5:43:69:5c:b3:e9:57:f8:98:e3:81:54:
89:8e:b4:7d:5b:f1:ab:da:7d:ef:03:92:f6:0b:a9:e1:57:c6:
50:08:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:08 2023 by rpki-client on console-ams.rpki-client.org