Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EurFPdI0e2gKbsGQz31P0oyEGD0.roa
File: EurFPdI0e2gKbsGQz31P0oyEGD0.roa (raw, json)
Hash identifier: 0/lzuV2sepXKt/YGrleW3N6i5YYw2LmBP3Jd0M0W7Hg=
Subject key identifier: 12:EA:C5:3D:D2:34:7B:68:0A:6E:C1:90:CF:7D:4F:D2:8C:84:18:3D
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 033A763F
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EurFPdI0e2gKbsGQz31P0oyEGD0.roa
Signing time: Sat 01 Jan 2022 00:57:55 +0000
ROA not before: Sat 01 Jan 2022 00:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42994
IP address blocks: 45.144.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54163007 (0x33a763f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 00:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12eac53dd2347b680a6ec190cf7d4fd28c84183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:5a:d8:a0:31:7f:e1:3f:9c:61:a1:4e:7c:
1d:38:5f:15:27:95:99:89:ab:c6:06:be:c8:74:74:
bb:d9:c2:fe:04:a0:f8:74:6a:d5:91:c8:c7:ac:c1:
c9:98:cc:4a:69:89:ce:8e:43:c1:99:5b:80:8e:e5:
3f:0d:e9:76:47:9f:b1:c8:b9:6c:82:5d:40:14:b1:
37:12:cd:e0:6e:f7:29:31:a6:e4:fd:cb:68:e0:ff:
a6:75:7f:d2:1f:a0:de:c0:1b:95:25:78:3f:d7:55:
89:fd:bd:fc:51:d6:d3:fb:6d:42:7e:91:c4:15:0c:
7e:8b:03:ce:0b:a2:3d:67:02:ed:2a:86:e9:61:8e:
12:91:2f:b3:e1:32:29:53:fb:5e:00:79:fb:fd:19:
1a:91:5a:f7:d4:2b:06:60:97:0d:06:af:31:cc:c7:
8a:ed:96:ba:c3:be:17:65:2f:47:3d:58:13:a2:f4:
ce:1f:97:56:dd:90:e0:68:d0:55:ae:ea:36:e7:0e:
3c:50:b4:ab:4c:dc:de:eb:51:32:96:e5:e2:00:0c:
59:e1:65:cd:a3:74:f0:e8:9c:25:6c:7b:2f:57:7d:
ba:33:84:a3:b7:3f:27:42:bf:7f:ee:3f:14:66:e0:
af:aa:99:25:70:c6:ae:d4:aa:5e:f4:cc:20:b6:d8:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:C5:3D:D2:34:7B:68:0A:6E:C1:90:CF:7D:4F:D2:8C:84:18:3D
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EurFPdI0e2gKbsGQz31P0oyEGD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:14:47:e9:99:10:30:22:11:ca:1f:32:dc:36:9f:d8:6b:5c:
3e:d9:ee:68:a4:18:6c:51:1d:e4:ac:48:e7:95:d7:27:5a:10:
1f:0f:fe:33:43:c0:af:d4:f2:9f:13:f0:cd:a4:ef:d1:6f:dc:
3a:10:3e:28:db:f9:a8:8b:42:60:61:3f:9d:70:eb:60:1b:55:
d6:b3:fa:4b:55:87:08:be:f7:af:8b:44:42:8e:dd:93:57:f1:
b6:ca:0d:ed:06:bb:2f:5f:43:d9:3f:24:f9:b7:53:bb:6e:e9:
f7:f9:83:8d:51:12:94:85:76:07:4f:b7:2a:98:19:e4:44:0a:
eb:86:fb:fc:c3:a2:f7:46:7c:f9:ed:e4:e7:9f:2b:ff:81:cf:
24:7e:82:67:bd:36:7a:31:7f:8e:fe:c2:52:6d:1f:0f:90:03:
0a:bd:93:08:f8:03:b6:1a:84:58:b4:3f:fe:45:d7:8b:67:12:
d5:0b:2d:71:1c:a7:80:d3:57:14:e0:72:e3:85:53:a8:e4:7b:
08:6d:3d:9f:98:06:82:83:7f:b3:ce:b2:67:8b:e4:56:a0:4a:
8e:f4:38:e8:fe:c9:62:76:5f:61:74:f6:cd:3b:d5:96:52:b1:
17:8d:8f:7f:09:94:2d:25:e9:6d:86:3d:60:a2:b3:b0:e9:a3:
ba:64:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org