Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/eGDycOgXus_isgZbIzV7daIrc5s.roa
File: eGDycOgXus_isgZbIzV7daIrc5s.roa (raw, json)
Hash identifier: c9WgYTD4GOtpoS8bpIJxnN++i8qwwXCVSQ8B7bRblLo=
Subject key identifier: 78:60:F2:70:E8:17:BA:CF:E2:B2:06:5B:23:35:7B:75:A2:2B:73:9B
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01853FA2821CE60BE05455E4577707A2D074
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/eGDycOgXus_isgZbIzV7daIrc5s.roa
Signing time: Fri 23 Dec 2022 15:38:12 +0000
ROA not before: Fri 23 Dec 2022 15:38:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206766
IP address blocks: 91.194.10.0/24 maxlen: 24
79.143.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:a2:82:1c:e6:0b:e0:54:55:e4:57:77:07:a2:d0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Dec 23 15:38:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7860f270e817bacfe2b2065b23357b75a22b739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:ab:e3:9d:80:86:e6:8b:80:3d:52:e6:a1:
5b:9d:83:53:5f:04:dc:58:3a:3f:bd:f5:39:e6:3f:
dd:b3:07:10:18:eb:6f:f2:b3:af:15:26:f3:4e:28:
4f:51:de:70:8a:65:75:4b:53:4c:70:a7:b6:e7:8c:
58:dc:5c:0d:86:2e:02:25:a5:e9:ae:ea:2e:34:9e:
a5:c2:ab:b0:d0:cb:af:d2:ba:99:ca:8e:5f:dc:0c:
8f:33:61:43:e6:29:2e:fd:34:0d:dd:7f:22:da:5b:
60:af:e4:92:11:8f:70:69:e1:ac:72:72:f0:0d:69:
08:ec:43:98:45:11:8a:d8:17:73:d2:28:af:a8:e1:
cd:53:20:15:c8:f8:22:d5:76:45:31:3b:a5:dc:64:
d4:de:14:4e:57:8f:14:ec:d7:1b:43:dc:f9:86:a3:
79:27:9e:93:1e:95:c5:1e:e7:ea:0d:82:41:df:d6:
7b:cb:bf:19:57:8e:33:24:e2:29:24:7f:50:04:77:
ff:7e:2d:2f:33:10:5c:ab:93:38:2a:8a:29:b0:8d:
cc:bc:c8:c8:06:17:91:af:fe:5d:38:a6:f6:37:59:
04:ef:81:99:12:33:2b:e6:18:c2:7a:ce:aa:f2:1b:
a1:30:8a:2a:ad:99:ab:55:dd:e5:17:72:ad:35:9a:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:F2:70:E8:17:BA:CF:E2:B2:06:5B:23:35:7B:75:A2:2B:73:9B
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/eGDycOgXus_isgZbIzV7daIrc5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.19.0/24
91.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:89:df:d0:44:4a:07:64:00:e1:28:89:a4:c6:02:a1:44:73:
da:02:c4:63:d6:1f:2f:f6:5f:06:fd:dc:bb:fc:e0:ba:e9:4b:
7e:23:9f:ed:55:ab:29:79:48:26:81:b9:78:be:45:0f:e0:23:
38:c6:47:ed:01:e5:c7:6d:4c:69:5d:5f:e2:19:af:6d:a2:00:
e5:aa:2a:ba:e9:12:4c:6d:54:e9:70:74:fa:b0:56:84:88:03:
d0:86:8d:a0:1d:9d:4d:a4:6f:df:8c:a2:9a:78:4d:71:17:1c:
9b:32:39:d4:37:31:50:4a:e6:21:f3:33:9c:0f:36:b8:32:6b:
72:37:43:21:4a:ca:d7:b1:3f:53:56:1d:49:bf:98:f7:15:bf:
27:b9:6b:43:06:a4:ac:5d:aa:ba:b9:61:3c:cf:76:1b:e4:05:
84:18:20:40:90:c4:63:90:92:d9:12:cc:da:70:1a:e3:01:fa:
a5:42:e2:f3:8e:0c:40:f3:e6:48:d7:8d:60:e3:86:83:bc:36:
2f:80:f6:c7:47:99:02:44:b8:51:a9:77:09:74:db:af:e6:2a:
cd:82:81:04:06:ac:a9:f4:be:11:1c:80:da:d2:5c:8a:48:66:
58:9f:c3:74:aa:55:d0:45:3b:32:d8:d1:23:14:83:db:c7:dc:
82:ec:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-fra.rpki-client.org