Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/eWmGy_QQCJSarw76bebloiaDiSI.roa
File: eWmGy_QQCJSarw76bebloiaDiSI.roa (raw, json)
Hash identifier: 45Mj81flW59wabKi5CnjdRF/Q09AS4K4MI3h88k3As8=
Subject key identifier: 79:69:86:CB:F4:10:08:94:9A:AF:0E:FA:6D:E6:E5:A2:26:83:89:22
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 01B308C7
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/eWmGy_QQCJSarw76bebloiaDiSI.roa
Signing time: Fri 04 Mar 2022 11:21:29 +0000
ROA not before: Fri 04 Mar 2022 11:21:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206352
IP address blocks: 195.210.110.0/23 maxlen: 23
195.210.124.0/23 maxlen: 23
195.210.122.0/24 maxlen: 24
195.210.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28510407 (0x1b308c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Mar 4 11:21:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=796986cbf41008949aaf0efa6de6e5a226838922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:d5:64:37:0f:1b:d2:4b:42:ae:b6:36:95:
aa:c0:fc:07:9c:9c:1d:3e:9c:dd:3a:28:69:b3:b0:
61:ef:ad:9d:a1:d8:f7:91:15:da:ae:2e:db:40:be:
a9:eb:6a:cf:53:95:63:c3:78:87:31:dc:2c:8c:71:
10:9c:8b:29:61:cd:ac:ef:34:07:f4:71:27:02:f9:
c0:68:76:7d:d5:b2:22:77:67:6c:e4:75:7f:b0:81:
de:ba:0d:37:5d:39:14:85:85:59:de:3e:3b:4a:3b:
f2:5b:e4:b3:7a:18:5f:15:f6:e9:dc:7d:c2:0b:b9:
50:66:ff:ed:35:af:6c:34:55:89:21:25:81:e1:f3:
ea:9d:e9:14:a2:b3:fa:76:64:3b:61:df:b9:1d:b5:
01:df:c8:75:a1:c2:17:46:8e:35:04:fc:f7:06:05:
8d:3b:9a:ce:97:d5:2d:81:30:bf:36:d2:18:d4:02:
de:6a:b3:a6:3e:c4:64:c7:0b:40:8b:41:0c:38:fa:
51:ce:bf:39:12:54:f2:2f:d5:fc:bb:4b:86:36:b5:
85:9e:f1:47:2d:9c:d7:2b:1f:a5:d5:86:c1:87:c7:
a9:4a:04:82:d5:ca:1a:54:c5:51:59:02:36:28:35:
4e:e8:67:29:11:0b:9a:39:de:d5:9e:3b:ae:a3:79:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:86:CB:F4:10:08:94:9A:AF:0E:FA:6D:E6:E5:A2:26:83:89:22
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/eWmGy_QQCJSarw76bebloiaDiSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.110.0/23
195.210.122.0/24
195.210.124.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:85:5d:ae:5b:c3:76:28:45:8e:60:9a:a4:2c:59:1b:eb:f5:
bd:02:75:41:f3:4c:ce:55:81:79:9b:9f:31:ed:0c:b3:20:53:
a6:79:cf:fe:1c:c6:ca:11:ec:4f:3e:92:fc:5f:1a:27:c7:8d:
f4:a9:ea:f8:f4:fc:ec:f3:4f:14:f4:68:e8:86:d4:6b:bf:09:
b7:00:dd:7d:cc:af:c6:ee:53:d4:1b:b2:1e:dd:98:cc:ff:f4:
81:7f:89:ec:fe:f4:85:63:44:43:56:08:83:ec:fd:b8:3c:59:
2f:2e:9e:17:a5:d4:6e:31:8e:8c:2c:b9:af:44:d2:e4:ae:23:
eb:f0:92:a1:00:b3:97:0f:53:36:99:50:0c:64:37:72:d2:62:
cd:2d:52:ef:7c:8b:c5:73:28:b8:06:93:64:17:3e:c9:af:0f:
e4:0c:b3:ac:8c:be:02:4b:0e:50:db:c6:08:28:bb:20:66:bc:
28:7f:8d:e1:ed:f0:7b:bf:02:40:75:d6:12:b6:9c:fc:b0:67:
5c:03:3e:80:e4:e8:0b:e8:c8:99:76:5a:42:19:0e:90:bf:f4:
b4:5d:20:aa:f6:d6:13:5e:4b:d7:63:0d:b7:15:6d:9b:88:da:
a7:bc:20:b7:42:20:2e:32:7d:c1:2f:a3:5e:d6:5d:6b:e2:c8:
37:ee:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org